@tapflowio/ios-agent 0.28.1 → 0.29.0

package/NOTICE

@@ -9,4 +9,4 @@ licensed under the Apache License, Version 2.0 (see LICENSE-APACHE-2.0).
 It includes a list of launchd labels selected from simslim
 (https://github.com/MobAI-App/simslim),
 licensed under the MIT License. Copyright (c) 2026 Interlap.
-The full notice is in dist/leanLabels.js.
+The full notice is in dist/leanLabels.js and dist/serviceTiers.js.

package/dist/IOSAgent.d.ts

@@ -157,14 +157,22 @@ export declare class IOSAgent implements DeviceAgent, NetworkControlCapability {
     private abandonBoot;
     private handleDeviceBoot;
     private bootWithZombieRecovery;
+    /** The tier a boot gets when it does not ask for one: Lean mode's setting. A person's boot is always this. */
+    private defaultTier;
+    /** What the device boots with now, for the relay: the marker's tier, or `unsupported` on a runtime that cannot take one. */
+    private reportedTier;
     /**
      * Called only when the device is known to be shut down: `launchd_sim` reads the store when it
      * starts, and a write while it runs is not known to survive. So a device that was already up when
-     * asked for is booted as it is, and becomes lean from its next boot through tapflow.
+     * asked for is booted as it is, and takes the default tier from its next boot through tapflow —
+     * unless a run asked for a tier, which restarts it (`retier` in `handleDeviceBoot`).
      *
-     * **A failure here never stops the boot.** Lean mode is an optimisation and booting is the job.
+     * **Every boot sets an exact tier**, the asked-for one or the default. Adding to whatever the last boot left
+     * is how a device a run left slim reached a person still slim (L2 review R4-S1).
+     *
+     * **A failure here never stops the boot.** A tier is an optimisation and booting is the job.
      */
-    private prepareLean;
+    private prepareTier;
     /** Put back what Lean mode disabled on a device that is now shut down. A no-op for devices it never touched. */
     private revertLean;
     /**
@@ -175,6 +183,19 @@ export declare class IOSAgent implements DeviceAgent, NetworkControlCapability {
      */
     private revertLeftoverLean;
     private handleDeviceShutdown;
+    /**
+     * What `flow run` asks reset before a run, carried out on a booted device. Only the agent's report says it happened.
+     * It waits for the system services first: `Booted` shows before tccd and securityd serve, and not only on a boot this
+     * agent started — a device someone else just booted reads `booted` too. On a settled device the wait returns at once.
+     * The wait does not watch `isStale`; a shutdown meanwhile holds this boot's abandonment until its deadline.
+     */
+    private resetForRun;
+    /**
+     * The pasteboard step of a run reset. The queue can be held by a clipboard operation already running, so the wait for
+     * it is bounded too; a clear that reaches the front after the step gave up does nothing, because by then the run may
+     * have put something of its own there.
