@stim-cli/core 1.26.0 → 1.28.0

package/dist/state.mjs

@@ -1,16 +1,15 @@
 import { S as tryAcquireClaim, _ as releaseClaim, f as isClaimRefusal, g as readClaimSet } from "./ownership-claim-DG2GMIoo.mjs";
 import { inspectProcessIdentity } from "./process-identity.mjs";
-import { $ as withDirLockAsync, C as workspaceName, J as readJsonFile, Q as withDirLock, T as workspaceStateDir, U as ambientContext, W as ambientEnv, X as readStateFile, Y as readJsonObject, Z as withStateReadCache, _ as rotatedLogPath, d as ensurePrivateDir, g as rotateLog, q as isJsonObject, t as LOG_ROTATE_BYTES, u as configDir } from "./core-Cd3b_fBm.mjs";
+import { $ as withDirLockAsync, C as workspaceName, J as readJsonFile, Q as withDirLock, T as workspaceStateDir, U as ambientContext, W as ambientEnv, X as readStateFile, Y as readJsonObject, Z as withStateReadCache, _ as rotatedLogPath, d as ensurePrivateDir, g as rotateLog, q as isJsonObject, t as LOG_ROTATE_BYTES, u as configDir } from "./core-Hohf5Wnt.mjs";
 import { readOrCreateKeyFile } from "./noise-session.mjs";
 import { validHomeId } from "./workspace-link.mjs";
 import { a as workspaceSummary, i as statusViews, n as applyKeyedDelta, o as withDerivedFacts, r as SUMMARY_ARCHIVES, s as withGitChip, t as KeyedEntities } from "./keyed-delta-BBoOeR2J.mjs";
-import { appendFileSync, closeSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync, watch } from "node:fs";
+import { appendFileSync, closeSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync, watch, writeFileSync, writeSync } from "node:fs";
 import { availableParallelism, homedir, loadavg } from "node:os";
 import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep, win32 } from "node:path";
 import { createHash, randomBytes } from "node:crypto";
 import { setImmediate as setImmediate$1 } from "node:timers/promises";
 import { lstat, open, readFile, readdir, stat } from "node:fs/promises";
-import { isIP } from "node:net";
 import { StringDecoder } from "node:string_decoder";
 //#region state/log-selection.ts
 var BoundedSelection = class {
@@ -645,6 +644,10 @@ function supervisorPidFile(projectRoot) {
 function workspaceStateFile(projectRoot) {
 	return join(workspaceStateDir(projectRoot), "state.json");
 }
+/** The dependency directories `gc --delete` deleted from the workspace's worktree, apart from state.json so writing it is not workspace activity. */
+function workspaceLightenedFile(projectRoot) {
+	return join(workspaceStateDir(projectRoot), "lightened.json");
+}
 function workspaceStateLock(projectRoot) {
 	return join(workspaceStateDir(projectRoot), "state.lock");
 }
@@ -719,6 +722,12 @@ function easSessionLedgerLock(root = easMachineStateRoot()) {
 function deviceViewersDir() {
 	return join(configDir(), "viewers");
 }
+function budgetSweepFile() {
+	return join(configDir(), "budget-sweep.json");
+}
+function budgetSweepLock() {
+	return join(configDir(), "budget-sweep.lock");
+}
 function statsFile() {
 	return join(configDir(), "stats.json");
 }
@@ -740,6 +749,15 @@ function gcLogDir() {
 function gcLogFile() {
 	return join(gcLogDir(), "gc.ndjson");
 }
+function buildLedgerDir() {
+	return join(configDir(), "builds");
+}
+function buildLedgerFile() {
+	return join(buildLedgerDir(), "builds.ndjson");
+}
+function buildLedgerLock() {
+	return join(buildLedgerDir(), "builds.lock");
+}
 function maintenanceChildLogFile() {
 	return join(maintenanceDir(), "child.log");
 }
@@ -759,6 +777,10 @@ function archiveDir(id) {
 function archiveLock() {
 	return join(archiveRoot(), ".lock");
 }
+/** Uncommitted changes of removed worktrees: `<repository>/<branch-or-dir>-<timestamp>/` holding `manifest.json`. */
+function worktreeArchiveRoot() {
+	return join(archiveRoot(), "worktrees");
+}
 /** This machine's own long-term X25519 key as a client of other machines' stim-servers. */
 function clientIdentityKeyFile() {
 	return join(configDir(), "client-identity.key");
@@ -1166,11 +1188,20 @@ const IOS_SIMULATOR_APPS = [
 	"stim-desktop"
 ];
 const ANDROID_EMULATOR_APPS = ["emulator", "stim-desktop"];
-const OFFLOAD_MODES = [
-	"auto",
-	"force",
-	"off"
-];
+const REPLACED_SETTINGS = { "remote.buildMode": {
+	key: "remote.build",
+	env: "STIM_REMOTE_BUILD_MODE",
+	value: (old) => old === "auto" ? "auto" : old === "force" ? "remote" : old === "off" ? "local" : null
+} };
+function replacementAdvice(key, old) {
+	const replaced = REPLACED_SETTINGS[key];
+	if (!replaced) return null;
+	const value = replaced.value(old);
+	return {
+		key: replaced.key,
+		command: value ? `stim settings set ${replaced.key} ${value}` : null
+	};
+}
 const WEB_VIEWPORTS = ["desktop", "phone"];
 const PROJECT = [
 	"workspace",
@@ -1288,10 +1319,10 @@ const SETTINGS = [
 		type: {
 			kind: "string",
 			pattern: TAILNET_MACHINE_PATTERN,
-			patternHelp: "eas, proxy, auto, local, or a tailnet machine name"
+			patternHelp: "eas, proxy, local, auto, remote, remote-only, or a tailnet machine name"
 		},
 		scopes: EVERY,
-		description: "Default iOS remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this machine is full or busy; local runs here, overriding a lower layer"
+		description: "Where the iOS simulator runs: local here (overriding a lower layer); auto here first, then a remote.machines entry when this machine is full or busy; remote on a remote.machines entry in order, here only when none takes it; remote-only the same but never here; a machine name exactly that machine; eas or proxy a remote device backend"
 	},
 	{
 		key: "ios.projectPath",
@@ -1467,10 +1498,10 @@ const SETTINGS = [
 		type: {
 			kind: "string",
 			pattern: TAILNET_MACHINE_PATTERN,
-			patternHelp: "eas, proxy, auto, local, or a tailnet machine name"
+			patternHelp: "eas, proxy, local, auto, remote, remote-only, or a tailnet machine name"
 		},
 		scopes: EVERY,
-		description: "Default Android remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this machine is full or busy; local runs here, overriding a lower layer"
+		description: "Where the Android emulator runs: local here (overriding a lower layer); auto here first, then a remote.machines entry when this machine is full or busy; remote on a remote.machines entry in order, here only when none takes it; remote-only the same but never here; a machine name exactly that machine; eas or proxy a remote device backend"
 	},
 	{
 		key: "metro.tunnel",
@@ -1585,6 +1616,16 @@ const SETTINGS = [
 		scopes: PROJECT,
 		description: "Arguments passed directly to the owned macOS development executable."
