stim 1.11.0 → 1.12.0

package/dist/{device-remote-BQZSnnmE.mjs → device-remote-C0_o-tJH.mjs}

@@ -1,538 +1,20 @@
-import { u as getConfigDir } from "./config-BEq0Qw_a.mjs";
+import { d as getConfigDir } from "./config-0jCcMM0E.mjs";
 import { t as getExecutor } from "./exec-DK8KaVHK.mjs";
-import { r as createNdjsonWriter } from "./ndjson-CDY9IkVC.mjs";
-import { N as workspaceStateFile, O as workspaceDir, P as withDirLock, i as pidExists, j as workspaceLogsDir, k as workspaceId } from "./metro-BWLOJ_Wr.mjs";
-import { c as ownedDeviceLabel, u as resolvePackageJson } from "./project-BXZzOABt.mjs";
-import { a as clearRemoteSession, l as readRemoteSession, s as readMetroTunnel } from "./state-WGdIbi_d.mjs";
-import { t as withWorkspaceProcessLock } from "./workspace-process-lock-Cx74RSDZ.mjs";
-import { n as stripAnsi } from "./process-output-Fpl8PYi8.mjs";
-import { B as planMetroReach } from "./settings-B5oFZEri.mjs";
-import { u as probePublicHttp } from "./ownership-BiojdtAp.mjs";
-import { C as sanitizeDeviceLabel } from "./ios-DArbmwer.mjs";
-import { n as expoBinFromPackage, r as expoBinPath, s as findBinUpward } from "./server-expo-o6H5gcBc.mjs";
-import { a as LAUNCH_ERROR, i as INSTALL_ERROR, l as devClientDeepLink } from "./app-install-DHut6JnV.mjs";
-import { c as readMetroRecords, o as isBundleProof } from "./launch-verify-CuPDGXdr.mjs";
+import { N as workspaceStateFile, O as workspaceDir, P as withDirLock, f as clearWorkspaceStateKey, g as updateWorkspaceState, i as pidExists, j as workspaceLogsDir, k as workspaceId, m as readWorkspaceState$1 } from "./metro-Dzo30hvJ.mjs";
+import { o as ownedDeviceLabel } from "./project-B8rbutVC.mjs";
+import { a as clearRemoteSession, c as readMetroTunnel, u as readRemoteSession } from "./state-DcDgzfu3.mjs";
+import { i as signalDeclaredSpawns, r as refuseDeclaredSpawns, t as allowDeclaredSpawns } from "./spawn-claims-PT8aQpCa.mjs";
+import { t as withWorkspaceProcessLock } from "./workspace-process-lock-BvvJTfo_.mjs";
+import { a as formatElapsed } from "./command-output-BWCj5Vh-.mjs";
+import { B as planMetroReach } from "./settings-BlyDn2Oz.mjs";
+import { u as probePublicHttp } from "./ownership-B8d4kXBx.mjs";
+import { C as sanitizeDeviceLabel } from "./ios-CZWOHTTc.mjs";
+import { a as LAUNCH_ERROR, i as INSTALL_ERROR, l as devClientDeepLink } from "./app-install-CsZi0SAT.mjs";
+import { c as readMetroRecords, o as isBundleProof } from "./launch-verify-B2oR_kFN.mjs";
 import { t as compareStimVersions } from "./stim-installations-CINXy_su.mjs";
-import { createRequire } from "node:module";
-import { existsSync, mkdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { easMachineStateRoot, easMachineStateRoot as easMachineStateRoot$1, easSessionLedgerFile, easSessionLedgerLock, readEasSessionLedger, readEasSessionLedger as readEasSessionLedger$1, readJsonObject, validEasSessionClaim } from "@stim-cli/core/state";
 import { dirname, join, resolve } from "node:path";
-import { pathToFileURL } from "node:url";
-import { format } from "node:util";
-import { AsyncLocalStorage } from "node:async_hooks";
-//#region src/engine/remote-cache.ts
-const EAS_PROVIDER_PACKAGE = "eas-build-cache-provider";
-const RESOLVE_TIMEOUT_MS = 3e4;
-const UPLOAD_TIMEOUT_MS = 6e4;
-const CONFIG_TIMEOUT_MS = 3e4;
-const DYNAMIC_CONFIG_FILES = [
-	"app.config.ts",
-	"app.config.js",
-	"app.config.mjs",
-	"app.config.cjs"
-];
-const TIMED_OUT = Symbol("timed-out");
-function dynamicConfigFile(root) {
-	for (const name of DYNAMIC_CONFIG_FILES) if (existsSync(join(root, name))) return name;
-	return null;
-}
-function providerFromConfig(config) {
-	if (!config || typeof config !== "object") return null;
-	const expoField = config.expo;
-	const exp = expoField && typeof expoField === "object" ? expoField : config;
-	return exp.buildCacheProvider ?? exp.experiments?.buildCacheProvider ?? null;
-}
-function ownerFromConfig(config) {
-	if (!config || typeof config !== "object") return null;
-	const expoField = config.expo;
-	const owner = (expoField && typeof expoField === "object" ? expoField : config).owner;
-	return typeof owner === "string" && owner.trim() !== "" ? owner.trim() : null;
-}
-function normalizeProvider(raw) {
-	if (raw === null || raw === void 0 || raw === "") return null;
-	if (raw === "eas") return {
-		name: "eas",
