stim 1.17.2 → 1.19.0

package/dist/react-native-ios-CSpIxexZ.mjs

@@ -0,0 +1,2083 @@
+import { t as getExecutor } from "./exec-i8GDPwq9.mjs";
+import { t as spawnEntry } from "./spawn-entry-Dcb7sDUz.mjs";
+import { _ as stepTimer, c as launchErrorReport, i as formatDuration, l as phaseLine, m as shortHash, n as appReadinessMessage, v as launchErrorPreview } from "./command-output-Bt8ygHE7.mjs";
+import { E as upsertProject, L as deviceSlotFileKey, R as deviceSlotKey, p as getProject, u as getConcurrencyLimits, v as recordIosSchemeApprovals } from "./config-DC5jEtd1.mjs";
+import { c as writeWorkspaceState, g as workspaceAgentDeviceDir, r as readWorkspaceState$1, x as workspaceLogsDir$1 } from "./workspace-state-CR9X86xJ.mjs";
+import { M as writeWorkspaceLaunch, b as MODE_EXPO, d as projectRegistry, p as detectIsExpo, r as findProjectRoot, y as MODE_BARE } from "./project-B5eQ1USs.mjs";
+import { Ct as removeTemporaryEntry, F as resolveCacheProviderConfig, H as settingsLayers, I as resolveSettings, St as makeTemporaryDirectory, mt as repoRoot, nt as gitCommonDir, q as detectProviders, z as settingOriginScope } from "./settings-CxgngUZk.mjs";
+import { d as signalProcessTree, s as pidExists, u as resolveProjectMetro } from "./metro-DI2AjPF_.mjs";
+import { F as recordFinishedBuild, U as recordRunStats, V as recordCapacityRefusal, t as budgetGate, z as readRunEstimates } from "./budget-Dz-kyXLv.mjs";
+import { M as acquireBuildSlot, P as releaseBuildSlot } from "./workspaces-Djb2gfi9.mjs";
+import { D as fingerprintProject, E as fingerprintDiffRecord, L as untrackedMissLine, M as refingerprintAfterMutation, N as resolveBuild, O as inputsChangedDuringBuild, P as storeBuild, R as untrackedNativeFiles, S as configInputsChanged, T as filesystemBuildCapability, _ as waitForBuild, b as buildCacheKey, g as releaseBuildLock, m as acquireBuildLock, x as changedDuringBuildLine } from "./device-lease-Cu7PtQpZ.mjs";
+import { d as listAllIosSims, m as listIosRuntimes, r as clearIosAppData } from "./ios-BWbHFZVz.mjs";
+import { a as workspaceLinks, i as workspaceLinkLine } from "./stim-desktop-C65jk_q2.mjs";
+import { r as createNdjsonWriter } from "./ndjson-LGZAMsqa.mjs";
+import { r as checkDeviceCapacity } from "./device-capacity-BoN1jQkO.mjs";
+import { A as bundlerPin, C as readBundleExecutable, T as resolveScheme, c as podsAreStale, f as runPodInstall, l as readPodState, p as COMPILATION_CACHE_NOT_RUN, r as iosToolchain, v as compilationCacheActivityLine, w as readBundleId } from "./toolchain-C3xSoyUl.mjs";
+import { n as readHostedIos, o as writeHostedIos } from "./ios-state-By0XuLTQ.mjs";
+import { c as swapJsBundle, d as ensureOwnedDevice, g as automaticDevicePlacement, h as checkEasFallback, m as warmMetro, n as fingerprintErrorMissReason, t as explainBuildMiss, u as ensureBooted } from "./miss-reason-CjQCOKqq.mjs";
+import { S as restartedAppNote, _ as installIosApp, a as IOS_DEV_MENU_OFF_DEFAULTS_PLIST, d as devClientUrl, l as clearOtherUserApps, v as iosAppProcess, x as launchIosApp } from "./app-install-CFI4ptUL.mjs";
+import { n as nativeRunCommand, r as siblingPlatformSlots, t as launchSlotScope } from "./slot-launch-HV_KtPIw.mjs";
+import { c as readMetroRecords, f as verifyLaunch, i as RELEASE_VERIFY_WAIT_MS, l as unattributedLaunchLines, n as LAUNCH_FATAL, o as isBundleProof, p as verifyReleaseLaunch, r as LAUNCH_UNVERIFIED, s as readCollectorRecords, t as LAUNCH_BUNDLING, u as unverifiedLaunchLines } from "./launch-verify-DCveSE6d.mjs";
+import { a as easAuthNote, c as loadProjectProvider, f as resolveEasCliBin, i as checkEasAuth, m as uploadRemote, n as UPLOAD_TIMEOUT_MS, p as resolveRemote, r as cacheLevel, s as isEasAuthFailureText } from "./remote-cache-N3hAEaAL.mjs";
+import { n as devClientTakesDevMenuParams, t as devClientScheme } from "./dev-client-CDY_zAmD.mjs";
+import { l as discoverXcodeProject, n as clearIosAdoptionPending, s as buildIos } from "./device-ios-B2ruohE-.mjs";