 	},
+	{
+		key: "macos.remote",
+		type: {
+			kind: "string",
+			pattern: `^(?![Ee][Aa][Ss]$|[Pp][Rr][Oo][Xx][Yy]$)${TAILNET_MACHINE_PATTERN.slice(1)}`,
+			patternHelp: "local, auto, remote, remote-only, or a tailnet machine name (macOS has no eas or proxy backend)"
+		},
+		scopes: EVERY,
+		description: "Where stim macos launches the app: local here; auto here unless this machine is busy, then a remote.machines entry; remote on a remote.machines entry in order, here only when none takes it; remote-only the same but never here; a machine name exactly that machine. The --remote flag overrides it"
+	},
 	{
 		key: "macos.assetCatalog",
 		type: RELATIVE_PATH,
@@ -1639,7 +1680,7 @@ const SETTINGS = [
 		default: true,
 		env: "STIM_ARCHIVE_ENABLED",
 		scopedHomeValue: false,
-		description: "Keep workspace history on removal; false under STIM_HOME unless explicitly enabled"
+		description: "Keep workspace history on removal, and archive a dirty finished worktree's changes before gc removes it; false keeps such worktrees, and is the default under STIM_HOME unless explicitly enabled"
 	},
 	{
 		key: "archive.maxAgeDays",
@@ -1647,7 +1688,7 @@ const SETTINGS = [
 		scopes: MACHINE,
 		default: 30,
 		env: "STIM_ARCHIVE_MAX_AGE_DAYS",
-		description: "Days to keep archived workspace records; 0 keeps nothing"
+		description: "Days to keep archived workspace records and worktree change archives; 0 keeps nothing"
 	},
 	{
 		key: "archive.maxCount",
@@ -1663,7 +1704,7 @@ const SETTINGS = [
 		scopes: MACHINE,
 		default: 5,
 		env: "STIM_ARCHIVE_MAX_TOTAL_GB",
-		description: "Total archived bytes in binary GB; 0 keeps no artifacts"
+		description: "Total archived bytes in binary GB, and separately the worktree change archives; 0 keeps no artifacts"
 	},
 	{
 		key: "archive.logs.maxAgeDays",
@@ -2041,7 +2082,7 @@ const SETTINGS = [
 		scopes: MACHINE,
 		default: 10,
 		env: "STIM_MAINTENANCE_PRESSURE_PROTECT_MINUTES",
-		description: "Protection window, in minutes, that replaces maintenance.protectRecentHours at disk pressure levels 2 and 3"
+		description: "Protection window, in minutes, that replaces maintenance.protectRecentHours at disk pressure levels 2 and 3, except for workspace build outputs and build directories, which level 2 keeps for 15 minutes after the last ios, android or macos run"
 	},
 	{
 		key: "maintenance.gradleVersionIdleDays",
@@ -2061,7 +2102,7 @@ const SETTINGS = [
 		scopes: MACHINE,
 		default: true,
 		env: "STIM_MAINTENANCE_REMOVE_FINISHED_WORKTREES",
-		description: "Remove clean linked worktrees whose branch or pull request finished, under gc.worktreeGraceMinutes, and at disk pressure level 3 clean, pushed ones with no commits of their own"
+		description: "Remove linked worktrees whose branch or pull request finished, under gc.worktreeGraceMinutes, archiving a dirty one's uncommitted files first, and clean, pushed ones with no commits of their own once idle"
 	},
 	{
 		key: "maintenance.removeIdleWorktrees",
@@ -2202,7 +2243,7 @@ const SETTINGS = [
 		key: "remote.machines",
 		type: { kind: "strings" },
 		scopes: MACHINE,
-		description: "Tailscale names of the remote machines this machine may build on and host owned simulators on, each optionally with :<port> of its tailscale serve route (default 7443); what each is used for follows the build and device-host approvals it grants, which doctor --fix asks for separately"
+		description: "Tailscale names of the remote machines this machine may build on and host owned simulators, emulators and macOS apps on, each optionally with :<port> of its tailscale serve route (default 7443). The order is the placement priority: each workload goes to the first machine with room and a load under its own limit. What each is used for follows the build and device-host approvals it grants, which doctor --fix asks for separately"
 	},
 	{
 		key: "remote.buildPoolDisabled",
@@ -2223,7 +2264,7 @@ const SETTINGS = [
 		type: BOOLEAN,
 		scopes: EVERY,
 		default: false,
-		description: "When ios.remote or android.remote is auto, this machine is at its concurrency.maxDevices cap and no remote.machines entry takes the run, run the simulator or emulator on a billed EAS Simulator instead of waiting or refusing, when eas-cli can"
+		description: "When ios.remote or android.remote is auto or remote, this machine is at its concurrency.maxDevices cap and no remote.machines entry takes the run, run the simulator or emulator on a billed EAS Simulator instead of waiting or refusing, when eas-cli can; remote-only never uses it"
 	},
 	{
 		key: "remote.easMaxDurationMinutes",
@@ -2241,23 +2282,12 @@ const SETTINGS = [
 		type: {
 			kind: "string",
 			pattern: TAILNET_MACHINE_PATTERN,
-			patternHelp: "auto, local, or a tailnet machine name"
+			patternHelp: "local, auto, remote, remote-only, or a tailnet machine name"
 		},
 		scopes: MACHINE,
 		default: "auto",
 		env: "STIM_REMOTE_BUILD",
-		description: "Build placement: auto follows remote.buildMode within enabled automatic pool members; local always builds here; a name in remote.machines requires that remote machine without fallback. The ios, android and macos --remote-build flag overrides this setting and its environment override"
-	},
-	{
-		key: "remote.buildMode",
-		type: {
-			kind: "choice",
-			choices: OFFLOAD_MODES
-		},
-		scopes: MACHINE,
-		default: "auto",
-		env: "STIM_REMOTE_BUILD_MODE",
-		description: "When remote.build is auto, where iOS simulator Debug, Android emulator debug and macOS SwiftPM Debug builds run: auto builds here while this machine has a free concurrency.maxBuilds slot and its load is under server.maxLoadPerCore, and otherwise builds on a less loaded machine in remote.machines; force builds on an enabled remote machine whenever one can take the build; off builds here when local is enabled in remote.buildPoolDisabled"
+		description: "Where iOS simulator Debug, Android emulator debug and macOS SwiftPM Debug builds run: local here; auto here while it has a free concurrency.maxBuilds slot and load under server.maxLoadPerCore, otherwise on a remote.machines entry; remote on a remote.machines entry in order, here only when none takes the build; remote-only the same but never here; a machine name exactly that machine without fallback. The ios, android and macos --remote-build flag overrides this setting and its environment override"
 	},
 	{
 		key: "server.maxLoadPerCore",
@@ -2267,7 +2297,7 @@ const SETTINGS = [
 		},
 		scopes: MACHINE,
 		default: 2,
-		description: "Load per core (5-minute load average divided by the CPU count) at which this machine counts as saturated: it declines builds other machines send it, automatic build placement stops preferring it, and automatic iOS and Android device placement treats it as busy"