-		reference: EAS_PROVIDER_PACKAGE,
-		options: {}
-	};
-	if (typeof raw === "object") {
-		const obj = raw;
-		if (typeof obj.plugin === "string" && obj.plugin.trim() !== "") {
-			const reference = obj.plugin.trim();
-			return {
-				name: reference,
-				reference,
-				options: obj.options && typeof obj.options === "object" ? obj.options : {}
-			};
-		}
-	}
-	return { invalid: typeof raw === "string" ? `"${raw}"` : JSON.stringify(raw) };
-}
-function runOptionsFor(platform) {
-	return platform === "android" ? { variant: "debug" } : { configuration: "Debug" };
-}
-function isProviderPlugin(plugin) {
-	if (!plugin || typeof plugin !== "object") return false;
-	const p = plugin;
-	const resolves = typeof p.resolveBuildCache === "function" || typeof p.resolveRemoteBuildCache === "function";
-	const uploads = typeof p.uploadBuildCache === "function" || typeof p.uploadRemoteBuildCache === "function";
-	return resolves && uploads;
-}
-function cacheLevel(value) {
-	return value === "local" || value === "remote" ? value : false;
-}
-function exitAfterFlush(code = 0, { exit = (c) => process.exit(c), stream = process.stdout } = {}) {
-	try {
-		stream.write("", () => exit(code));
-	} catch {
-		exit(code);
-	}
-}
-function readProjectConfig(root, { run = null, timeoutMs = CONFIG_TIMEOUT_MS } = {}) {
-	const dynamic = dynamicConfigFile(root);
-	if (!dynamic) {
-		const file = join(root, "app.json");
-		if (!existsSync(file)) return {
-			config: null,
-			source: null
-		};
-		try {
-			return {
-				config: JSON.parse(readFileSync(file, "utf-8")),
-				source: "app.json"
-			};
-		} catch (err) {
-			return { unavailable: `app.json could not be parsed: ${firstLine(err)}` };
-		}
-	}
-	const bin = expoBinPath(root);
-	if (!bin) return { unavailable: `${dynamic} is code, so it has to be evaluated to read its buildCacheProvider, and the \`expo\` package is not resolvable from this project (no expo/package.json to read a bin from, and no node_modules/.bin/expo here or in any parent)` };
-	const exec = run || ((file, args, opts) => getExecutor().runFile(file, args, opts));
-	let stdout;
-	try {
-		stdout = exec(bin, [
-			"config",
-			"--json",
-			root
-		], { timeoutMs });
-	} catch (err) {
-		return { unavailable: `\`expo config --json\` failed: ${firstLine(err)}` };
-	}
-	try {
-		return {
-			config: JSON.parse(String(stdout)),
-			source: dynamic
-		};
-	} catch (err) {
-		return { unavailable: `\`expo config --json\` did not print JSON: ${firstLine(err)}` };
-	}
-}
-async function loadPlugin(projectRoot, reference, { requireFrom = null } = {}) {
-	const localRequire = requireFrom ? requireFrom(projectRoot) : createRequire(join(projectRoot, "package.json"));
-	const file = localRequire.resolve(reference);
-	let mod;
-	try {
-		mod = localRequire(file);
-	} catch (err) {
-		if (err?.code !== "ERR_REQUIRE_ESM") throw err;
-		mod = await import(pathToFileURL(file).href);
-	}
-	const plugin = mod?.default ?? mod;
-	if (!isProviderPlugin(plugin)) throw new Error(`"${reference}" does not export resolveBuildCache and uploadBuildCache functions`);
-	return plugin;
-}
-async function loadProjectProvider(projectRoot, { isExpo = true, run = null, requireFrom = null, timeoutMs = CONFIG_TIMEOUT_MS } = {}) {
-	if (!isExpo) return { none: true };
-	const read = readProjectConfig(projectRoot, {
-		run,
-		timeoutMs
-	});
-	if (read.unavailable) return { unavailable: read.unavailable };
-	const normalized = normalizeProvider(providerFromConfig(read.config));
-	if (!normalized) return { none: true };
-	if (normalized.invalid) return { unavailable: `buildCacheProvider is ${normalized.invalid}, which is not "eas" or { plugin: <module> }` };
-	if (normalized.reference === "@stim-cli/expo-build-cache") return { none: true };
-	let plugin;
-	try {
-		plugin = await loadPlugin(projectRoot, normalized.reference, { requireFrom });
-	} catch (err) {
-		const missing = err?.code === "MODULE_NOT_FOUND";
-		return { unavailable: normalized.name === "eas" && missing ? `the EAS build cache needs the \`${EAS_PROVIDER_PACKAGE}\` package, which is not installed in this project` : `${normalized.name} could not be loaded: ${firstLine(err)}` };
-	}
-	return {
-		provider: {
-			plugin,
-			options: normalized.options ?? {}
-		},
-		name: normalized.name,
-		owner: ownerFromConfig(read.config)