+import { A as gateMetroOrigin, a as ensureMetroReachable, k as readRemoteSimulatorArch, l as remoteIosDeps, o as ensureRemoteBootOwned, r as bundleEntryPoint, u as resolveRemoteContext } from "./device-remote-B5GiUifk.mjs";
+import { i as easDeviceBuildRemedy, s as resolveEasDevelopmentBuild } from "./simslim-D9LkJxIO.mjs";
+import { c as startDevServer, h as detectBundleId } from "./start-DtxthMfI.mjs";
+import { a as acquireRunLease, c as lostRefusal, d as runLease, s as lostLine, t as DEBUG_VERIFY_STEP_MS, u as releaseLeaseOnSignal } from "./device-lease-run-D38SnZtt.mjs";
+import { n as verifyCollectorOwnership } from "./ownership-EB0ySdGK.mjs";
+import { a as sleep, i as launchOutcomeRecord, n as ensureWorkspaceStorageSafely } from "./native-runtime-BGxsbfny.mjs";
+import { t as selectFromPool } from "./device-pool-CP4rAsHx.mjs";
+import { i as staleNativeDirRefusal, n as recordPrebuild, r as runPrebuild, t as planPrebuild } from "./prebuild-BKJ3wJI1.mjs";
+import { a as printNativeCrashReport, n as IOS_CRASH_REPORT_RETRY, o as simulatorConsolePaths, r as captureNativeCrashes, t as errorDiagnostics } from "./error-diagnostics--v5HGOU0.mjs";
+import { n as prepareHostedIos, t as placeHostedIos } from "./hosted-ios-Bik035eL.mjs";
+import { c as isWirelessIosDevice, i as iosDeviceProcess, l as listIosDevices, n as installIosDeviceApp, p as verifyIosDeviceReleaseLaunch, r as iosDeviceBounds, t as awaitIosDeviceLaunch, u as localNetworkPending } from "./ios-device-CJ_ZOGky.mjs";
+import { c as iosProviderRunOptions, d as podAction, i as deviceLabel, l as isReleaseConfiguration, o as deviceShortName, t as appNameFromPath } from "./support-CNqYkV0y.mjs";
+import { existsSync, mkdirSync, mkdtempSync, openSync, rmSync, writeFileSync } from "node:fs";
+import { basename, join } from "node:path";
+import { buildDiagnostics } from "@stim-cli/core/state";
+import { networkInterfaces, tmpdir } from "node:os";
+import chalk from "chalk";
+import { hostSimulatorArch } from "@stim-cli/core";
+import { X509Certificate } from "node:crypto";
+import { loadCacheProvider } from "@stim-cli/cache";
+//#region src/engine/ios-profile.ts
+const TAG = /<(\/?)\s*([A-Za-z0-9_]+)(?:\s[^>]*?)?(\/?)>/g;
+const ENTITIES = {
+	amp: "&",
+	lt: "<",
+	gt: ">",
+	quot: "\"",
+	apos: "'"
+};
+var PlistError = class extends Error {};
+function codePoint(value) {
+	if (!Number.isInteger(value) || value < 0 || value > 1114111 || value >= 55296 && value <= 57343) throw new PlistError(`character reference out of range: ${value}`);
+	return String.fromCodePoint(value);
+}
+function decodeEntities(raw) {
+	return raw.replace(/&(#x?[0-9A-Fa-f]+|[a-z]+);/g, (match, body) => {
+		if (body.startsWith("#x") || body.startsWith("#X")) return codePoint(Number.parseInt(body.slice(2), 16));
+		if (body.startsWith("#")) return codePoint(Number.parseInt(body.slice(1), 10));
+		return ENTITIES[body] ?? match;
+	});
+}
+function peekTag(cursor) {
+	TAG.lastIndex = cursor.pos;
+	const match = TAG.exec(cursor.xml);
+	if (!match) return null;
+	return {
+		name: (match[2] ?? "").toLowerCase(),
+		closing: match[1] === "/",
+		selfClosing: match[3] === "/",
+		end: TAG.lastIndex
+	};
+}
+function takeTag(cursor) {
+	const tag = peekTag(cursor);
+	if (tag) cursor.pos = tag.end;
+	return tag;
+}
+function takeText(cursor, name) {
+	const close = cursor.xml.indexOf(`</${name}>`, cursor.pos);
+	if (close < 0) {
+		cursor.pos = cursor.xml.length;
+		return "";
+	}
+	const raw = cursor.xml.slice(cursor.pos, close);
+	cursor.pos = close + name.length + 3;
+	return raw;
+}
+function parseValue(cursor) {
+	const peeked = peekTag(cursor);
+	if (!peeked || peeked.closing) return void 0;
+	const tag = takeTag(cursor);
+	if (tag.selfClosing) {
+		if (tag.name === "true") return true;
+		if (tag.name === "false") return false;
+		if (tag.name === "array") return [];
+		if (tag.name === "dict") return {};
+		return "";
+	}
+	switch (tag.name) {
+		case "plist": return parseValue(cursor);
+		case "dict": {
+			const out = {};
+			for (;;) {
+				const next = peekTag(cursor);
+				if (!next) break;
+				if (next.closing) {
+					cursor.pos = next.end;
+					break;
+				}