+		description: "Load per core (5-minute load average divided by the CPU count) at which this machine counts as saturated: it declines builds other machines send it, reports the limit in its device offers so other machines skip it like a full one, stops preferring itself for automatic placement, and automatic iOS, Android and macOS placement treats it as busy"
 	},
 	{
 		key: "server.workerRoot",
@@ -2503,11 +2533,21 @@ function liveNativeBuilds() {
 	}
 	return count;
 }
-function machineCapacity() {
+/** The 5-minute load average per CPU, rounded to one decimal, and the CPU count it divides by. */
+function loadPerCore() {
 	const cpus = Math.max(1, availableParallelism());
 	return {
 		cpus,
-		loadPerCore: Math.round(loadavg()[1] / cpus * 10) / 10,
+		loadPerCore: Math.round(loadavg()[1] / cpus * 10) / 10
+	};
+}
+function loadState(load, busyAt, limit) {
+	if (limit !== null && limit > 0 && load >= limit) return "holding";
+	return load >= busyAt ? "busy" : "free";
+}
+function machineCapacity() {
+	return {
+		...loadPerCore(),
 		builds: liveNativeBuilds() + liveOffloadedSlots(),
 		maxBuilds: getConcurrencyLimits().maxBuilds,
 		maxLoadPerCore: maxLoadPerCore()
@@ -2698,6 +2738,282 @@ function createDebugLog(component, { env, now = Date.now, base = () => ({}) } =
 	};
 }
 //#endregion
+//#region state/trace.ts
+const TRACE_ENV = "STIM_TRACE";
+const OWNER_ENV = "STIM_TRACE_OWNER";
+const PHASE_TID_BASE = 1e3;
+const MAX_ARGS = 60;
+const MAX_ARG_CHARS = 240;
+const MAX_LINE_CHARS = 500;
+const SCAN_ARG_CHARS = 1e3;
+const SCAN_LINE_CHARS = 2e3;
+const SECRET_WORDS = "token|secret|ticket|pass|pwd|otp|credential|cookie|api[-_]?key|access[-_]?key|private[-_]?key|auth";
+const SECRET_NAME = new RegExp(SECRET_WORDS, "i");
+const SECRET_FLAG = String.raw`--?[A-Za-z0-9_.-]*(?:${SECRET_WORDS})[A-Za-z0-9_.-]*`;
+const SECRET_FLAG_VALUE = new RegExp(String.raw`(${SECRET_FLAG})(=|\s+)(?:'[^']*'|"[^"]*"|\S+)`, "gi");
+const SECRET_ASSIGNMENT = new RegExp(String.raw`([A-Za-z0-9_]*(?:${SECRET_WORDS})[A-Za-z0-9_]*)=(?:'[^']*'|"[^"]*"|[^\s&]+)`, "gi");
+const URL_USERINFO = /(\/\/)[^/\s?#]*@/g;
+const SECRET_HEADER = new RegExp(String.raw`(\b[A-Za-z-]*(?:${SECRET_WORDS})[A-Za-z-]*:\s*)[^'"\r\n]+`, "gi");
+const AUTH_SCHEME = /\b(Bearer|Basic)\s+[A-Za-z0-9._~+/=-]{8,}/gi;
+const TOKEN_SHAPE = /\b(?:(?:gh[pousr]_|github_pat_|sk-|[sr]k_(?:live|test)_|xox[abprs]-|AKIA|AIza|glpat-)[A-Za-z0-9_-]{10,}|npm_[A-Za-z0-9]{36}|eyJ[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]*)/g;
+const CREDENTIAL_FLAGS = {
+	curl: { "": [
+		"-u",
+		"-U",
+		"--user",
+		"--proxy-user"
+	] },
+	security: {
+		"unlock-keychain": ["-p"],
+		"create-keychain": ["-p"],
+		import: ["-P"],
+		export: ["-P"]
+	}
+};
+function credentialFlagsOf(program, subcommand) {
+	const name = basename(program);
+	const flags = Object.hasOwn(CREDENTIAL_FLAGS, name) ? CREDENTIAL_FLAGS[name] : void 0;
+	const key = flags && Object.hasOwn(flags, "") ? "" : subcommand ?? "";
+	return new Set(flags && Object.hasOwn(flags, key) ? flags[key] : []);
+}
+function scrubText(text, exact) {
+	return exact.filter(Boolean).reduce((acc, value) => acc.split(value).join("***"), text).replace(URL_USERINFO, "$1[redacted]@").replace(SECRET_ASSIGNMENT, "$1=[redacted]").replace(SECRET_HEADER, "$1[redacted]").replace(AUTH_SCHEME, "$1 [redacted]").replace(TOKEN_SHAPE, "[redacted]");
+}
+/**
+* `args` with the value of any flag or assignment that looks like a secret, credentials in URLs, token shapes and
+* the `exact` values replaced. `program` selects the flags that carry a credential without a secret-looking name,
+* such as `curl -u`.
+*/
+function redactArgv(args, exact = [], program = "") {
+	const out = [];
+	const credentialFlags = credentialFlagsOf(program, args[0]);
+	let redactNext = false;
+	for (const arg of args.slice(0, MAX_ARGS)) {
+		const flag = /^(--?[A-Za-z0-9_.-]+)=/.exec(arg)?.[1];
+		const assignment = /^([A-Za-z_][A-Za-z0-9_]*)=/.exec(arg)?.[1];
+		const attached = arg.length > 2 && credentialFlags.has(arg.slice(0, 2)) ? arg.slice(0, 2) : null;
+		if (redactNext) {
+			out.push("[redacted]");
+			redactNext = false;
+		} else if (credentialFlags.has(arg)) {
+			out.push(arg);
+			redactNext = true;
+		} else if (attached) out.push(`${attached}[redacted]`);
+		else if (flag) out.push(SECRET_NAME.test(flag) || credentialFlags.has(flag) ? `${flag}=[redacted]` : clip(scrubText(arg.slice(0, SCAN_ARG_CHARS), exact)));
+		else if (/^--?[A-Za-z0-9_.-]+$/.test(arg) && SECRET_NAME.test(arg)) {
+			out.push(arg);
+			redactNext = true;
+		} else if (assignment && SECRET_NAME.test(assignment)) out.push(`${assignment}=[redacted]`);
+		else if (/\s/.test(arg)) out.push(redactCommandLine(arg, exact));
+		else out.push(clip(scrubText(arg.slice(0, SCAN_ARG_CHARS), exact)));
+	}
+	if (args.length > MAX_ARGS) out.push(`[+${args.length - MAX_ARGS} more]`);
+	return out;
+}
+function clip(text, max = MAX_ARG_CHARS) {
+	return text.length > max ? `${text.slice(0, max)}...` : text;
+}
+/** A shell command line with the same redactions as `redactArgv`, clipped to a fixed length. */
+function redactCommandLine(command, exact = []) {
+	return clip(scrubText(command.slice(0, SCAN_LINE_CHARS).replace(SECRET_FLAG_VALUE, "$1$2[redacted]"), exact), MAX_LINE_CHARS);
+}
+const microseconds = () => Math.round((performance.timeOrigin + performance.now()) * 1e3);
+let current$1 = null;
+let attempted = null;
+function emit(sink, event) {
+	try {
+		const line = Buffer.from(`${JSON.stringify({
+			...event,
+			pid: process.pid
+		})},\n`);
+		for (let written = 0; written < line.length;) written += writeSync(sink.fd, line, written);
+	} catch {
+		sink.fd = -1;
+	}
+}
+function nameThread(sink, tid, name) {
+	if (sink.named.has(tid)) return;
+	sink.named.add(tid);
+	emit(sink, {
+		ph: "M",
+		name: "thread_name",
+		tid,
+		args: { name }
+	});
+}
+function finish(sink, span, args) {
+	if (!sink.open.delete(span)) return;
+	if (span.lane !== null) sink.lanes[span.lane] = false;
+	if (sink.fd < 0) return;
+	const end = microseconds();
+	emit(sink, {
+		name: span.name,
+		cat: span.cat,
+		ph: "X",
+		ts: span.ts,
+		dur: Math.max(0, end - span.ts),
+		tid: span.tid,
+		...args || Object.keys(span.args).length ? { args: {
+			...span.args,
+			...args
+		} } : {}
+	});
+}
+function claimRoot() {
+	const path = process.env[TRACE_ENV];
+	if (!path) return;
+	try {
+		const absolute = resolve(path);
+		if (process.env[OWNER_ENV] === absolute) return;
+		mkdirSync(dirname(absolute), { recursive: true });