-	};
-}
-const WHOAMI_TIMEOUT_MS = 15e3;
-const EAS_CLI_PACKAGE = "eas-cli";
-const EAS_CLI_BIN = "eas";
-function parseWhoami({ stdout = "", stderr = "", exitCode = 0 } = {}) {
-	const out = stripAnsi(stdout);
-	const combined = `${out}\n${stripAnsi(stderr)}`;
-	if (/^\s*Not logged in\s*$/m.test(combined)) return { loggedOut: true };
-	if (exitCode !== 0) return { unknown: firstLine(combined.trim() || `eas whoami exited ${exitCode}`) };
-	const lines = out.split("\n").map((line) => line.trim()).filter((line) => line !== "");
-	if (lines.length === 0) return { unknown: "eas whoami printed nothing" };
-	const raw = lines[0];
-	if (raw === void 0) return { unknown: "eas whoami printed nothing" };
-	const viaToken = /\(authenticated using EXPO_TOKEN\)\s*$/.test(raw);
-	const display = raw.replace(/\s*\(authenticated using EXPO_TOKEN\)\s*$/, "").trim();
-	const accounts = [];
-	for (const line of lines) {
-		const name = /^\u2022\s*(\S+)\s*\(Role:/.exec(line)?.[1];
-		if (name !== void 0) accounts.push(name);
-	}
-	if (accounts.length === 0 && !display.endsWith("(robot)") && display !== "robot") accounts.push(display);
-	return {
-		loggedIn: true,
-		account: display,
-		accounts: accounts.length ? accounts : null,
-		viaToken
-	};
-}
-function isEasAuthFailureText(text) {
-	const t = stripAnsi(text || "");
-	if (t.trim() === "") return false;
-	return /not logged in/i.test(t) || /\beas login\b/i.test(t) || /EXPO_TOKEN/.test(t) || /unauthorized/i.test(t) || /not authorized/i.test(t) || /authentication (failed|required)/i.test(t);
-}
-function easAuthNote(status) {
-	const { code, account, owner, reason, phase = "resolve" } = status || {};
-	const because = reason ? ` (${reason})` : "";
-	if (code === "logged-out") return `eas is not authenticated${because} -- run \`eas login\` (or set EXPO_TOKEN); ` + (phase === "upload" ? "this build stayed in the local cache" : "building with the local cache only");
-	if (code === "wrong-account") return `eas is authenticated as ${account}, and this project's owner is ${owner} -- run \`eas login\` as a member of ${owner} (or set EXPO_TOKEN); consulting the EAS cache anyway`;
-	return null;
-}
-function resolveEasCliBin(projectRoot, { lookupPath = null } = {}) {
-	const fromPackage = expoBinFromPackage(resolvePackageJson(projectRoot, EAS_CLI_PACKAGE), EAS_CLI_BIN);
-	if (fromPackage) return {
-		file: fromPackage,
-		source: "project"
-	};
-	const shim = findBinUpward(projectRoot, EAS_CLI_BIN);
-	if (shim) return {
-		file: shim,
-		source: "project"
-	};
-	const onPath = lookupPath ? lookupPath() : getExecutor().findExecutable(EAS_CLI_BIN);
-	const file = (String(onPath || "").split("\n")[0] ?? "").trim();
-	return file ? {
-		file,
-		source: "path"
-	} : null;
-}
-const easAuthCache = /* @__PURE__ */ new Map();
-function checkEasAuth({ projectRoot, owner = null, run = null, resolveBin = null, timeoutMs = WHOAMI_TIMEOUT_MS, cache = easAuthCache }) {
-	const key = `${projectRoot}::${owner || ""}`;
-	if (cache?.has(key)) return cache.get(key);
-	const answer = probeEasAuth({
-		projectRoot,
-		owner,
-		run,
-		resolveBin,
-		timeoutMs
-	});
-	cache?.set(key, answer);
-	return answer;
-}
-function probeEasAuth({ projectRoot, owner, run, resolveBin, timeoutMs }) {
-	const bin = (resolveBin || resolveEasCliBin)(projectRoot);
-	if (!bin) return {
-		failed: true,
-		code: "no-cli",
-		reason: "no `eas` executable is resolvable from this project or on PATH",
-		remedy: "Install eas-cli (`npm i -g eas-cli`, or as a project devDependency), then run `eas login`."
-	};
-	const exec = run || ((file, args, opts) => getExecutor().runFile(file, args, opts));
-	let result;
-	try {
-		result = {
-			stdout: String(exec(bin.file, ["whoami"], { timeoutMs }) ?? ""),
-			exitCode: 0
-		};
-	} catch (e) {
-		const err = e;
-		if (err?.code === "ETIMEDOUT" || err?.signal === "SIGTERM" || err?.killed) return { unknown: `eas whoami timed out after ${timeoutMs}ms` };
-		result = {
-			stdout: String(err?.stdout ?? ""),
-			stderr: String(err?.stderr ?? err?.message ?? ""),
-			exitCode: typeof err?.status === "number" ? err.status : 1
-		};
-	}
-	const parsed = parseWhoami(result);
-	if (parsed.loggedOut) return {
-		failed: true,
-		code: "logged-out",
-		reason: "eas whoami says \"Not logged in\"",
-		remedy: "Run `eas login` (or set EXPO_TOKEN)."