+				cursor.pos = next.end;
+				if (next.name !== "key") continue;
+				const key = decodeEntities(next.selfClosing ? "" : takeText(cursor, "key"));
+				const value = parseValue(cursor);
+				if (value !== void 0) out[key] = value;
+			}
+			return out;
+		}
+		case "array": {
+			const out = [];
+			for (;;) {
+				const next = peekTag(cursor);
+				if (!next) break;
+				if (next.closing) {
+					cursor.pos = next.end;
+					break;
+				}
+				const value = parseValue(cursor);
+				if (value === void 0) break;
+				out.push(value);
+			}
+			return out;
+		}
+		case "string":
+		case "key": return decodeEntities(takeText(cursor, tag.name));
+		case "integer": return Number.parseInt(takeText(cursor, "integer").trim(), 10);
+		case "real": return Number.parseFloat(takeText(cursor, "real").trim());
+		case "date": return new Date(takeText(cursor, "date").trim());
+		case "data": return Buffer.from(takeText(cursor, "data").replace(/\s+/g, ""), "base64");
+		case "true":
+			takeText(cursor, "true");
+			return true;
+		case "false":
+			takeText(cursor, "false");
+			return false;
+		default:
+			takeText(cursor, tag.name);
+			return "";
+	}
+}
+function parsePlist(xml) {
+	if (typeof xml !== "string" || xml.trim() === "") return null;
+	const stripped = xml.replace(/<!--[\s\S]*?-->/g, "");
+	const start = stripped.indexOf("<plist");
+	const cursor = {
+		xml: stripped,
+		pos: start < 0 ? 0 : start
+	};
+	try {
+		const value = parseValue(cursor);
+		return value === void 0 ? null : value;
+	} catch {
+		return null;
+	}
+}
+function isDict(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) && !Buffer.isBuffer(value) && !(value instanceof Date);
+}
+function stringsOf(value) {
+	if (!Array.isArray(value)) return null;
+	return value.filter((v) => typeof v === "string");
+}
+function parseProvisioningProfilePlist(xml) {
+	const root = parsePlist(xml);
+	if (!isDict(root)) return null;
+	const entitlements = isDict(root.Entitlements ?? null) ? root.Entitlements : {};
+	const teamIdentifier = stringsOf(root.TeamIdentifier);
+	const expiration = root.ExpirationDate;
+	const certificates = Array.isArray(root.DeveloperCertificates) ? root.DeveloperCertificates.filter((v) => Buffer.isBuffer(v)) : [];
+	return {
+		name: typeof root.Name === "string" ? root.Name : null,
+		uuid: typeof root.UUID === "string" ? root.UUID : null,
+		teamIdentifier: teamIdentifier?.[0] ?? null,
+		expirationDate: expiration instanceof Date && !Number.isNaN(expiration.getTime()) ? expiration : null,
+		provisionedDevices: stringsOf(root.ProvisionedDevices),
+		provisionsAllDevices: root.ProvisionsAllDevices === true,
+		getTaskAllow: entitlements["get-task-allow"] === true,
+		certificates
+	};
+}
+function provisioningProfileKind(profile) {
+	if (profile.provisionedDevices) return profile.getTaskAllow ? "development" : "ad hoc";
+	return profile.provisionsAllDevices ? "enterprise" : "App Store";
+}
+function certificateCommonName(der) {
+	if (!Buffer.isBuffer(der) || der.length === 0) return null;
+	let subject;
+	try {
+		subject = new X509Certificate(der).subject;
+	} catch {
+		return null;
+	}
+	for (const part of String(subject).split(/\r?\n/)) {
+		const trimmed = part.trim();
+		if (trimmed.startsWith("CN=")) return trimmed.slice(3).trim() || null;
+	}
+	return /(?:^|,)\s*CN=([^,]+)/.exec(String(subject))?.[1]?.trim() || null;
+}
+const IDENTITY_LINE = /^\s*\d+\)\s+([0-9A-Fa-f]{40})\s+"(.+)"\s*$/;
+function parseSigningIdentities(text) {
+	if (typeof text !== "string") return [];
+	const out = [];
+	for (const line of text.split(/\r?\n/)) {
+		const match = IDENTITY_LINE.exec(line);
+		if (!match) continue;
+		out.push({
+			sha1: match[1].toUpperCase(),
+			name: match[2]
+		});
+	}
+	return out;
+}
+const SIGNING_CODES = {
+	noProfile: "STIM_NO_PROFILE",
+	profileMismatch: "STIM_PROFILE_MISMATCH",
+	noIdentity: "STIM_NO_SIGNING_IDENTITY",
+	codesignFailed: "STIM_CODESIGN_FAILED"
+};
+const XCODE_STEP = "build once from Xcode to install it -- Stim will not, because registering a device or minting a profile changes your Apple Developer account.";