+     */
+    private clearPasteboardQueued;
     private ensureTouchHelper;
     private readonly clipboardQueue;
     private readonly parkedSentinels;

package/dist/IOSAgent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IOSAgent.d.ts","sourceRoot":"","sources":["../src/IOSAgent.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAA4C,MAAM,EAAE,WAAW,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAsCpK,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAIrD,CAAA;AACD,OAAO,EAYL,KAAK,YAAY,EAUlB,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EAAE,aAAa,EAAgF,MAAM,oBAAoB,CAAA;AAChI,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAgB1C,OAAO,EAAE,kBAAkB,EAAmB,MAAM,yBAAyB,CAAA;AAW7E;wGACwG;AACxG,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKpE;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,2FAA2F;IAC3F,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;6FACyF;IACzF,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B;mDAC+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,4FAA4F;IAC5F,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB;6EACyE;IACzE,YAAY,CAAC,EAAE,kBAAkB,CAAA;CAClC;AAkDD,qBAAa,QAAS,YAAW,WAAW,EAAE,wBAAwB;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAC3C,OAAO,CAAC,EAAE,CAAyB;IAEnC;;;;;;;;;;;;;iDAa6C;IAC7C,OAAO,CAAC,OAAO;IAKf;;;;;6CAKyC;IACzC,OAAO,CAAC,MAAM;IAGd,OAAO,CAAC,YAAY,CAAiC;IACrD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAC7D;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IAIjD,OAAO,CAAC,aAAa,CAA4B;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuB;IAGpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,gHAAgH;IAChH,OAAO,CAAC,UAAU,CAAsB;IACxC,OAAO,CAAC,eAAe,CAAoB;IAC3C,OAAO,CAAC,iBAAiB,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAsB;IACtC;;qGAEiG;IACjG,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,eAAe,CAA6C;IACpE,OAAO,CAAC,iBAAiB,CAAI;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;gBAEzB,OAAO,GAAE,eAAoB,EAAE,MAAM,CAAC,EAAE,aAAa;IA2CjE,IAAI,SAAS,IAAI,MAAM,GAAG,IAAI,CAG7B;IAEK,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;;;;OAKG;YACW,WAAW;IAkIzB,OAAO,CAAC,gBAAgB;IA+BxB,UAAU,IAAI,IAAI;IAsBlB,qGAAqG;IACrG,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,eAAe;IAkBvB,OAAO,CAAC,kBAAkB;IAmB1B,OAAO,CAAC,gBAAgB;IAQxB;;qDAEiD;YACnC,cAAc;IAoC5B;4DACwD;IACxD,OAAO,CAAC,iBAAiB;IA+FzB,OAAO,CAAC,eAAe;YAST,YAAY;IAO1B;;;;;+GAK2G;IAC3G,OAAO,CAAC,WAAW;IAKnB;;;;;;wDAMoD;IACpD,OAAO,CAAC,WAAW;YAsBL,gBAAgB;YA8LhB,sBAAsB;IAapC;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAcnB,gHAAgH;IAChH,OAAO,CAAC,UAAU;IAQlB;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;YAQZ,oBAAoB;IAkElC,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAM1D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,cAAc;IAWtB;;;;;;;;;;qEAUiE;IACjE,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,YAAY;IAWpB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,aAAa;YAyBP,QAAQ;YAWR,QAAQ;IAOtB;uCACmC;IACnC,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,kBAAkB;YA6nBZ,UAAU;IAQxB;;;;OAIG;YACW,YAAY;IA0C1B,kFAAkF;YACpE,WAAW;IA+CzB,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACzC;;;;mFAI+E;IACzE,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAShD,4EAA4E;IAC5E;;;;;;;;;;;;;;;;;;;OAmBG;YACW,SAAS;IASvB;;;;;;OAMG;YACW,kBAAkB;IAMhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,qBAAqB;YAOf,gBAAgB;IAoB9B;;;;;;;;;;;;;OAaG;IACG,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIjE,YAAY,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAI5C,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD;;mDAE+C;IAC/C,OAAO,CAAC,eAAe;IAKvB;6DACyD;IACzD,OAAO,CAAC,MAAM;IAUd;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,eAAe;IAWvB;;;;;;;;;;;;;;;;OAgBG;YACW,mBAAmB;YAmBnB,gBAAgB;IAIxB,WAAW,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAczC,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,gBAAgB;YAYV,SAAS;IAiBjB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IACnC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC;IAShC,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI;IAItC,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9C,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAMnB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG1C;AAoBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAI1H"}