+		writeFileSync(absolute, "[\n");
+		process.env[OWNER_ENV] = absolute;
+	} catch {}
+}
+function openSink(path) {
+	try {
+		const absolute = resolve(path);
+		mkdirSync(dirname(absolute), { recursive: true });
+		try {
+			writeFileSync(absolute, "[\n", { flag: "wx" });
+		} catch (error) {
+			if (!(error instanceof Error && "code" in error && error.code === "EEXIST")) throw error;
+		}
+		process.env[TRACE_ENV] = absolute;
+		const sink = {
+			path: absolute,
+			fd: openSync(absolute, "a"),
+			lanes: [],
+			named: /* @__PURE__ */ new Set(),
+			open: /* @__PURE__ */ new Set(),
+			tracks: /* @__PURE__ */ new Map()
+		};
+		emit(sink, {
+			ph: "M",
+			name: "process_name",
+			args: { name: `${basename(process.argv[1] ?? "node").replace(/\.[cm]?[jt]s$/, "")} ${process.pid}` }
+		});
+		process.on("exit", (code) => {
+			for (const span of sink.open) finish(sink, span, span.cat === "command" ? { exit: code } : { unfinished: true });
+		});
+		return sink;
+	} catch {
+		return null;
+	}
+}
+function active() {
+	const path = process.env[TRACE_ENV];
+	if (!path) return null;
+	if (path === attempted || path === current$1?.path) return current$1 && current$1.fd >= 0 ? current$1 : null;
+	attempted = path;
+	current$1 = openSink(path);
+	return current$1;
+}
+function begin(name, args, cat = "span") {
+	const sink = active();
+	if (!sink) return NO_END;
+	let lane = sink.lanes.indexOf(false);
+	if (lane < 0) lane = sink.lanes.length;
+	sink.lanes[lane] = true;
+	const tid = lane + 1;
+	nameThread(sink, tid, `spans ${tid}`);
+	const span = {
+		name,
+		cat,
+		tid,
+		lane,
+		ts: microseconds(),
+		args: args ?? {}
+	};
+	sink.open.add(span);
+	return (endArgs) => finish(sink, span, endArgs);
+}
+const NO_END = () => {};
+const NO_PHASES = {
+	enter: () => {},
+	end: () => {}
+};
+function phases(track) {
+	const sink = active();
+	if (!sink) return NO_PHASES;
+	const tid = sink.tracks.get(track) ?? PHASE_TID_BASE + sink.tracks.size;
+	sink.tracks.set(track, tid);
+	nameThread(sink, tid, `phases: ${track}`);
+	let open = null;
+	const close = (args) => {
+		if (open) finish(sink, open, args);
+		open = null;
+	};
+	return {
+		enter(name, args) {
+			if (open?.name === name) return;
+			close();
+			open = {
+				name,
+				cat: "phase",
+				tid,
+				lane: null,
+				ts: microseconds(),
+				args: args ?? {}
+			};
+			sink.open.add(open);
+		},
+		end: close
+	};
+}
+/**
+* Timing spans for one stim process tree, written as Chrome trace events (open the file in Perfetto or
+* chrome://tracing) when `STIM_TRACE=<path>` is set. Unset, every call is one environment check. A stim command
+* (`trace.command`) truncates the file and writes `[`; every other process that inherits the variable appends one
+* event per line, creating the file if it is missing, so the file has no closing bracket. Child process arguments are written through `redactArgv`.
+*/
+const trace = {
+	enabled: () => active() !== null,
+	begin: (name, args) => begin(name, args),
+	command(name, args) {
+		claimRoot();
+		begin(name, args, "command");
+	},
+	beginExec: (name, args) => begin(name, args, "exec"),
+	span(name, fn, args) {
+		const end = begin(name, args);
+		try {
+			const result = fn();
+			end();
+			return result;
+		} catch (error) {
+			end({ error: true });
+			throw error;
+		}
+	},
+	async spanAsync(name, fn, args) {
+		const end = begin(name, args);
+		try {
+			const result = await fn();
+			end();
+			return result;
+		} catch (error) {
+			end({ error: true });
+			throw error;
+		}
+	},
+	mark(name, args) {
+		const sink = active();
+		if (!sink) return;
+		nameThread(sink, 1, "spans 1");
+		emit(sink, {
+			name,
+			cat: "mark",
+			ph: "i",
+			s: "t",
+			ts: microseconds(),
+			tid: 1,
+			...args ? { args } : {}
+		});
+	},
+	phases
+};
+//#endregion
 //#region state/home-identity.ts
 /** The persistent, nonsecret identity of this Stim home; null until the CLI initializes it. */
 function readHomeIdentity(config = loadConfig()) {
@@ -2898,7 +3214,8 @@ const SOURCES = [
 	"agent",
 	"maintenance",
 	"placement",
-	"gc"
+	"gc",
+	"builds"
 ];
 function levelRank(level) {
 	const i = LEVELS.indexOf(level);
@@ -3926,6 +4243,130 @@ async function withErrorContext(generations, { extra = [], ...options }, selecte
 	return matched.map((record) => contextual.get(record) ?? record);
 }
 //#endregion
+//#region state/ndjson-tail.ts
+const HEAD_BYTES = 64;
+function generation(path) {
+	return {
+		path,
+		id: null,
+		offset: 0,
+		head: Buffer.alloc(0),
+		records: []
+	};
+}
+function reset(gen) {
+	gen.id = null;
+	gen.offset = 0;
+	gen.head = Buffer.alloc(0);
+	gen.records = [];
+}
+function fileId(stats) {
+	return `${stats.dev}:${stats.ino}`;
+}
+function readAt(fd, length, position) {
+	const buffer = Buffer.allocUnsafe(length);
+	let filled = 0;
+	while (filled < length) {
+		const n = readSync(fd, buffer, filled, length - filled, position + filled);
+		if (n === 0) break;
+		filled += n;
+	}
+	return buffer.subarray(0, filled);
+}
+function advance(gen) {
+	let fd;
+	try {
+		fd = openSync(gen.path, "r");
+	} catch {
+		const had = gen.id !== null;
+		reset(gen);
+		return had;
+	}
+	try {
+		const stats = fstatSync(fd, { bigint: true });
+		const id = fileId(stats);
+		const size = Number(stats.size);
+		let changed = false;
+		if (gen.id !== id || size < gen.offset || gen.head.length > 0 && !readAt(fd, gen.head.length, 0).equals(gen.head)) {
+			changed = gen.id !== null || gen.records.length > 0;
+			reset(gen);
+			gen.id = id;
+		}
+		const length = size - gen.offset;
+		if (length <= 0) return changed;
+		const buffer = readAt(fd, length, gen.offset);
+		const end = buffer.lastIndexOf(10);
+		if (end < 0) return changed;
+		const added = parseNdjsonText(buffer.toString("utf-8", 0, end + 1));
+		for (const record of added) gen.records.push(record);
+		if (gen.head.length < HEAD_BYTES) gen.head = Buffer.concat([gen.head, buffer.subarray(0, end + 1)]).subarray(0, HEAD_BYTES);
+		gen.offset += end + 1;
+		return changed || added.length > 0;
+	} finally {
+		closeSync(fd);
+	}
+}
+function statId(path) {
+	try {
+		return fileId(statSync(path, { bigint: true }));
+	} catch {
+		return null;
+	}
+}
+/**
+* Returns a reader of `file` and its rotated generation that yields, on every call, the records a full
+* `readNdjsonGenerations(file)` would, while reading only the bytes appended since the previous call. A file renamed
+* to its rotated generation between two calls is finished from there; any other replacement or a shrunk file is
+* read again from its start. A file rewritten in place to at least its previous length is not detected.