+const KEYCHAIN_REMEDY = "Open Xcode > Settings > Accounts and download your certificates, or unlock the login keychain with `security unlock-keychain`. `security find-identity -v -p codesigning` should list `Apple Development: ...`.";
+function signingConfiguration(input) {
+	return input.configuration ?? "Debug";
+}
+function profileGate(input) {
+	const now = input.now ?? Date.now();
+	if (!input.profilePresent) return {
+		ok: false,
+		code: SIGNING_CODES.noProfile,
+		reason: "The app bundle has no embedded.mobileprovision, so it was built unsigned or for the simulator.",
+		remedy: `Set a team and profile for the target's ${signingConfiguration(input)} configuration in Xcode > Signing & Capabilities, then ${XCODE_STEP}`
+	};
+	if (!input.profile) return {
+		ok: false,
+		code: SIGNING_CODES.noProfile,
+		reason: "`openssl smime` could not decode the app bundle's embedded.mobileprovision.",
+		remedy: `The profile inside the app is corrupt. Delete the build cache entry with \`stim gc --delete\`, then ${XCODE_STEP}`
+	};
+	const profile = input.profile;
+	const named = profile.name ? `"${profile.name}"` : "the embedded profile";
+	if (!profile.expirationDate || profile.expirationDate.getTime() <= now) return {
+		ok: false,
+		code: SIGNING_CODES.profileMismatch,
+		reason: profile.expirationDate ? `The ${provisioningProfileKind(profile)} profile ${named} expired on ${profile.expirationDate.toISOString()}.` : `The ${provisioningProfileKind(profile)} profile ${named} carries no ExpirationDate, so Stim cannot prove it is still valid.`,
+		remedy: `Renew the profile under Signing & Capabilities, then ${XCODE_STEP}`
+	};
+	if (!profile.provisionedDevices) {
+		const kind = provisioningProfileKind(profile);
+		return {
+			ok: false,
+			code: SIGNING_CODES.profileMismatch,
+			reason: `${named} is an ${kind} profile, which carries no ProvisionedDevices list, so Stim cannot prove ${input.udid ?? "the target device"} is admitted.`,
+			remedy: `Local device runs need a development profile. Select one under Signing & Capabilities, then ${XCODE_STEP}`
+		};
+	}
+	const udid = input.udid;
+	if (!udid || !profile.provisionedDevices.some((d) => d.toLowerCase() === udid.toLowerCase())) return {
+		ok: false,
+		code: SIGNING_CODES.profileMismatch,
+		reason: `The ${provisioningProfileKind(profile)} profile ${named} lists ${profile.provisionedDevices.length} device(s) and ${udid ?? "the target device"} is not one of them.`,
+		remedy: `Register ${udid ?? "the device"} at developer.apple.com, regenerate the profile, then ${XCODE_STEP}`
+	};
+	return {
+		ok: true,
+		profile
+	};
+}
+function signingGate(input) {
+	const gated = profileGate(input);
+	if (!gated.ok) return gated;
+	const profile = gated.profile;
+	const named = profile.name ? `"${profile.name}"` : "the embedded profile";
+	const identities = Array.isArray(input.identities) ? input.identities : [];
+	if (identities.length === 0) return {
+		ok: false,
+		code: SIGNING_CODES.noIdentity,
+		reason: "`security find-identity -v -p codesigning` lists no codesigning identity on this machine.",
+		remedy: KEYCHAIN_REMEDY
+	};
+	if (input.pinnedSha1) {
+		const wanted = input.pinnedSha1.trim().toUpperCase();
+		const match = identities.find((i) => i.sha1 === wanted);
+		if (match) return {
+			ok: true,
+			identity: match
+		};
+		return {
+			ok: false,
+			code: SIGNING_CODES.noIdentity,
+			reason: `ios.signingIdentitySha1 is ${wanted}, which is not in the keychain. Available: ${identities.map((i) => `${i.sha1} "${i.name}"`).join(", ")}.`,
+			remedy: KEYCHAIN_REMEDY
+		};
+	}
+	const wantedName = input.pinnedName?.trim() || certificateCommonName(profile.certificates[0] ?? null);
+	if (!wantedName) return {
+		ok: false,
+		code: SIGNING_CODES.noIdentity,
+		reason: `Stim could not read a signing-identity name out of ${named}: its DeveloperCertificates entry has no readable subject CN.`,
+		remedy: "Set ios.signingIdentity in .stim.json to the identity name to re-sign with, or ios.signingIdentitySha1 to its SHA-1 hash."