+{"version":3,"file":"IOSAgent.d.ts","sourceRoot":"","sources":["../src/IOSAgent.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAA4C,MAAM,EAAE,WAAW,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AA0CpK,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAIrD,CAAA;AACD,OAAO,EAYL,KAAK,YAAY,EAclB,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EAAE,aAAa,EAAgF,MAAM,oBAAoB,CAAA;AAChI,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAgB1C,OAAO,EAAE,kBAAkB,EAAmB,MAAM,yBAAyB,CAAA;AAW7E;wGACwG;AACxG,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKpE;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,2FAA2F;IAC3F,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;6FACyF;IACzF,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B;mDAC+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,4FAA4F;IAC5F,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB;6EACyE;IACzE,YAAY,CAAC,EAAE,kBAAkB,CAAA;CAClC;AAkDD,qBAAa,QAAS,YAAW,WAAW,EAAE,wBAAwB;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAC3C,OAAO,CAAC,EAAE,CAAyB;IAEnC;;;;;;;;;;;;;iDAa6C;IAC7C,OAAO,CAAC,OAAO;IAKf;;;;;6CAKyC;IACzC,OAAO,CAAC,MAAM;IAGd,OAAO,CAAC,YAAY,CAAiC;IACrD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAC7D;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IAIjD,OAAO,CAAC,aAAa,CAA4B;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuB;IAGpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,gHAAgH;IAChH,OAAO,CAAC,UAAU,CAAsB;IACxC,OAAO,CAAC,eAAe,CAAoB;IAC3C,OAAO,CAAC,iBAAiB,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAsB;IACtC;;qGAEiG;IACjG,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,eAAe,CAA6C;IACpE,OAAO,CAAC,iBAAiB,CAAI;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;gBAEzB,OAAO,GAAE,eAAoB,EAAE,MAAM,CAAC,EAAE,aAAa;IA2CjE,IAAI,SAAS,IAAI,MAAM,GAAG,IAAI,CAG7B;IAEK,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;;;;OAKG;YACW,WAAW;IAmIzB,OAAO,CAAC,gBAAgB;IA+BxB,UAAU,IAAI,IAAI;IAsBlB,qGAAqG;IACrG,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,kBAAkB;IAmB1B,OAAO,CAAC,gBAAgB;IAQxB;;qDAEiD;YACnC,cAAc;IAoC5B;4DACwD;IACxD,OAAO,CAAC,iBAAiB;IA+FzB,OAAO,CAAC,eAAe;YAST,YAAY;IAO1B;;;;;+GAK2G;IAC3G,OAAO,CAAC,WAAW;IAKnB;;;;;;wDAMoD;IACpD,OAAO,CAAC,WAAW;YAsBL,gBAAgB;YAmNhB,sBAAsB;IAapC,8GAA8G;IAC9G,OAAO,CAAC,WAAW;IAInB,4HAA4H;IAC5H,OAAO,CAAC,YAAY;IAIpB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,WAAW;IAanB,gHAAgH;IAChH,OAAO,CAAC,UAAU;IAQlB;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;YAQZ,oBAAoB;IAiElC;;;;;OAKG;YACW,WAAW;IAuBzB;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IAe7B,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAM1D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,cAAc;IAWtB;;;;;;;;;;qEAUiE;IACjE,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,YAAY;IAWpB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,aAAa;YAyBP,QAAQ;YAWR,QAAQ;IAOtB;uCACmC;IACnC,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,kBAAkB;YAioBZ,UAAU;IAQxB;;;;OAIG;YACW,YAAY;IA0C1B,kFAAkF;YACpE,WAAW;IA+CzB,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACzC;;;;mFAI+E;IACzE,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAShD,4EAA4E;IAC5E;;;;;;;;;;;;;;;;;;;OAmBG;YACW,SAAS;IASvB;;;;;;OAMG;YACW,kBAAkB;IAMhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,qBAAqB;YAOf,gBAAgB;IAoB9B;;;;;;;;;;;;;OAaG;IACG,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIjE,YAAY,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAI5C,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD;;mDAE+C;IAC/C,OAAO,CAAC,eAAe;IAKvB;6DACyD;IACzD,OAAO,CAAC,MAAM;IAUd;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,eAAe;IAWvB;;;;;;;;;;;;;;;;OAgBG;YACW,mBAAmB;YAmBnB,gBAAgB;IAIxB,WAAW,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAczC,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,gBAAgB;YAYV,SAAS;IAiBjB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IACnC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC;IAShC,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI;IAItC,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAKzB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG1C;AAoBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAI1H"}

package/dist/IOSAgent.js

@@ -7,6 +7,8 @@ import { spawn } from 'child_process';
 import { WebSocket } from 'ws';
 import { createLogger, PlatformError, ValidationError, bootAbandonMessage, BOOT_NO_SESSION_STATE, SHUTDOWN_NO_SESSION_STATE, downloadBuild } from '@tapflowio/agent-core';
 const logger = createLogger('ios-agent');
+/** The run reset's pasteboard step, the wait for the clipboard queue included; one step's bound like the others. */
+const RUN_RESET_PASTEBOARD_TIMEOUT_MS = 10_000;
 // Typed so a typo cannot ship silently — the viewer gates the whole clipboard bridge on this.