-	};
-	if (parsed.unknown) return { unknown: parsed.unknown };
-	if (owner && Array.isArray(parsed.accounts) && !parsed.accounts.includes(owner)) return {
-		failed: true,
-		code: "wrong-account",
-		account: parsed.account,
-		accounts: parsed.accounts,
-		owner,
-		reason: `eas is authenticated as ${parsed.account} (accounts: ${parsed.accounts.join(", ")}), which does not include this project's owner ${owner}`,
-		remedy: `Run \`eas login\` as a member of ${owner}, or set EXPO_TOKEN to a token for it.`
-	};
-	return {
-		ok: true,
-		account: parsed.account,
-		accounts: parsed.accounts,
-		viaToken: parsed.viaToken,
-		source: bin.source
-	};
-}
-const capturing = [];
-const abandoned = /* @__PURE__ */ new Set();
-let patched = null;
-const PROVIDER_CONTEXT = new AsyncLocalStorage();
-function uploadDestination(lines) {
-	const text = (lines || []).map(stripAnsi);
-	for (const line of text) {
-		const url = /(https?:\/\/[^\s'"]+)/.exec(line)?.[1];
-		if (url !== void 0) return url.replace(/[.,)\]]+$/, "");
-	}
-	for (const line of text) {
-		const slug = /\bto\s+(@?[\w.-]+\/[\w.-]+)/i.exec(line)?.[1];
-		if (slug !== void 0) return slug.replace(/[.,)\]]+$/, "");
-	}
-	return null;
-}
-function providerNote(text) {
-	return `${"cache".padEnd(11)} ${text}`;
-}
-function currentFrame() {
-	const store = PROVIDER_CONTEXT.getStore();
-	return store && (capturing.includes(store) || abandoned.has(store)) ? store : null;
-}
-function install() {
-	if (patched && process.stdout.write === patched.patchedWrite) return;
-	const stdout = process.stdout;
-	const write = stdout.write.bind(stdout);
-	const log = console.log;
-	const passthrough = write;
-	const patchedWrite = ((chunk, encoding, callback) => {
-		const frame = currentFrame();
-		if (!frame) return passthrough(chunk, encoding, callback);
-		const cb = typeof encoding === "function" ? encoding : callback;
-		absorb(frame, typeof chunk === "string" ? chunk : String(chunk));
-		if (typeof cb === "function") cb();
-		return true;
-	});
-	const patchedLog = (...args) => {
-		const frame = currentFrame();
-		if (!frame) return log(...args);
-		absorb(frame, `${format(...args)}\n`);
-	};
-	stdout.write = patchedWrite;
-	console.log = patchedLog;
-	patched = {
-		stdout,
-		write,
-		log,
-		patchedWrite,
-		patchedLog
-	};
-}
-function uninstall() {
-	if (!patched || capturing.length || abandoned.size) return;
-	if (patched.stdout.write === patched.patchedWrite) patched.stdout.write = patched.write;
-	if (console.log === patched.patchedLog) console.log = patched.log;
-	patched = null;
-}
-function absorb(frame, chunk) {
-	try {
-		process.stderr.write(chunk);
-	} catch {}
-	frame.pending += chunk;
-	let index = frame.pending.indexOf("\n");
-	while (index !== -1) {
-		emitLine(frame, frame.pending.slice(0, index));
-		frame.pending = frame.pending.slice(index + 1);
-		index = frame.pending.indexOf("\n");
-	}
-}
-function emitLine(frame, raw) {
-	const line = stripAnsi(raw).trim();
-	if (line === "") return;
-	frame.lines.push(line);
-	const writer = frame.writer();
-	try {
-		writer?.write({
-			src: "build",
-			level: "debug",
-			event: "provider",
-			msg: line
-		});
-	} catch {}
-	frame.onLine?.(line);
-}
-function beginCapture({ logWriter = null, projectRoot = null, platform = null, onLine = null } = {}) {
-	let own = null;
-	const frame = {
-		lines: [],
-		pending: "",
-		onLine,
-		writer: () => {
-			if (logWriter) return logWriter;
-			if (own) return own;
-			if (!projectRoot || !platform) return null;
-			own = createNdjsonWriter(join(workspaceLogsDir(projectRoot), `build-${platform}.ndjson`));
-			return own;
-		},
-		close: () => {
-			own?.close?.();
-			own = null;
-		}
-	};
-	capturing.push(frame);
-	install();
-	return frame;
-}
-function endCapture(frame) {
-	if (!frame) return;
-	const at = capturing.lastIndexOf(frame);
-	if (at !== -1) capturing.splice(at, 1);
-	abandoned.delete(frame);
-	if (frame.pending !== "") {
-		const rest = frame.pending;
-		frame.pending = "";
-		emitLine(frame, rest);
-	}
-	frame.close();
-	uninstall();
-}
-function abandonCapture(frame, work) {
-	if (!frame) return;
-	const at = capturing.lastIndexOf(frame);
-	if (at !== -1) capturing.splice(at, 1);
-	abandoned.add(frame);
-	Promise.resolve(work).then(() => endCapture(frame), () => endCapture(frame));
-}
-async function resolveRemote({ provider, platform, projectRoot, fingerprintHash, runOptions = null, timeoutMs = RESOLVE_TIMEOUT_MS, logWriter = null } = {}) {
-	if (!provider?.plugin || !fingerprintHash) return null;
-	const opts = runOptions || runOptionsFor(platform);
-	const outcome = await withBudget(async () => {
-		const props = {
-			fingerprintHash: await providerFingerprint({
-				provider,
-				platform,
-				projectRoot,
-				runOptions: opts
-			}) ?? fingerprintHash,
-			platform,
-			runOptions: opts,
-			projectRoot
-		};
-		return typeof provider.plugin.resolveBuildCache === "function" ? provider.plugin.resolveBuildCache(props, provider.options) : provider.plugin.resolveRemoteBuildCache(props, provider.options);
-	}, timeoutMs, {
-		logWriter,
-		projectRoot,
-		platform
-	});
-	if (outcome.timedOut) return { timedOut: true };
-	if (outcome.error) return { failed: firstLine(outcome.error) };
-	const appPath = typeof outcome.value === "string" ? outcome.value.trim() : "";