+	};
+	const matches = identities.filter((i) => i.name === wantedName);
+	if (matches.length === 1) return {
+		ok: true,
+		identity: matches[0]
+	};
+	if (matches.length === 0) return {
+		ok: false,
+		code: SIGNING_CODES.noIdentity,
+		reason: `The app was signed by "${wantedName}", which is not in this machine's keychain. Available: ${identities.map((i) => `"${i.name}"`).join(", ")}.`,
+		remedy: `${KEYCHAIN_REMEDY} Or set ios.signingIdentity in .stim.json to one of the identities listed above.`
+	};
+	return {
+		ok: false,
+		code: SIGNING_CODES.noIdentity,
+		reason: `${matches.length} keychain identities share the name "${wantedName}", so Stim cannot pick one: ${matches.map((i) => i.sha1).join(", ")}.`,
+		remedy: "Set ios.signingIdentitySha1 in .stim.json to the SHA-1 hash of the certificate to sign with."
+	};
+}
+//#endregion
+//#region src/engine/ios-signing.ts
+const EMBEDDED_PROFILE = "embedded.mobileprovision";
+const SIGNING_TIMEOUT_MS = 12e4;
+function lastLines(text, count = 5) {
+	return String(text ?? "").split(/\r?\n/).map((line) => line.trimEnd()).filter((line) => line.trim() !== "").slice(-count);
+}
+function errorText(error) {
+	const withOutput = error;
+	const stderr = String(withOutput?.stderr ?? "").trim();
+	const stdout = String(withOutput?.stdout ?? "").trim();
+	return stderr || stdout || String(withOutput?.message ?? error);
+}
+function readEmbeddedProfile(appPath, { exec = null } = {}) {
+	const executor = exec || getExecutor();
+	const path = join(appPath, EMBEDDED_PROFILE);
+	if (!existsSync(path)) return {
+		present: false,
+		profile: null
+	};
+	try {
+		return {
+			present: true,
+			profile: parseProvisioningProfilePlist(executor.runFile("/usr/bin/openssl", [
+				"smime",
+				"-verify",
+				"-noverify",
+				"-inform",
+				"DER",
+				"-in",
+				path
+			], { timeoutMs: SIGNING_TIMEOUT_MS }))
+		};
+	} catch {
+		return {
+			present: true,
+			profile: null
+		};
+	}
+}
+function findSigningIdentities({ exec = null } = {}) {
+	const executor = exec || getExecutor();
+	try {
+		return parseSigningIdentities(executor.runFile("security", [
+			"find-identity",
+			"-v",
+			"-p",
+			"codesigning"
+		], { timeoutMs: SIGNING_TIMEOUT_MS }));
+	} catch {
+		return [];
+	}
+}
+function gateProfileForDevice(options) {
+	const read = readEmbeddedProfile(options.appPath, { exec: options.exec ?? null });
+	return profileGate({
+		profilePresent: read.present,
+		profile: read.profile,
+		identities: [],
+		udid: options.udid,
+		configuration: options.configuration ?? null,
+		...options.now === void 0 ? {} : { now: options.now }
+	});
+}
+function gateAppForDevice(options) {
+	const read = readEmbeddedProfile(options.appPath, { exec: options.exec ?? null });
+	return signingGate({
+		profilePresent: read.present,
+		profile: read.profile,
+		identities: read.present ? findSigningIdentities({ exec: options.exec ?? null }) : [],
+		udid: options.udid,
+		configuration: options.configuration ?? null,
+		pinnedName: options.pinnedName ?? null,
+		pinnedSha1: options.pinnedSha1 ?? null,
+		...options.now === void 0 ? {} : { now: options.now }
+	});
+}
+function extractEntitlements(appPath, executor) {
+	try {
+		return String(executor.runFile("codesign", [
+			"-d",
+			"--entitlements",
+			"-",
+			"--xml",
+			appPath
+		], { timeoutMs: SIGNING_TIMEOUT_MS })).trim();
+	} catch {
+		return "";
+	}
+}
+function resealBundle({ appPath, identity, exec = null }) {
+	const executor = exec || getExecutor();
+	const signAs = identity.sha1 || identity.name;
+	let mode = "preserve-metadata";
+	let preserveError = null;
+	try {
+		executor.runFile("codesign", [