 // `full-reset` is honoured in `handleDeviceBoot`, which shuts a running device down before
 // `simctl erase` (which refuses anything but a shut-down device) and boots it again.
@@ -39,11 +41,11 @@ export const IOS_BUTTON_ALIASES = {
     volume_up: 'volume-up',
     volume_down: 'volume-down',
 };
-import { createResourceSampler, registerStreamWs, disableNagle, createKeyframeAwareSender, pickMaxSize, createRateLimitedDropWarn, createThroughputSampler, createSleepBlocker, acquireLoopStallWatch, describeRelayLoss, getMachineId, isLocalhostWss, DEFAULT_BACKPRESSURE_BYTES, writeEnvelopeHeader, rewriteLowLatencySpsInFrame, CODEC_JPEG, CODEC_H264, CODEC_AUDIO, sendAudioYieldingToVideo, } from '@tapflowio/agent-core/utils';
+import { createResourceSampler, registerStreamWs, disableNagle, createKeyframeAwareSender, pickMaxSize, createRateLimitedDropWarn, createThroughputSampler, createSleepBlocker, acquireLoopStallWatch, describeRelayLoss, getMachineId, sameServiceTier, resetApps, runResetSteps, RUN_RESET_BUDGET_MS, isLocalhostWss, DEFAULT_BACKPRESSURE_BYTES, writeEnvelopeHeader, rewriteLowLatencySpsInFrame, CODEC_JPEG, CODEC_H264, CODEC_AUDIO, sendAudioYieldingToVideo, } from '@tapflowio/agent-core/utils';
 import { SimctlWrapper, isDeviceMissingError, ClipboardTooLargeError, firstLine, launchFailureReason } from './SimctlWrapper.js';
 import { SimulatorNetwork } from './SimulatorNetwork.js';
 import { LeanStore } from './LeanStore.js';
-import { LEAN_LABELS } from './leanLabels.js';
+import { MANAGED_LABELS, labelsFor } from './serviceTiers.js';
 import { MAX_CLIPBOARD_BYTES, clipboardByteLength, CLIPBOARD_SENTINEL_PREFIX as SENTINEL_PREFIX, isClipboardSentinel as isSentinel, CLIPBOARD_COPY_DEADLINE_MS, CLIPBOARD_WRITE_DEADLINE_MS, CLIPBOARD_RESTORE_DEADLINE_MS, CLIPBOARD_POLL_MS, createKeyedSerialQueue, } from '@tapflowio/agent-core';
 import { ScreenCaptureStreamer } from './ScreenCaptureStreamer.js';
 import { AudioCaptureStreamer, readSimVolume, applyGain } from './AudioCaptureStreamer.js';
@@ -182,7 +184,7 @@ export class IOSAgent {
         // reason, as `sleepBlocker` below.
         this.lean = options.lean ?? false;
         // Never the host's real store under vitest, for the reason given for `network` just below.