-	if (!appPath) return null;
-	if (!existsSync(appPath)) return { failed: `returned ${appPath}, which does not exist` };
-	return { appPath };
-}
-async function uploadRemote({ provider, platform, projectRoot, fingerprintHash, buildPath, runOptions = null, timeoutMs = UPLOAD_TIMEOUT_MS, logWriter = null, note = (line) => console.error(line) } = {}) {
-	if (!provider?.plugin || !fingerprintHash || !buildPath) return { skipped: true };
-	const opts = runOptions || runOptionsFor(platform);
-	let announced = false;
-	const onLine = (line) => {
-		if (announced) return;
-		const dest = uploadDestination([line]);
-		if (!dest) return;
-		announced = true;
-		note(providerNote(`uploading to ${dest}`));
-	};
-	const outcome = await withBudget(async () => {
-		const props = {
-			projectRoot,
-			platform,
-			fingerprintHash: await providerFingerprint({
-				provider,
-				platform,
-				projectRoot,
-				runOptions: opts
-			}) ?? fingerprintHash,
-			buildPath,
-			runOptions: opts
-		};
-		return typeof provider.plugin.uploadBuildCache === "function" ? provider.plugin.uploadBuildCache(props, provider.options) : provider.plugin.uploadRemoteBuildCache(props, provider.options);
-	}, timeoutMs, {
-		logWriter,
-		projectRoot,
-		platform,
-		onLine
-	});
-	if (outcome.timedOut) return { timedOut: true };
-	if (outcome.error) return { failed: firstLine(outcome.error) };
-	if (typeof outcome.value !== "string" || outcome.value.trim() === "") {
-		const authLine = outcome.lines.find((line) => isEasAuthFailureText(line));
-		return { failed: authLine ? firstLine(authLine) : "the provider returned no upload destination" };
-	}
-	const destination = uploadDestination(outcome.lines);
-	return destination ? {
-		uploaded: true,
-		destination
-	} : { uploaded: true };
-}
-async function providerFingerprint({ provider, platform, projectRoot, runOptions }) {
-	if (typeof provider.plugin.calculateFingerprintHash !== "function") return null;
-	try {
-		const hash = await provider.plugin.calculateFingerprintHash({
-			projectRoot,
-			platform,
-			runOptions
-		}, provider.options);
-		return typeof hash === "string" && hash.trim() !== "" ? hash.trim() : null;
-	} catch {
-		return null;
-	}
-}
-async function withBudget(factory, ms, capture) {
-	let timer = null;
-	const timeout = new Promise((resolve) => {
-		timer = setTimeout(() => resolve(TIMED_OUT), ms);
-		timer?.unref?.();
-	});
-	const frame = beginCapture(capture || {});
-	const work = Promise.resolve().then(() => PROVIDER_CONTEXT.run(frame, factory)).then((value) => ({ value }), (error) => ({ error }));
-	try {
-		const settled = await Promise.race([work, timeout]);
-		if (settled === TIMED_OUT) {
-			abandonCapture(frame, work);
-			return {
-				timedOut: true,
-				lines: frame.lines
-			};
-		}
-		endCapture(frame);
-		return {
-			...settled,
-			lines: frame.lines
-		};
-	} catch (err) {
-		endCapture(frame);
-		throw err;
-	} finally {
-		if (timer) clearTimeout(timer);
-	}
-}
-function firstLine(err) {
-	const line = (String(err?.message || err || "unknown error").trim().split("\n")[0] ?? "").trim();
-	return line.length > 200 ? `${line.slice(0, 197)}...` : line;
-}
-//#endregion
 //#region src/engine/metro-gate.ts
 const REMOTE_METRO_WRONG = "STIM_REMOTE_METRO_WRONG";
 const GATE_TIMEOUT_MS = 25e3;
@@ -1004,6 +486,14 @@ function removeEasSessionClaim(sessionId, root = easMachineStateRoot()) {
 //#endregion
 //#region src/engine/eas-project-lock.ts
 const EAS_PROJECT_LOCK_WAIT_MS = 24e4;
+function describeEasProjectLockHolder(holder, now) {
+	const { purpose, workspace } = holder.details;
+	const facts = [`pid ${holder.owner.pid}`];
+	if (typeof workspace === "string") facts.push(`in ${workspace}`);
+	const started = Date.parse(holder.startedAt);
+	if (Number.isFinite(started)) facts.push(`running for ${formatElapsed(now - started)}`);
+	return `${typeof purpose === "string" ? purpose : "another Stim EAS operation"} (${facts.join(", ")})`;
+}
 function withEasProjectLock(_root, fn, options = {}) {
 	const { machineRoot = easMachineStateRoot$1(), ...lockOptions } = options;
 	assertEasMachineRootWritable(machineRoot);
@@ -1014,6 +504,144 @@ function withEasProjectLock(_root, fn, options = {}) {
 	});
 }
 //#endregion
+//#region src/engine/native-run.ts
+const NATIVE_RUN_LOCK = "native-run";
+const NATIVE_RUN_WAIT_MS = 18e5;
+const WAIT_HEARTBEAT_MS = 3e4;
+const CANCEL_REQUEST_KEY = "nativeRunCancel";
+function nativeRunHolder(holder) {
+	const { command, platform, slot } = holder.details;
+	return {
+		command: typeof command === "string" ? command : null,
+		platform: typeof platform === "string" ? platform : null,
+		slot: typeof slot === "string" ? slot : "default"
+	};
+}
+function describeNativeRunHolder(holder, now) {
+	const { command, slot } = nativeRunHolder(holder);
+	const started = Date.parse(holder.startedAt);
+	const facts = [`pid ${holder.owner.pid}`];
+	if (Number.isFinite(started)) facts.push(`running for ${formatElapsed(now - started)}`);
+	if (command === null) return `another Stim run (${facts.join(", ")})`;
+	return `\`stim ${command}${slot === "default" ? "" : ` --slot ${slot}`}\` (${facts.join(", ")})`;
+}
+/**
+* Report a wait on the native-run lock: one line as soon as a holder is seen, a line for each new
+* holder, and a heartbeat every WAIT_HEARTBEAT_MS while the same holder keeps it.