+*/
+function createNdjsonTail(file) {
+	const rotated = generation(rotatedLogPath(file));
+	const current = generation(file);
+	let all = [];
+	return () => {
+		let changed = false;
+		if (current.id !== null && statId(file) !== current.id && statId(rotated.path) === current.id) {
+			rotated.id = current.id;
+			rotated.offset = current.offset;
+			rotated.head = current.head;
+			rotated.records = current.records;
+			reset(current);
+			changed = true;
+		}
+		changed = advance(rotated) || changed;
+		changed = advance(current) || changed;
+		if (changed) all = rotated.records.concat(current.records);
+		return all;
+	};
+}
+//#endregion
+//#region state/placement.ts
+/**
+* The placement words every workload shares (`remote.build`, `ios.remote`, `android.remote`, `macos.remote` and their
+* flags). Anything else a setting holds is a machine name, or for devices `eas` or `proxy`.
+*
+* - `local`: this machine only.
+* - `auto`: this machine first, a remote machine when this one is full or busy.
+* - `remote`: remote machines first, in `remote.machines` order; this machine only when none takes the run.
+* - `remote-only`: remote machines in `remote.machines` order, never this machine.
+*/
+const PLACEMENT_WORDS = [
+	"local",
+	"auto",
+	"remote",
+	"remote-only"
+];
+function placementWord(value) {
+	const word = value.trim().toLowerCase();
+	return PLACEMENT_WORDS.find((each) => each === word) ?? null;
+}
+function prefersRemote(word) {
+	return word === "remote" || word === "remote-only";
+}
+function mayRunHere(word) {
+	return word !== "remote-only";
+}
+//#endregion
 //#region state/recordings.ts
 /** The footage stim-server keeps per device: the last 15 minutes recorded, however long ago. */
 const RECORDING_FOOTAGE_MS = 9e5;
@@ -4802,6 +5243,14 @@ function lastUseFrom(state, logMtimes) {
 	].filter(Number.isFinite);
 	return candidates.length ? Math.max(...candidates) : NaN;
 }
+/**
+* When an ios, android or macos run last finished in the workspace, from its recorded builds (a cache hit counts),
+* in epoch milliseconds; NaN when it records none. Dev server starts, reloads and logs do not count.
+*/
+function lastNativeUseFrom(state) {
+	const times = [...Object.values(readLastBuilds(state)), ...Object.values(readBuildHistory(state)).flatMap((entries) => entries.slice(0, 1))].map((run) => Date.parse(run.finishedAt ?? run.startedAt)).filter(Number.isFinite);
+	return times.length ? Math.max(...times) : NaN;
+}
 const MAINTENANCE_LOG_NAME = "maintenance.ndjson";
 /**
 * When the workspace was last used, in epoch milliseconds. A workspace that recorded no use falls back to the mtime
@@ -4911,8 +5360,8 @@ function trimCapacityRefusals(events, now) {
 	}).toSorted((a, b) => Date.parse(a.at) - Date.parse(b.at)).slice(-50);
 }
 const trimCapacityWaits = trimCapacityRefusals;
-const PLATFORMS = ["ios", "android"];
-const OUTCOMES = ["hit", "cold"];
+const PLATFORMS$1 = ["ios", "android"];
+const OUTCOMES$1 = ["hit", "cold"];
 const HISTORY_LIMIT = 10;
 function statsProjectKey({ root, commonDir, repoRoot }) {
 	if (commonDir && repoRoot && basename(commonDir) === ".git") return canonical$1(join(canonical$1(dirname(commonDir)), relative(canonical$1(repoRoot), canonical$1(root))));
@@ -5069,7 +5518,7 @@ function normalize$1(record) {
 function normalizePlacement(value) {
 	if (!isJsonObject(value)) return [];
 	const { decision, platform, reason, project, machine } = value;
-	if (!PLACEMENT_DECISIONS.includes(decision) || !PLATFORMS.includes(platform)) return [];
+	if (!PLACEMENT_DECISIONS.includes(decision) || !PLATFORMS$1.includes(platform)) return [];
 	if (typeof reason !== "string" || typeof project !== "string") return [];
 	const buildMs = wholeMs(value.buildMs);
 	const slotWaitMs = wholeMs(value.slotWaitMs);
@@ -5092,7 +5541,7 @@ function normalizePlacement(value) {
 function normalizeCapacityRefusal(value) {
 	if (!isJsonObject(value)) return [];
 	const { at, kind, platform, max, workspace } = value;
-	if (kind !== "device" || !PLATFORMS.includes(platform)) return [];
+	if (kind !== "device" || !PLATFORMS$1.includes(platform)) return [];
 	if (typeof at !== "string" || !Number.isFinite(Date.parse(at))) return [];
 	if (typeof max !== "number" || !Number.isInteger(max) || max <= 0) return [];
 	if (typeof workspace !== "string" || workspace === "") return [];
@@ -5132,11 +5581,11 @@ function normalizeMachineTotals(totals) {
 function normalizeHistory(scope) {
 	const history = {};
 	if (!isJsonObject(scope)) return history;
-	for (const platform of PLATFORMS) {
+	for (const platform of PLATFORMS$1) {
 		const lists = scope[platform];
 		if (!isJsonObject(lists)) continue;
 		const normalized = {};
-		for (const outcome of OUTCOMES) {
+		for (const outcome of OUTCOMES$1) {
 			const samples = lists[outcome];
 			if (!Array.isArray(samples)) continue;
 			const kept = samples.filter(isJsonObject).flatMap((sample) => {
@@ -5167,7 +5616,7 @@ function wholePhases(phases) {
 function normalizeScope(scope) {
 	const normalized = {};
 	if (!scope || typeof scope !== "object" || Array.isArray(scope)) return normalized;
-	for (const platform of PLATFORMS) {
+	for (const platform of PLATFORMS$1) {
 		const bucket = scope[platform];
 		if (bucket && typeof bucket === "object" && !Array.isArray(bucket)) normalized[platform] = normalizeBucket(bucket);
 	}
@@ -5426,6 +5875,7 @@ function parseHostedNativeOffer(value) {
 		resources: {
 			cpus: resources.cpus,
 			loadPerCore: resources.loadPerCore,
+			...typeof resources.maxLoadPerCore === "number" && Number.isFinite(resources.maxLoadPerCore) && resources.maxLoadPerCore > 0 ? { maxLoadPerCore: resources.maxLoadPerCore } : {},
 			memoryFreeBytes: resources.memoryFreeBytes,