-        this.leanStore = options.leanStore ?? new LeanStore(process.env.VITEST ? path.join(tmpdir(), 'tapflow-no-lean-store') : undefined);
+        this.leanStore = options.leanStore ?? new LeanStore(process.env.VITEST ? path.join(tmpdir(), 'tapflow-no-lean-store') : undefined, MANAGED_LABELS);
         this.network = options.network ?? new SimulatorNetwork(this.simctl, process.env.VITEST ? { filterHostBinary: path.join(tmpdir(), 'tapflow-no-filter-host') } : {});
         // **Wired here rather than in the constructor call above, and the difference is coverage.** An
         // injected `SimulatorNetwork` — which is what every test uses — would otherwise never carry the
@@ -264,6 +266,7 @@ export class IOSAgent {
                         status: d.status,
                         osVersion: d.osVersion,
                         formFactor: d.typeId ? formFactors.get(d.typeId) : undefined,
+                        serviceTier: this.reportedTier(d),
                     })),
                 });
             });
@@ -446,6 +449,7 @@ export class IOSAgent {
                 slotsAvailable: Math.max(0, slotsTotal - bootedCount),
                 slotsTotal,
                 reportedAt: Date.now(),
+                memoryPressure: this.resources.getMemoryPressure(),
             },
         });
     }
@@ -674,7 +678,7 @@ export class IOSAgent {
     // `requestId` is a parameter, never a field on `state`: `bootSeq` exists because two boots overlap,
     // and a correlator hoisted onto shared state would answer the first request with the second's id.
     // Optional because the relay's idle timer boots nothing — but every *browser* boot carries one.
-    async handleDeviceBoot(sessionId, deviceId, fullErase = false, acceptH264 = false, tier, requestId, automation = false) {
+    async handleDeviceBoot(sessionId, deviceId, fullErase = false, acceptH264 = false, tier, requestId, automation = false, serviceTier, runReset) {
         const state = this.deviceStates.get(sessionId);
         // Split, because the two halves are not the same kind of nothing. No open control channel means the
         // answer itself has nowhere to go, so this is the one abandonment that stays silent — and the caller
@@ -721,6 +725,13 @@ export class IOSAgent {
             const target = devices.find((d) => d.id === deviceId);
             if (!target)
                 throw new PlatformError(`Device not found: ${deviceId}`);
+            // A running device on another tier than the run asked for is restarted onto it: the services have to be off
+            // from launch, and replaying on whatever the last boot left is what the tier exists to stop.
+            const retier = !fullErase && target.status === 'booted' && serviceTier !== undefined && leanSupported(target.osVersion)
+                && !sameServiceTier(this.leanStore.currentTier(deviceId), serviceTier);
+            // Read before anything below changes it: a Full reset shuts the device down itself, and `unknown`
+            // (booting, shutting down) is a device paying a boot's cost now.
+            const cold = fullErase || retier || target.status !== 'booted';
             if (fullErase) {
                 // `simctl erase` only accepts a shut-down device, and a device is often already running —
                 // it survives agent restarts and sessions that ended without a clean shutdown. Without this
@@ -747,7 +758,6 @@ export class IOSAgent {
                     this.abandonBoot(state, seq, sessionId, requestId);
                     return;
                 }
-                this.prepareLean(target);
                 try {
                     await this.simctl.erase(deviceId);
                 }
@@ -770,6 +780,9 @@ export class IOSAgent {
                     }
                     throw err;
                 }
+                // After the erase, not before: a failed erase boots the device back as it was found, and the tier is part of
+                // that. The overrides live on the host, so the erase does not touch them either way.
+                this.prepareTier(target, serviceTier);
                 await this.simctl.boot(deviceId);
             }
             else {
@@ -780,10 +793,22 @@ export class IOSAgent {
                 // deadline to discover. `SimctlWrapper.boot` swallows `Unable to boot device in current
                 // state: Booted`, so re-issuing it for a device that really is up costs one no-op
                 // subprocess and makes "the wait only ever runs after a boot was accepted" true.