+			"--force",
+			"--sign",
+			signAs,
+			"--preserve-metadata=identifier,entitlements,flags,runtime",
+			appPath
+		], { timeoutMs: SIGNING_TIMEOUT_MS });
+	} catch (error) {
+		preserveError = error;
+	}
+	let tempDir = null;
+	if (preserveError) {
+		const entitlements = extractEntitlements(appPath, executor);
+		const args = [
+			"--force",
+			"--sign",
+			signAs
+		];
+		if (entitlements !== "") {
+			tempDir = mkdtempSync(join(tmpdir(), "stim-entitlements-"));
+			const plist = join(tempDir, "entitlements.plist");
+			writeFileSync(plist, `${entitlements}\n`, "utf-8");
+			args.push("--entitlements", plist);
+			mode = "entitlements";
+		} else mode = "no-entitlements";
+		args.push(appPath);
+		try {
+			executor.runFile("codesign", args, { timeoutMs: SIGNING_TIMEOUT_MS });
+		} catch (error) {
+			return {
+				ok: false,
+				code: SIGNING_CODES.codesignFailed,
+				reason: `codesign could not re-seal ${appPath} with "${identity.name}": ${errorText(error)}`,
+				remedy: `Unlock the login keychain (\`security unlock-keychain\`) and confirm exactly one identity matches "${identity.name}".`,
+				lastLines: [...lastLines(errorText(preserveError)), ...lastLines(errorText(error))]
+			};
+		} finally {
+			if (tempDir) rmSync(tempDir, {
+				recursive: true,
+				force: true
+			});
+		}
+	}
+	try {
+		executor.runFile("codesign", [
+			"--verify",
+			"--strict",
+			appPath
+		], { timeoutMs: SIGNING_TIMEOUT_MS });
+	} catch (error) {
+		return {
+			ok: false,
+			code: SIGNING_CODES.codesignFailed,
+			reason: `codesign --verify --strict rejected ${appPath} after re-sealing it with "${identity.name}": ${errorText(error)}`,
+			remedy: "The bundle signed but did not seal. Delete the cached artifact with `stim gc --delete` and build fresh, then retry.",
+			lastLines: lastLines(errorText(error))
+		};
+	}
+	return {
+		ok: true,
+		identity,
+		mode
+	};
+}
+function sealAppForDevice(options) {
+	const gate = gateAppForDevice(options);
+	if (!gate.ok) return {
+		...gate,
+		lastLines: []
+	};
+	return resealBundle({
+		appPath: options.appPath,
+		identity: gate.identity,
+		exec: options.exec ?? null
+	});
+}
+//#endregion
+//#region src/engine/ios-lan.ts
+const IP_TXT = "ip.txt";
+function chooseLanAddress({ pinned = null, candidates }) {
+	const list = Array.isArray(candidates) ? candidates : [];
+	if (pinned) return {
+		address: pinned,
+		interfaceName: list.find((candidate) => candidate.address === pinned)?.interfaceName ?? null,
+		pinned: true,
+		candidates: list.length
+	};
+	const first = list[0];
+	if (!first) return null;
+	return {
+		address: first.address,
+		interfaceName: first.interfaceName,
+		pinned: false,
+		candidates: list.length
+	};
+}
+function lanOriginUrlFor(address, port) {
+	return `http://${address}:${port}`;
+}
+function ipTxtContents(address, port) {
+	return `${String(address).trim()}:${String(port).trim()}\n`;
+}
+function writeIpTxt(appPath, address, port, { write = writeFileSync } = {}) {
+	const path = join(appPath, IP_TXT);
+	write(path, ipTxtContents(address, port), "utf-8");
+	return path;
+}
+async function ensureLanReachable({ origin, metroPort, root, isExpo, logsDir, gateOrigin = gateMetroOrigin, readRecords = null }) {
+	const result = await gateOrigin({
+		origin,
+		metroPort,
+		platform: "ios",
+		entryPoint: bundleEntryPoint(root, isExpo),
+		readRecords: readRecords ?? (() => readMetroRecords(logsDir)),
+		isProof: isBundleProof
+	});
+	if (result.failed) return {
+		failed: result.reason ?? `${origin} is not this workspace's Metro.`,