+*/
+function nativeRunWaitNotice({ write, now = Date.now, describe = describeNativeRunHolder }) {
+	let claimId = null;
+	let lastAt = 0;
+	return (holder, firstLine) => {
+		const at = now();
+		if (holder.claimId !== claimId) {
+			claimId = holder.claimId;
+			lastAt = at;
+			write(firstLine ?? `waiting for ${describe(holder, at)} in this workspace to finish`);
+			return;
+		}
+		if (at - lastAt < WAIT_HEARTBEAT_MS) return;
+		lastAt = at;
+		write(`still waiting for ${describe(holder, at)}`);
+	};
+}
+/**
+* What `stop` does about the run holding the native-run lock. A build is interrupted only when the stop
+* leaves it nothing to deploy to: the whole workspace stops, the build targets the stopped slot, or the
+* stopped slot is the workspace's only device. A build for another slot that stays is left running and
+* the stop proceeds without the lock. Only an owner whose identity is proven live is signalled.
+*/
+function decideStopAction({ stopSlot, holder, ownerIdentity, deviceSlots }) {
+	if (holder.command !== "ios" && holder.command !== "android") return { action: "wait" };
+	if (!(stopSlot === void 0 || holder.slot === stopSlot || deviceSlots.includes(stopSlot) && deviceSlots.every((slot) => slot === stopSlot))) return { action: "proceed" };
+	return ownerIdentity === "same" ? { action: "interrupt" } : { action: "refuse" };
+}
+function requestNativeRunCancel(root, claimId, pid = process.pid) {
+	updateWorkspaceState(root, (state) => ({
+		...state,
+		[CANCEL_REQUEST_KEY]: {
+			claimId,
+			pid,
+			at: (/* @__PURE__ */ new Date()).toISOString()
+		}
+	}));
+}
+function cancelRequestFor(root, claimId) {
+	const request = readWorkspaceState$1(root)?.[CANCEL_REQUEST_KEY];
+	if (request?.claimId !== claimId || typeof request.pid !== "number") return null;
+	return { pid: request.pid };
+}
+function clearNativeRunCancel(root, claimId) {
+	try {
+		clearWorkspaceStateKey(root, CANCEL_REQUEST_KEY, (value) => value?.claimId === claimId);
+	} catch {}
+}
+let cancelled = null;
+/** Why this process's native run was cancelled, or null while it was not. */
+function runCancellation() {
+	return cancelled;
+}
+function cancelledFailure(platform, { code, message }) {
+	if (cancelled === null) return null;
+	return {
+		code: "STIM_CANCELLED",
+		message: `The ${platform} run was ${cancelled} before it finished.`,
+		remedy: `Run \`stim ${platform}\` again when you want the app on a device.`,
+		lines: [`it stopped at ${code ?? "an unfinished step"}${message ? `: ${message}` : ""}`]
+	};
+}
+function cancelOnInterrupt({ root, claim, write, exit }) {
+	let signals = 0;
+	const onInterrupt = () => {
+		signals += 1;
+		if (signals > 1) {
+			exit(130);
+			return;
+		}
+		const request = cancelRequestFor(root, claim.claimId);
+		cancelled = request ? `cancelled by \`stim stop\` (pid ${request.pid})` : "cancelled by an interrupt";
+		refuseDeclaredSpawns(`the run was ${cancelled}`);
+		const signalled = signalDeclaredSpawns("SIGINT");
+		write(signalled > 0 ? `${cancelled}; stopping the running build tool` : request ? `${cancelled}; stopping before the next build tool or install` : cancelled);
+		if (signalled === 0 && !request) exit(130);
+	};
+	process.on("SIGINT", onInterrupt);
+	return () => {
+		process.off("SIGINT", onInterrupt);
+		allowDeclaredSpawns();
+		clearNativeRunCancel(root, claim.claimId);
+	};
+}
+/**
+* Run an `ios` or `android` invocation under the workspace's native-run lock: the claim records the
+* command, platform and slot, and a wait for another holder is reported on `write`. The first SIGINT
+* forwards the interrupt to the running declared build tool; a run `stim stop` cancelled between build
+* tools starts no further one; a terminal interrupt with no build tool running, or a second SIGINT, exits
+* with 130 at once.