-                if (target.status === 'shutdown')
-                    this.prepareLean(target);
-                else if (this.lean && !this.leanStore.isApplied(deviceId)) {
-                    logger.info(`Lean mode: ${target.name} is already running, so it applies from its next boot`);
+                if (retier) {
+                    logger.info(`Service tier: restarting ${target.name} onto ${serviceTier.name}`);
+                    // As for a Full reset: a runner starting for this device would boot it back up mid-change.
+                    this.uiTreeReader.stopIfDevice(deviceId);
+                    await this.simctl.shutdown(deviceId);
+                    if (seq !== state.bootSeq) {
+                        this.abandonBoot(state, seq, sessionId, requestId);
+                        return;
+                    }
+                    this.prepareTier(target, serviceTier);
+                }
+                else if (target.status === 'shutdown') {
+                    this.prepareTier(target, serviceTier);
+                }
+                else if (leanSupported(target.osVersion) && !sameServiceTier(this.leanStore.currentTier(deviceId), this.defaultTier())) {
+                    logger.info(`Service tier: ${target.name} is already running, so ${this.defaultTier().name} applies from its next boot`);
                 }
                 await this.bootWithZombieRecovery(deviceId);
             }
@@ -802,6 +827,13 @@ export class IOSAgent {
             // twice a second against a device that is now deliberately off — for the rest of the deadline,
             // with nothing left that wants the answer.
             const bootedDevice = await this.simctl.waitUntilBooted(deviceId, { isStale: () => seq !== state.bootSeq });
+            // Before anything runs on the device: the network arm below starts nothing, and the run installs its app after the
+            // ready. Clearing an app now and installing it after leaves a clean container.
+            const runResetReport = runReset ? await this.resetForRun(deviceId, runReset, () => seq !== state.bootSeq) : undefined;
+            if (seq !== state.bootSeq) {
+                this.abandonBoot(state, seq, sessionId, requestId);
+                return;
+            }
             // Arm the network injection while nothing is running on the device yet — dyld reads the
             // environment at process start, so anything launched before this is unhooked for its whole life.
             // Best-effort: the network toggle is opt-in and a device that cannot be armed says so through
@@ -847,7 +879,7 @@ export class IOSAgent {
             // every path precisely so that case reaches here. Requiring an off→on transition would leave
             // that device unowned and put the resolvers back to refusing between two live simulators.
             this.ownedDevices.add(deviceId);
-            this.sendMsg({ type: 'device:ready', sessionId, requestId, payload: { deviceId } });
+            this.sendMsg({ type: 'device:ready', sessionId, requestId, payload: { deviceId, cold, serviceTier: this.reportedTier(target), ...(runResetReport ? { runReset: runResetReport } : {}) } });
             // The unsolicited report the protocol names on `device:ready`. It follows the ready rather than
             // riding inside it: a tester whose device just came up can arm the toggle in the same breath, and
             // a boot that armed nothing still has to say so rather than leaving the control blank.
@@ -897,27 +929,37 @@ export class IOSAgent {
         }
     }
     // ── Lean mode ──────────────────────────────────────────────────────────────
+    /** The tier a boot gets when it does not ask for one: Lean mode's setting. A person's boot is always this. */
+    defaultTier() {
+        return { name: this.lean ? 'lean' : 'stock', keep: [] };
+    }
+    /** What the device boots with now, for the relay: the marker's tier, or `unsupported` on a runtime that cannot take one. */
+    reportedTier(device) {
+        return leanSupported(device.osVersion) ? this.leanStore.currentTier(device.id) : 'unsupported';
+    }
     /**
      * Called only when the device is known to be shut down: `launchd_sim` reads the store when it
      * starts, and a write while it runs is not known to survive. So a device that was already up when
-     * asked for is booted as it is, and becomes lean from its next boot through tapflow.