 			memoryPressure: resources.memoryPressure,
 			workerDiskFreeBytes: resources.workerDiskFreeBytes,
@@ -5808,21 +6258,21 @@ function hostedAndroidDeviceName(device) {
 //#endregion
 //#region state/hosted-metro.ts
 const HOSTED_METRO_REQUESTS_KEY = "hostedMetroRequests";
-const HOSTED_METRO_GATEWAYS_KEY = "hostedMetroGateways";
+const HOSTED_METRO_LINKS_KEY = "hostedMetroLinks";
 function hostedMetroRequests(state) {
 	const raw = state?.[HOSTED_METRO_REQUESTS_KEY];
 	if (!isJsonObject(raw)) return {};
 	return Object.fromEntries(Object.entries(raw).filter((entry) => {
 		const [session, value] = entry;
-		return /^[a-f0-9-]{36}$/.test(session) && isJsonObject(value) && typeof value.id === "string" && typeof value.machine === "string" && typeof value.address === "string" && isIP(value.address) !== 0 && typeof value.peer === "string" && isIP(value.peer) !== 0 && typeof value.secret === "string" && /^[a-f0-9]{64}$/.test(value.secret);
+		return /^[a-f0-9-]{36}$/.test(session) && isJsonObject(value) && typeof value.id === "string" && typeof value.machine === "string";
 	}));
 }
-function hostedMetroGateways(state) {
-	const raw = state?.[HOSTED_METRO_GATEWAYS_KEY];
+function hostedMetroLinks(state) {
+	const raw = state?.[HOSTED_METRO_LINKS_KEY];
 	if (!isJsonObject(raw)) return {};
 	return Object.fromEntries(Object.entries(raw).filter((entry) => {
 		const value = entry[1];
-		return isJsonObject(value) && typeof value.id === "string" && typeof value.processToken === "string" && (value.port === void 0 || typeof value.port === "number" && Number.isInteger(value.port) && value.port > 0 && value.port <= 65535) && (value.error === void 0 || typeof value.error === "string");
+		return isJsonObject(value) && typeof value.id === "string" && typeof value.processToken === "string" && (value.ready === void 0 || value.ready === true) && (value.error === void 0 || typeof value.error === "string");
 	}));
 }
 //#endregion
@@ -6033,6 +6483,33 @@ function readGcLog(file = gcLogFile()) {
 	return readNdjsonGenerations(file).filter(isGcLogRecord).toSorted((a, b) => a.ts - b.ts);
 }
 //#endregion
+//#region state/build-ledger.ts
+const BUILD_LEDGER_CAP = 500;
+const PLATFORMS = [
+	"ios",
+	"android",
+	"macos"
+];
+const OUTCOMES = [
+	"succeeded",
+	"failed",
+	"cancelled",
+	"interrupted"
+];
+function isBuildLedgerRecord(record) {
+	return record.src === "builds" && record.event === "build" && typeof record.ts === "number" && typeof record.id === "string" && typeof record.platform === "string" && PLATFORMS.includes(record.platform) && typeof record.outcome === "string" && OUTCOMES.includes(record.outcome) && typeof record.placement === "object" && record.placement !== null && typeof record.cache === "object" && record.cache !== null;
+}
+/** The ledger's records, oldest first. A missing or unreadable ledger is empty. */
+function readBuildLedger(file = buildLedgerFile()) {
+	let text;
+	try {
+		text = readStateFile(file);
+	} catch {
+		return [];
+	}
+	return parseNdjsonText(text).filter(isBuildLedgerRecord).toSorted((a, b) => a.ts - b.ts);
+}
+//#endregion
 //#region state/agent-device.ts
 function agentDeviceStateDirs(home = ambientEnv().HOME || ambientEnv().USERPROFILE || homedir(), env = ambientEnv()) {
 	const override = env.AGENT_DEVICE_STATE_DIR?.trim();
@@ -6252,4 +6729,4 @@ function isSetupJournalPrunable(journal, now) {
 	return Date.parse(journal.expiresAt) + 36e5 < now;
 }
 //#endregion
-export { ACTIVITY_RECENCY_BASES, AGENT_TOOLS, ANDROID_COMPILER_CACHE_CHOICES, ANDROID_EMULATOR_APPS, ANDROID_PCH_CHOICES, APP_PROCESS_STATES, BUILD_HISTORY_KEY, BUILD_HISTORY_LIMIT, BUILD_PHASES, BUILD_RESULTS, CAPACITY_REFUSAL_LIMIT, CAPACITY_REFUSAL_MAX_AGE_MS, DEBUG_ENV, DEVICE_HOST_LIMITS, DEVICE_IDLE_SHUTDOWN_KEY, DEVICE_RECLAIM_REASON, DEV_SERVER_STOP_REQUEST_KEY, ENDED_AGENT_RETENTION_MS, ERROR_SOURCES, FINGERPRINT_MEMO_SCHEMA, HISTORY_LIMIT, HOSTED_AGENT_DRIVERS, HOSTED_APP_CHUNK_BYTES, HOSTED_LOGS_FIRST_BYTES, HOSTED_LOGS_PAGE_BYTES, HOSTED_MACOS_APP_SLOTS, HOSTED_METRO_GATEWAYS_KEY, HOSTED_METRO_REQUESTS_KEY, HOSTED_PARKED_CANDIDATES, IDLE_STOP_KEY, IOS_SIMULATOR_APPS, KeyedEntities, LAST_BUILD_KEYS, LEVELS, MACHINE_CREDENTIALS_VERSION, MACHINE_OWNER_KINDS, MAINTENANCE_LOG_NAME, MEMORY_SOURCES, NATIVE_BUILD_STEPS, NATIVE_CRASH_LOG_PREFIX, OFFLOAD_MODES, PHYSICAL_DEVICE_CONNECTIONS, PLACEMENT_DECISIONS, READY_PHASE_MS, RECORDING_CAP_BYTES, RECORDING_FOOTAGE_MS, RECORDING_PLATFORMS, REMOTE_DEVICE_BACKENDS, RUN_ID_ENV, SETTINGS, SETTINGS_SCHEMA_FILE, SETTINGS_SCHEMA_URL, SETTING_GROUPS, SETTING_SCOPES, SOURCES, STATS_VERSION, STATUS_ISSUE_CODES, SUMMARY_ARCHIVES, TAILNET_MACHINE_PATTERN, TUNNEL_MODES, TUTORIAL_VERSION, WARM_KEY, WEB_PAGE_STATES, WEB_VIEWPORTS, WORKSPACE_AGENT_KEY, WORKSPACE_PHASES, WORKSPACE_STAGE_KINDS, acceptsShape, advanceTail, agentDeviceStateDirs, agentDeviceStateDirsAsync, agentDeviceUsageFile, agentSessionOf, agentSessionsCacheFile, allMetroPorts, applyKeyedDelta, archiveDir, archiveEnabled, archiveLock, archiveRoot, archivedUsage, assertHostedDeviceLedger, attachExpoErrorContext, automaticMachineEnabled, buildCriteria, buildDiagnostics, buildMachinesFile, buildMachinesLock, buildSlotPath, buildSlotsDir, buildWorkerRoot, bundleMarkerPlatform, cannotHost, capDrops, clientIdentity, clientIdentityKeyFile, closedSegmentName, coerceSettingText, compileGrep, configCorruptRepair, configLockPath, countErrorEntries, createAgentActionReader, createAsyncAgentActionReader, createDebugLog, createdDevicesFile, createdDevicesLock, debugLogDir, debugLoggingEnabled, decodeStats, deviceHostArea, deviceHostMachinesClaims, deviceHostMachinesFile, deviceHostMachinesLock, deviceHostRoot, deviceViewersDir, diskUsageCacheDir, diskUsageCacheFile, diskUsageFailureFile, diskUsageWalkClaims, easMachineStateRoot, easSessionLedgerFile, easSessionLedgerLock, emulatorLogFile, endedAgentSessionOf, endpoint, expectedShape, fileIdentity, fileSizes, findEnclosingWorktreeRoot, findPeer, findProjectRoot, fingerprintMemoDir, fingerprintMemoFile, fingerprintMemoLock, followLogs, footageDrops, gcLogDir, gcLogFile, getConcurrencyLimits, getConfigPath, getParkedMax, getProject, getProjectSettings, getRepoSettings, gitMergeCacheDir, hostedAgentDriverName, hostedAndroidDeviceName, hostedAndroidPlacements, hostedAndroidRecords, hostedAndroidStatus, hostedAppArea, hostedAppAttempt, hostedAppBlobs, hostedConsolePort, hostedDeviceId, hostedIosPlacements, hostedIosRecords, hostedIosStatus, hostedMacosAppSlot, hostedMacosBundleId, hostedMacosLogsDir, hostedMetroGateways, hostedMetroRequests, hostedNativeLogsDir, hostedNativeRecords, hostedWorkerSettleMs, isExpoErrorContext, isGcLogRecord, isJournalExpired, isJsonObject, isLayeredSetting, isPathPrefix, isSensitiveReference, isSetupJournalPrunable, lastUseFrom, levelRank, linkReplacedArchives, listRecordedDevices, listRecordedDevicesAsync, listSegments, listSegmentsAsync, listStatusCacheEntries, loadConfig, logFiles, machineCacheUsageFile, machineCapacity, machineEndpoint, macosAppState, maintenanceAttemptFile, maintenanceChildLogFile, maintenanceDir, maintenanceNdjsonFile, maintenanceRunClaims, maintenanceStateFile, markerWindow, offloadSummary, openLogDir, openSegmentName, parseHostedAgentAccess, parseHostedAgentGrant, parseHostedAndroidDevice, parseHostedAndroidPlacement, parseHostedAppManifest, parseHostedAppOffer, parseHostedChoice, parseHostedDevice, parseHostedIosPlacement, parseHostedLocalDeviceCount, parseHostedLogsCursor, parseHostedMacosChoice, parseHostedMacosDevice, parseHostedMacosPlacement, parseHostedNativeOffer, parseHostedNativePlacement, parseHostedOfferRequest, parseHostedPlatformDevice, parseHostedRequest, parseMachine, parseMachineCredential, parseMacosRecord, parseMaintenanceState, parseMissReason, parseNdjsonLine, parseNdjsonText, parseSetupJournal, parseSince, planLogQuery, projectRootDirectories, pullRequestCacheDir, pullRequestCacheFile, queryJsonLogs, queryLogs, readAgentDeviceUsage, readAgentDeviceUsageCache, readAgentSessionsCache, readArchive, readArchiveAsync, readArchiveState, readArchives, readArchivesAsync, readBuildDetail, readBuildHistory, readBuildMachines, readCreatedDevices, readDevServerStop, readDevServerStopRequest, readDeviceHostMachines, readDeviceIdleShutdowns, readDevicePlacement, readDiskUsage, readDiskUsageFailure, readEasSessionLedger, readEndedAgentSessions, readFingerprintMemo, readGcLog, readHomeIdentity, readHostedApp, readHostedAppMetadata, readHostedDevice, readHostedDeviceLedger, readHostedMacosApp, readHostedNativeLogsCheckpoint, readHostedSessions, readIdleStop, readJsonFile, readJsonObject, readLastBuilds, readLogRecords, readLogTimeline, readLogsSince, readMachineCacheUsage, readMacosRecord, readMaintenanceAttempt, readMaintenanceState, readNdjsonGenerations, readPullRequestCache, readRunEstimates, readSetupJournal, readStateFile, readStats, readStatsReport, readSwiftpmCacheUsage, readViewedDevices, readWarmRecord, readWorkspaceAgent, readWorkspaceState, recordMatches, recordedBytes, recordingDeviceName, recordingEnabled, rememberHostedAppBlobRename, requireAutomaticMachine, runId, saturation, serverLocalSocket, serverSetupDir, settingDefinition, settingValueError, settingsJsonSchema, setupJournalFile, sharedCcache, sharedCompilationCache, sharedGradle, sharedPods, sortByTs, statsFile, statsProjectKey, statusViews, stimBuildDigest, supervisorLogFile, supervisorPidFile, swiftpmCacheUsageFile, tailRead, trashRoot, trimCapacityRefusals, trimCapacityWaits, trimSamples, tryAcquireBuildSlotClaim, unreadableHostedAndroid, unreadableHostedIos, unreadableHostedNative, validEasSessionClaim, validHostedAppArguments, validHostedAppBlob, validRunId, validateAutomaticPool, wholePhases, windowsShortDir, windowsShortDirKey, withConfigLock, withConfigLockAsync, withDerivedFacts, withGitChip, withStateReadCache, workspaceAgentDeviceDir, workspaceBuildDetailFile, workspaceDerivedData, workspaceEndedAgentsFile, workspaceEndedAgentsLock, workspaceGradleBuild, workspaceLastUsed, workspaceLogErrorIndex, workspaceLogsDir, workspaceMetadataFile, workspaceRecordingsDir, workspaceStateFile, workspaceStateLock, workspaceSummary };
+export { ACTIVITY_RECENCY_BASES, AGENT_TOOLS, ANDROID_COMPILER_CACHE_CHOICES, ANDROID_EMULATOR_APPS, ANDROID_PCH_CHOICES, APP_PROCESS_STATES, BUILD_HISTORY_KEY, BUILD_HISTORY_LIMIT, BUILD_LEDGER_CAP, BUILD_PHASES, BUILD_RESULTS, CAPACITY_REFUSAL_LIMIT, CAPACITY_REFUSAL_MAX_AGE_MS, DEBUG_ENV, DEVICE_HOST_LIMITS, DEVICE_IDLE_SHUTDOWN_KEY, DEVICE_RECLAIM_REASON, DEV_SERVER_STOP_REQUEST_KEY, ENDED_AGENT_RETENTION_MS, ERROR_SOURCES, FINGERPRINT_MEMO_SCHEMA, HISTORY_LIMIT, HOSTED_AGENT_DRIVERS, HOSTED_APP_CHUNK_BYTES, HOSTED_LOGS_FIRST_BYTES, HOSTED_LOGS_PAGE_BYTES, HOSTED_MACOS_APP_SLOTS, HOSTED_METRO_LINKS_KEY, HOSTED_METRO_REQUESTS_KEY, HOSTED_PARKED_CANDIDATES, IDLE_STOP_KEY, IOS_SIMULATOR_APPS, KeyedEntities, LAST_BUILD_KEYS, LEVELS, MACHINE_CREDENTIALS_VERSION, MACHINE_OWNER_KINDS, MAINTENANCE_LOG_NAME, MEMORY_SOURCES, NATIVE_BUILD_STEPS, NATIVE_CRASH_LOG_PREFIX, PHYSICAL_DEVICE_CONNECTIONS, PLACEMENT_DECISIONS, PLACEMENT_WORDS, READY_PHASE_MS, RECORDING_CAP_BYTES, RECORDING_FOOTAGE_MS, RECORDING_PLATFORMS, REMOTE_DEVICE_BACKENDS, REPLACED_SETTINGS, RUN_ID_ENV, SETTINGS, SETTINGS_SCHEMA_FILE, SETTINGS_SCHEMA_URL, SETTING_GROUPS, SETTING_SCOPES, SOURCES, STATS_VERSION, STATUS_ISSUE_CODES, SUMMARY_ARCHIVES, TAILNET_MACHINE_PATTERN, TRACE_ENV, TUNNEL_MODES, TUTORIAL_VERSION, WARM_KEY, WEB_PAGE_STATES, WEB_VIEWPORTS, WORKSPACE_AGENT_KEY, WORKSPACE_PHASES, WORKSPACE_STAGE_KINDS, acceptsShape, advanceTail, agentDeviceStateDirs, agentDeviceStateDirsAsync, agentDeviceUsageFile, agentSessionOf, agentSessionsCacheFile, allMetroPorts, applyKeyedDelta, archiveDir, archiveEnabled, archiveLock, archiveRoot, archivedUsage, assertHostedDeviceLedger, attachExpoErrorContext, automaticMachineEnabled, budgetSweepFile, budgetSweepLock, buildCriteria, buildDiagnostics, buildLedgerDir, buildLedgerFile, buildLedgerLock, buildMachinesFile, buildMachinesLock, buildSlotPath, buildSlotsDir, buildWorkerRoot, bundleMarkerPlatform, cannotHost, capDrops, clientIdentity, clientIdentityKeyFile, closedSegmentName, coerceSettingText, compileGrep, configCorruptRepair, configLockPath, countErrorEntries, createAgentActionReader, createAsyncAgentActionReader, createDebugLog, createNdjsonTail, createdDevicesFile, createdDevicesLock, debugLogDir, debugLoggingEnabled, decodeStats, deviceHostArea, deviceHostMachinesClaims, deviceHostMachinesFile, deviceHostMachinesLock, deviceHostRoot, deviceViewersDir, diskUsageCacheDir, diskUsageCacheFile, diskUsageFailureFile, diskUsageWalkClaims, easMachineStateRoot, easSessionLedgerFile, easSessionLedgerLock, emulatorLogFile, endedAgentSessionOf, endpoint, expectedShape, fileIdentity, fileSizes, findEnclosingWorktreeRoot, findPeer, findProjectRoot, fingerprintMemoDir, fingerprintMemoFile, fingerprintMemoLock, followLogs, footageDrops, gcLogDir, gcLogFile, getConcurrencyLimits, getConfigPath, getParkedMax, getProject, getProjectSettings, getRepoSettings, gitMergeCacheDir, hostedAgentDriverName, hostedAndroidDeviceName, hostedAndroidPlacements, hostedAndroidRecords, hostedAndroidStatus, hostedAppArea, hostedAppAttempt, hostedAppBlobs, hostedConsolePort, hostedDeviceId, hostedIosPlacements, hostedIosRecords, hostedIosStatus, hostedMacosAppSlot, hostedMacosBundleId, hostedMacosLogsDir, hostedMetroLinks, hostedMetroRequests, hostedNativeLogsDir, hostedNativeRecords, hostedWorkerSettleMs, isBuildLedgerRecord, isExpoErrorContext, isGcLogRecord, isJournalExpired, isJsonObject, isLayeredSetting, isPathPrefix, isSensitiveReference, isSetupJournalPrunable, lastNativeUseFrom, lastUseFrom, levelRank, linkReplacedArchives, listRecordedDevices, listRecordedDevicesAsync, listSegments, listSegmentsAsync, listStatusCacheEntries, loadConfig, loadPerCore, loadState, logFiles, machineCacheUsageFile, machineCapacity, machineEndpoint, macosAppState, maintenanceAttemptFile, maintenanceChildLogFile, maintenanceDir, maintenanceNdjsonFile, maintenanceRunClaims, maintenanceStateFile, markerWindow, maxLoadPerCore, mayRunHere, offloadSummary, openLogDir, openSegmentName, parseHostedAgentAccess, parseHostedAgentGrant, parseHostedAndroidDevice, parseHostedAndroidPlacement, parseHostedAppManifest, parseHostedAppOffer, parseHostedChoice, parseHostedDevice, parseHostedIosPlacement, parseHostedLocalDeviceCount, parseHostedLogsCursor, parseHostedMacosChoice, parseHostedMacosDevice, parseHostedMacosPlacement, parseHostedNativeOffer, parseHostedNativePlacement, parseHostedOfferRequest, parseHostedPlatformDevice, parseHostedRequest, parseMachine, parseMachineCredential, parseMacosRecord, parseMaintenanceState, parseMissReason, parseNdjsonLine, parseNdjsonText, parseSetupJournal, parseSince, placementWord, planLogQuery, prefersRemote, projectRootDirectories, pullRequestCacheDir, pullRequestCacheFile, queryJsonLogs, queryLogs, readAgentDeviceUsage, readAgentDeviceUsageCache, readAgentSessionsCache, readArchive, readArchiveAsync, readArchiveState, readArchives, readArchivesAsync, readBuildDetail, readBuildHistory, readBuildLedger, readBuildMachines, readCreatedDevices, readDevServerStop, readDevServerStopRequest, readDeviceHostMachines, readDeviceIdleShutdowns, readDevicePlacement, readDiskUsage, readDiskUsageFailure, readEasSessionLedger, readEndedAgentSessions, readFingerprintMemo, readGcLog, readHomeIdentity, readHostedApp, readHostedAppMetadata, readHostedDevice, readHostedDeviceLedger, readHostedMacosApp, readHostedNativeLogsCheckpoint, readHostedSessions, readIdleStop, readJsonFile, readJsonObject, readLastBuilds, readLogRecords, readLogTimeline, readLogsSince, readMachineCacheUsage, readMacosRecord, readMaintenanceAttempt, readMaintenanceState, readNdjsonGenerations, readPullRequestCache, readRunEstimates, readSetupJournal, readStateFile, readStats, readStatsReport, readSwiftpmCacheUsage, readViewedDevices, readWarmRecord, readWorkspaceAgent, readWorkspaceState, recordMatches, recordedBytes, recordingDeviceName, recordingEnabled, redactArgv, redactCommandLine, rememberHostedAppBlobRename, replacementAdvice, requireAutomaticMachine, runId, saturation, serverLocalSocket, serverSetupDir, settingDefinition, settingValueError, settingsJsonSchema, setupJournalFile, sharedCcache, sharedCompilationCache, sharedGradle, sharedPods, sortByTs, statsFile, statsProjectKey, statusViews, stimBuildDigest, supervisorLogFile, supervisorPidFile, swiftpmCacheUsageFile, tailRead, trace, trashRoot, trimCapacityRefusals, trimCapacityWaits, trimSamples, tryAcquireBuildSlotClaim, unreadableHostedAndroid, unreadableHostedIos, unreadableHostedNative, validEasSessionClaim, validHostedAppArguments, validHostedAppBlob, validRunId, validateAutomaticPool, wholePhases, windowsShortDir, windowsShortDirKey, withConfigLock, withConfigLockAsync, withDerivedFacts, withGitChip, withStateReadCache, workspaceAgentDeviceDir, workspaceBuildDetailFile, workspaceDerivedData, workspaceEndedAgentsFile, workspaceEndedAgentsLock, workspaceGradleBuild, workspaceLastUsed, workspaceLightenedFile, workspaceLogErrorIndex, workspaceLogsDir, workspaceMetadataFile, workspaceRecordingsDir, workspaceStateFile, workspaceStateLock, workspaceSummary, worktreeArchiveRoot };