+*/
+function withNativeBuildRun(root, details, fn, { write, exit = (code) => process.exit(code) }) {
+	const notice = nativeRunWaitNotice({ write });
+	return withWorkspaceProcessLock(workspaceDir(root), NATIVE_RUN_LOCK, async (claim) => {
+		const dispose = cancelOnInterrupt({
+			root,
+			claim,
+			write,
+			exit
+		});
+		try {
+			return await fn(claim);
+		} finally {
+			dispose();
+		}
+	}, {
+		external: true,
+		waitMs: NATIVE_RUN_WAIT_MS,
+		declareSpawns: true,
+		details: { ...details },
+		onHeld: (holder) => notice(holder)
+	});
+}
+//#endregion
 //#region src/engine/device-remote.ts
 const REMOTE_SESSION_ERROR = "STIM_NO_REMOTE_SESSION";
 const REMOTE_METRO_ERROR = "STIM_REMOTE_METRO_UNREACHABLE";
@@ -1437,67 +1065,114 @@ function withRemoteSessionLock(root, fn, options = {}) {
 		...options
 	});
 }
-async function ensureRemoteBootOwned({ root, platform, sessionName, startedAt, boot, createdSessionId, abandonCreatedSession, webPreviewUrl = () => null, writeState, register = () => {}, withProjectLock = withEasProjectLock, withLock = withRemoteSessionLock, removeEasSessionClaim: removeClaim = removeEasSessionClaim, ledgerRoot = easMachineStateRoot$1() }) {
+const EAS_START_HOLD_MS = 108e4 + Math.ceil(DAEMON_WAIT_MS / DAEMON_POLL_MS) * 35e3;
+async function ensureRemoteBootOwned({ root, platform, sessionName, startedAt, boot, createdSessionId, abandonCreatedSession, webPreviewUrl = () => null, writeState, register = () => {}, withProjectLock = withEasProjectLock, withLock = withRemoteSessionLock, removeEasSessionClaim: removeClaim = removeEasSessionClaim, ledgerRoot = easMachineStateRoot$1(), notice = () => {}, now = Date.now }) {
+	const waitNotice = nativeRunWaitNotice({
+		write: notice,
+		now,
+		describe: describeEasProjectLockHolder
+	});
+	let stuck = null;
+	let seen = null;
+	let projectLocked = false;
 	try {
-		return await withProjectLock(root, () => withLock(root, async () => {
-			register();
-			const booted = await boot();
-			if (booted.failed) return booted;
-			const sessionId = createdSessionId();
-			if (!sessionId) return booted;
-			try {
-				recordEasSessionClaim({
-					sessionId,
-					name: sessionName,
-					platform,
-					workspaceRoot: root,
-					workspaceHome: getConfigDir(),
-					stateFile: workspaceStateFile(root)
-				}, ledgerRoot);
-				const preview = webPreviewUrl();
-				writeState(root, { remoteDevice: {
-					platform,
-					sessionId,
-					startedAt,
-					...preview ? { webPreviewUrl: preview } : {}
-				} });
-				return booted;
-			} catch (err) {
-				const cleanup = abandonCreatedSession();
-				if (cleanup.ok) {
-					let removalFailure = "the claim store did not remove it";
-					try {
-						if (removeClaim(sessionId, ledgerRoot)) return {
+		return await withProjectLock(root, () => {
+			projectLocked = true;
+			return withLock(root, async () => {
+				register();
+				const booted = await boot();
+				if (booted.failed) return booted;
+				const sessionId = createdSessionId();
+				if (!sessionId) return booted;
+				try {
+					recordEasSessionClaim({
+						sessionId,
+						name: sessionName,
+						platform,
+						workspaceRoot: root,
+						workspaceHome: getConfigDir(),
+						stateFile: workspaceStateFile(root)
+					}, ledgerRoot);
+					const preview = webPreviewUrl();
+					writeState(root, { remoteDevice: {
+						platform,
+						sessionId,
+						startedAt,
+						...preview ? { webPreviewUrl: preview } : {}
+					} });
+					return booted;
+				} catch (err) {
+					const cleanup = abandonCreatedSession();
+					if (cleanup.ok) {
+						let removalFailure = "the claim store did not remove it";
+						try {
+							if (removeClaim(sessionId, ledgerRoot)) return {
+								failed: true,
+								code: "STIM_REMOTE_SESSION_STATE",
+								reason: `Could not record EAS session ${sessionId}: ${describe(err)}. The session was stopped.`,
+								remedy: "Fix workspace state storage, then retry the remote command."
+							};
+						} catch (error) {
+							removalFailure = describe(error);
+						}
+						return {
 							failed: true,
-							code: "STIM_REMOTE_SESSION_STATE",
-							reason: `Could not record EAS session ${sessionId}: ${describe(err)}. The session was stopped.`,
-							remedy: "Fix workspace state storage, then retry the remote command."