+     * asked for is booted as it is, and takes the default tier from its next boot through tapflow —
+     * unless a run asked for a tier, which restarts it (`retier` in `handleDeviceBoot`).
      *
-     * **A failure here never stops the boot.** Lean mode is an optimisation and booting is the job.
+     * **Every boot sets an exact tier**, the asked-for one or the default. Adding to whatever the last boot left
+     * is how a device a run left slim reached a person still slim (L2 review R4-S1).
+     *
+     * **A failure here never stops the boot.** A tier is an optimisation and booting is the job.
      */
-    prepareLean(device) {
+    prepareTier(device, requested) {
+        const tier = requested ?? this.defaultTier();
         try {
-            if (!this.lean) {
-                this.revertLean(device.id);
-            }
-            else if (!leanSupported(device.osVersion)) {
-                logger.info(`Lean mode: not applied to ${device.name} (${device.osVersion ?? 'unknown runtime'}) — iOS 18.5 or later only`);
-            }
-            else {
-                this.leanStore.apply(device.id, LEAN_LABELS);
+            if (!leanSupported(device.osVersion)) {
+                if (tier.name !== 'stock')
+                    logger.info(`Service tier: ${tier.name} not applied to ${device.name} (${device.osVersion ?? 'unknown runtime'}) — iOS 18.5 or later only`);
+                return;
             }
+            this.leanStore.setTier(device.id, tier, labelsFor(tier));
         }
         catch (e) {
-            logger.warn(`Lean mode: could not update ${device.name}, booting it as it is:`, e.message);
+            logger.warn(`Service tier: could not set ${device.name} to ${tier.name}, booting it as it is:`, e.message);
         }
     }
     /** Put back what Lean mode disabled on a device that is now shut down. A no-op for devices it never touched. */
@@ -1014,6 +1056,49 @@ export class IOSAgent {
             });
         }
     }
+    /**
+     * What `flow run` asks reset before a run, carried out on a booted device. Only the agent's report says it happened.
+     * It waits for the system services first: `Booted` shows before tccd and securityd serve, and not only on a boot this
+     * agent started — a device someone else just booted reads `booted` too. On a settled device the wait returns at once.
+     * The wait does not watch `isStale`; a shutdown meanwhile holds this boot's abandonment until its deadline.
+     */
+    async resetForRun(deviceId, request, isStale) {
+        // One budget for the wait and the steps: a device whose services never come up spends it waiting, and the steps
+        // that would have failed against it are reported failed instead of each running out its own timeout.
+        const deadline = Date.now() + RUN_RESET_BUDGET_MS;
+        const stop = () => isStale() || Date.now() >= deadline;
+        await this.simctl.waitForBootStatus(deviceId).catch((e) => logger.warn(`run reset: boot status unknown: ${firstLine(e)}`));
+        const steps = [];
+        if (request.uninstall.length > 0) {
+            steps.push({ item: 'app-uninstall', run: () => resetApps(request.uninstall, (id) => this.simctl.uninstallAppForReset(deviceId, id), stop) });
+        }
+        if (request.clear.length > 0) {
+            steps.push({ item: 'app-files', run: () => resetApps(request.clear, (id) => this.simctl.clearAppDataIfInstalled(deviceId, id), stop) });
+        }
+        steps.push({ item: 'keychain', run: () => this.simctl.resetKeychain(deviceId) }, { item: 'privacy-services', run: () => this.simctl.resetPrivacy(deviceId) }, 
+        // Through the clipboard queue: a clipboard read in flight parks a sentinel on this pasteboard.