+		remedy: `The phone reaches Metro at ${origin}, so that address has to serve THIS workspace's dev server. \`stim start\` prints the port it reserved. Set ios.lanHost in .stim.json when this Mac has several network interfaces and the phone shares one that is not the first.`
+	};
+	return { ok: true };
+}
+function copyAppAside(appPath, { exec = null, mkdtemp = () => makeTemporaryDirectory(appPath, "stim-ios-device-") } = {}) {
+	const e = exec || getExecutor();
+	const tmpDir = mkdtemp();
+	const copy = join(tmpDir, basename(appPath));
+	try {
+		e.runFile("cp", [
+			"-c",
+			"-R",
+			appPath,
+			copy
+		]);
+	} catch {
+		try {
+			removeTemporaryEntry(copy);
+			e.runFile("cp", [
+				"-R",
+				appPath,
+				copy
+			]);
+		} catch (error) {
+			removeTemporaryEntry(tmpDir);
+			throw error;
+		}
+	}
+	return {
+		tmpDir,
+		appPath: copy
+	};
+}
+//#endregion
+//#region src/engine/lan-address.ts
+const EN_INTERFACE = /^en(\d+)$/;
+const EXCLUDED_INTERFACE = /^(?:utun|bridge|awdl)/;
+const LINK_LOCAL = /^169\.254\./;
+function isIpv4(entry) {
+	return entry.family === "IPv4" || entry.family === 4;
+}
+function lanCandidates(interfaces) {
+	const ranked = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const [interfaceName, entries] of Object.entries(interfaces ?? {})) {
+		if (EXCLUDED_INTERFACE.test(interfaceName)) continue;
+		const en = EN_INTERFACE.exec(interfaceName);
+		for (const entry of entries ?? []) {
+			if (!entry || typeof entry !== "object" || !isIpv4(entry) || entry.internal === true) continue;
+			const address = typeof entry.address === "string" ? entry.address.trim() : "";
+			if (address === "" || LINK_LOCAL.test(address)) continue;
+			if (seen.has(address)) continue;
+			seen.add(address);
+			ranked.push({
+				interfaceName,
+				address,
+				rank: en ? 0 : 1,
+				index: en ? Number(en[1]) : 0
+			});
+		}
+	}
+	ranked.sort((a, b) => a.rank - b.rank || a.index - b.index || a.interfaceName.localeCompare(b.interfaceName) || a.address.localeCompare(b.address));
+	return ranked.map(({ interfaceName, address }) => ({
+		interfaceName,
+		address
+	}));
+}
+function hostLanCandidates(interfaces = networkInterfaces) {
+	return lanCandidates(interfaces());
+}
+//#endregion
+//#region src/commands/ios/collector.ts
+function collectorLogFile(root, slot) {
+	return join(workspaceLogsDir$1(root), `collector-${deviceSlotFileKey("ios", slot)}.log`);
+}
+function collectorEntry() {
+	return spawnEntry("collector-run");
+}
+const COLLECTOR_EXIT_WAIT_MS = 2e3;
+const COLLECTOR_POLL_MS = 25;
+async function stopPreviousCollector({ root, slot = "default", kill = (pid, signal) => signalProcessTree(pid, signal), alive = pidExists, readState = readWorkspaceState$1, verify = verifyCollectorOwnership, waitMs = COLLECTOR_EXIT_WAIT_MS, note = (_line) => {} }) {
+	const previous = (readState(root)?.collectors)?.[deviceSlotKey("ios", slot)] || null;
+	const previousPid = Number(previous?.pid) || null;
+	let killed = null;
+	if (previousPid) {
+		const ownership = verify({
+			pid: previousPid,
+			platform: deviceSlotKey("ios", slot),
+			root,
+			isAlive: alive,
+			expected: previous
+		});
+		if (ownership.status === "ours") {
+			try {
+				kill(previousPid, "SIGTERM");
+				killed = previousPid;
+			} catch (err) {
+				if (err?.code !== "ESRCH") note(chalk.yellow(`Could not stop the previous ios log collector (pid ${previousPid}): ${err?.message || err}`));
+			}
+			const deadline = Date.now() + waitMs;
+			while (Date.now() < deadline && alive(previousPid)) await sleep(COLLECTOR_POLL_MS);
+		} else if (ownership.status === "unverified") note(chalk.dim(`Previous ios log collector (pid ${previousPid}): ${ownership.reason}, so it was not signalled -- starting a replacement anyway`));