+							code: "STIM_REMOTE_SESSION_CLEANUP",
+							reason: `Could not record EAS session ${sessionId}: ${describe(err)}. The session was stopped, but its ownership claim could not be removed: ${removalFailure}.`,
+							remedy: `The stopped session claim remains under ${ledgerRoot}. Repair that ownership ledger before retrying the remote command.`
 						};
-					} catch (error) {
-						removalFailure = describe(error);
 					}
 					return {
 						failed: true,
-						code: "STIM_REMOTE_SESSION_CLEANUP",
-						reason: `Could not record EAS session ${sessionId}: ${describe(err)}. The session was stopped, but its ownership claim could not be removed: ${removalFailure}.`,
-						remedy: `The stopped session claim remains under ${ledgerRoot}. Repair that ownership ledger before retrying the remote command.`
+						code: cleanup.code ?? "STIM_REMOTE_SESSION_CLEANUP",
+						reason: `Could not record EAS session ${sessionId}: ${describe(err)}. ${cleanup.reason ?? ""}`.trim(),
+						remedy: cleanup.remedy ?? `Run \`eas simulator:stop --id ${sessionId}\`.`
 					};
 				}
-				return {
-					failed: true,
-					code: cleanup.code ?? "STIM_REMOTE_SESSION_CLEANUP",
-					reason: `Could not record EAS session ${sessionId}: ${describe(err)}. ${cleanup.reason ?? ""}`.trim(),
-					remedy: cleanup.remedy ?? `Run \`eas simulator:stop --id ${sessionId}\`.`
+			});
+		}, {
+			ownerPurpose: "EAS remote start",
+			machineRoot: ledgerRoot,
+			waitMs: Number.POSITIVE_INFINITY,
+			details: {
+				workspace: root,
+				platform
+			},
+			now,
+			onHeld: (holder) => {
+				const at = now();
+				if (seen?.claimId !== holder.claimId) seen = {
+					claimId: holder.claimId,
+					at
 				};
+				const claimedAt = Date.parse(holder.startedAt);
+				const heldMs = at - (Number.isFinite(claimedAt) ? Math.min(claimedAt, seen.at) : seen.at);
+				if (heldMs > EAS_START_HOLD_MS) {
+					stuck = {
+						holder,
+						heldMs
+					};
+					const error = /* @__PURE__ */ new Error(`The eas-project lock was held past ${formatElapsed(EAS_START_HOLD_MS)}.`);
+					error.code = "STIM_LOCK_TIMEOUT";
+					throw error;
+				}
+				waitNotice(holder, `waiting for ${describeEasProjectLockHolder(holder, at)} to release the EAS project lock; one EAS session starts at a time on this machine`);
 			}
-		}), {
-			ownerPurpose: "EAS remote start",
-			machineRoot: ledgerRoot
 		});
 	} catch (err) {
+		const code = err.code ?? "STIM_NO_REMOTE_SESSION";
+		if (stuck && !projectLocked) {
+			const { holder, heldMs } = stuck;
+			return {
+				failed: true,
+				code,
+				reason: `${describeEasProjectLockHolder(holder, now())} has held the EAS project lock for ${formatElapsed(heldMs)}; an EAS session start holds it for at most ${formatElapsed(EAS_START_HOLD_MS)}.`,
+				remedy: `If pid ${holder.owner.pid} is stuck, stop it, then run the remote command again.`
+			};
+		}
 		return {
 			failed: true,
-			code: err.code ?? "STIM_NO_REMOTE_SESSION",
+			code,
 			reason: describe(err),
 			remedy: "Retry the remote command after the other workspace operation finishes."
 		};
@@ -1740,4 +1415,4 @@ function bundleEntryPoint(root, isExpo) {
 	return local ? normalized : `node_modules/${normalized}`;
 }
 //#endregion
-export { UPLOAD_TIMEOUT_MS as A, resolveRemote as B, listOwnedSessionsArgs as C, verifyStoppedSession as D, stopSessionArgs as E, isEasAuthFailureText as F, loadProjectProvider as I, ownerFromConfig as L, checkEasAuth as M, easAuthNote as N, gateMetroOrigin as O, exitAfterFlush as P, providerFromConfig as R, isDefinitiveMissingSessionError as S, parseSessionListPage as T, uploadRemote as V, easCliSupport as _, ensureMetroReachable as a, getSessionArgs as b, remoteAndroidDeps as c, withRemoteSessionLock as d, withEasProjectLock as f, MIN_EAS_CLI_SIMULATOR_VERSION as g, removeEasSessionClaim as h, endRecordedSession as i, cacheLevel as j, RESOLVE_TIMEOUT_MS as k, remoteIosDeps as l, readEasSessionLedger$1 as m, binOnPath as n, ensureRemoteBootOwned as o, easMachineStateRoot$1 as p, bundleEntryPoint as r, readInstalledEasCliVersion as s, REMOTE_SESSION_ERROR as t, resolveRemoteContext as u, easCliUpgradeRemedy as v, ownedSessionName as w, inspectSessionForTeardown as x, findOrphanedOwnedSessions as y, resolveEasCliBin as z };
+export { findOrphanedOwnedSessions as A, withEasProjectLock as C, MIN_EAS_CLI_SIMULATOR_VERSION as D, removeEasSessionClaim as E, ownedSessionName as F, parseSessionListPage as I, stopSessionArgs as L, inspectSessionForTeardown as M, isDefinitiveMissingSessionError as N, easCliSupport as O, listOwnedSessionsArgs as P, verifyStoppedSession as R, withNativeBuildRun as S, readEasSessionLedger$1 as T, describeNativeRunHolder as _, ensureMetroReachable as a, requestNativeRunCancel as b, remoteAndroidDeps as c, withRemoteSessionLock as d, NATIVE_RUN_LOCK as f, decideStopAction as g, clearNativeRunCancel as h, endRecordedSession as i, getSessionArgs as j, easCliUpgradeRemedy as k, remoteIosDeps as l, cancelledFailure as m, binOnPath as n, ensureRemoteBootOwned as o, NATIVE_RUN_WAIT_MS as p, bundleEntryPoint as r, readInstalledEasCliVersion as s, REMOTE_SESSION_ERROR as t, resolveRemoteContext as u, nativeRunHolder as v, easMachineStateRoot$1 as w, runCancellation as x, nativeRunWaitNotice as y, gateMetroOrigin as z };