+        { item: 'pasteboard', run: () => this.clearPasteboardQueued(deviceId, stop) }, { item: 'location', run: () => this.simctl.clearLocation(deviceId) });
+        return runResetSteps(steps, isStale, (item, e) => logger.warn(`run reset: ${item} failed: ${firstLine(e)}`), deadline);
+    }
+    /**
+     * The pasteboard step of a run reset. The queue can be held by a clipboard operation already running, so the wait for
+     * it is bounded too; a clear that reaches the front after the step gave up does nothing, because by then the run may
+     * have put something of its own there.
+     */
+    clearPasteboardQueued(deviceId, stop) {
+        let abandoned = false;
+        let timer;
+        const queued = this.clipboardQueue(deviceId, async () => {
+            if (abandoned || stop())
+                throw new PlatformError('the clipboard was busy for the whole reset');
+            await this.simctl.setPasteboard(deviceId, '');
+        });
+        const late = new Promise((_, reject) => {
+            timer = setTimeout(() => { abandoned = true; reject(new PlatformError('pasteboard clear timed out')); }, RUN_RESET_PASTEBOARD_TIMEOUT_MS);
+        });
+        queued.catch(() => { });
+        return Promise.race([queued, late]).finally(() => clearTimeout(timer));
+    }
     // Lazily set up the touch channel: a reconnect re-issues the session with touchHelper=null while the sim stays booted, so input self-heals without a fresh device:boot. Sync so a tap's start+end stay paired (async would drop touchEnd → stuck finger).
     ensureTouchHelper(state) {
         if (state.touchHelper)
@@ -1149,9 +1234,9 @@ export class IOSAgent {
         switch (msg.type) {
             case 'device:boot': {
                 // `external` and `automation` are added by the relay, never by the browser (see `DeviceBoot`).
-                const { deviceId, resetMode, acceptH264, secureContext, external, automation } = msg.payload;
+                const { deviceId, resetMode, acceptH264, secureContext, external, automation, serviceTier, runReset } = msg.payload;
                 const sessionId = msg.sessionId;
-                this.handleDeviceBoot(sessionId, deviceId, resetMode === 'full-erase', acceptH264 === true, { secureContext: !!secureContext, external: !!external }, msg.requestId, automation === true)
+                this.handleDeviceBoot(sessionId, deviceId, resetMode === 'full-erase', acceptH264 === true, { secureContext: !!secureContext, external: !!external }, msg.requestId, automation === true, serviceTier, runReset)
                     .catch((e) => logger.error('handleDeviceBoot failed:', e));
                 break;
             }
@@ -1256,8 +1341,12 @@ export class IOSAgent {
                 // The helper's answer, not its existence: a helper whose process has died reports every
                 // write as dropped, and that is what the caller needs to hear (#482).
                 const helper = state.touchHelper;
-                // terminal of a tap/swipe → ack the gesture
-                void this.ackInput(state, helper?.touchEnd() ? 'delivered' : this.refusalReason(helper, 'continuation'), requestId);
+                // terminal of a tap/swipe → ack the gesture, once the up is written (it may wait for the
+                // touch's minimum contact). The refusal is read then too, from the helper the state holds *then*:
+                // one replaced during the wait (a chrome reload, a reboot) is up and owns nothing, which is
+                // `no-gesture`, where the stopped one it replaced would say the channel is gone.
+                void (helper ? helper.touchEndAfterMinContact() : Promise.resolve(false))
+                    .then((sent) => this.ackInput(state, sent ? 'delivered' : this.refusalReason(state.touchHelper, 'continuation'), requestId));
                 break;
             }
             case 'input:pinch:start': {
@@ -2232,10 +2321,9 @@ export class IOSAgent {
         first?.touchHelper?.touchMove(x, y);
         return Promise.resolve();
     }
-    touchEnd() {
+    async touchEnd() {
         const first = this.liveDeviceState();
-        first?.touchHelper?.touchEnd();
-        return Promise.resolve();
+        await first?.touchHelper?.touchEndAfterMinContact();
     }
     async openUrl(url) {
         return this.simctl.openUrl(await this.soleLiveDeviceId(), url);