+	}
+	return { killed };
+}
+async function replaceCollector({ root, slot = "default", udid, bundleId, appName, appExecutable, physical = false, payloadUrl = null, spawn = (cmd, args, opts) => getExecutor().spawn(cmd, args, opts), kill = (pid, signal) => process.kill(pid, signal), alive = pidExists, readState = readWorkspaceState$1, verify = verifyCollectorOwnership, waitMs = COLLECTOR_EXIT_WAIT_MS, note = (_line) => {} }) {
+	const { killed } = await stopPreviousCollector({
+		root,
+		slot,
+		kill,
+		alive,
+		readState,
+		verify,
+		waitMs,
+		note
+	});
+	const args = [
+		collectorEntry(),
+		"--platform",
+		"ios",
+		"--root",
+		root,
+		"--udid",
+		udid,
+		"--bundle",
+		bundleId
+	];
+	if (slot !== "default") args.push("--slot", slot);
+	if (appName) args.push("--app-name", appName);
+	if (appExecutable) args.push("--app-executable", appExecutable);
+	if (physical) args.push("--physical");
+	if (payloadUrl) args.push("--payload-url", payloadUrl);
+	let stdio = "ignore";
+	try {
+		mkdirSync(workspaceLogsDir$1(root), { recursive: true });
+		const fd = openSync(collectorLogFile(root, slot), "a");
+		stdio = [
+			"ignore",
+			fd,
+			fd
+		];
+	} catch {}
+	let child;
+	try {
+		child = spawn(process.execPath, args, {
+			cwd: root,
+			detached: true,
+			stdio,
+			env: process.env
+		});
+		child?.unref?.();
+	} catch (err) {
+		note(chalk.yellow(`Could not start the ios log collector: ${err?.message || err}`));
+		return {
+			killed,
+			pid: null
+		};
+	}
+	return {
+		killed,
+		pid: child?.pid ?? null
+	};
+}
+//#endregion
+//#region src/commands/ios/dependencies.ts
+const DEFAULT_DEPS = {
+	projectRegistry,
+	automaticDevicePlacement,
+	checkEasFallback,
+	prepareHostedIos,
+	placeHostedIos,
+	readHostedIos,
+	writeHostedIos,
+	resolveEasDevelopmentBuild,
+	findProjectRoot,
+	resolveSettings,
+	settingsLayers,
+	settingOriginScope,
+	gitCommonDir,
+	repoRoot,
+	detectBundleId,
+	detectIsExpo,
+	devClientScheme,
+	devClientTakesDevMenuParams,
+	getProject,
+	upsertProject,
+	recordIosSchemeApprovals,
+	checkDeviceCapacity,
+	budgetGate,
+	ensureOwnedDevice,
+	listIosRuntimes,
+	listAllIosSims,
+	ensureBooted,
+	resolveRemoteContext,
+	remoteIosDeps,
+	readRemoteSimulatorArch,
+	hostSimulatorArch,
+	ensureMetroReachable,
+	ensureRemoteBootOwned,
+	detectProviders,
+	resolveProjectMetro,
+	startDevServer,
+	warmMetro,
+	readWorkspaceState: readWorkspaceState$1,
+	pidExists,
+	getConcurrencyLimits,
+	fingerprintProject,
+	untrackedNativeFiles,
+	resolveBuild,
+	storeBuild,
+	resolveCacheProviderConfig,
+	loadCacheProvider,
+	acquireBuildLock,
+	releaseBuildLock,
+	waitForBuild,
+	acquireBuildSlot,
+	releaseBuildSlot,
+	loadProjectProvider,
+	checkEasAuth,
+	resolveEasCliBin,
+	resolveRemote,
+	uploadRemote,
+	planPrebuild,
+	runPrebuild,
+	readPodState,
+	podsAreStale,
+	runPodInstall,
+	buildIos,
+	discoverXcodeProject,
+	resolveScheme,
+	listIosDevices,
+	hostLanCandidates,
+	ensureLanReachable,
+	gateProfileForDevice,
+	sealAppForDevice,
+	installIosDeviceApp,
+	awaitIosDeviceLaunch,
+	acquireRunLease,
+	runLease,
+	selectFromPool,
+	releaseLeaseOnSignal,
+	iosDeviceProcess,
+	verifyIosDeviceReleaseLaunch,
+	readBundleId,
+	readBundleExecutable,
+	swapJsBundle,
+	installIosApp,
+	clearOtherUserApps,
+	clearIosAppData,
+	clearIosAdoptionPending,
+	launchIosApp,
+	verifyLaunch,
+	verifyReleaseLaunch,
+	ensureWorkspaceStorage: ensureWorkspaceStorageSafely,
+	replaceCollector,
+	stopPreviousCollector,
+	writeWorkspaceLaunch,
+	writeWorkspaceState,
+	createWriter: createNdjsonWriter,
+	recordStats: recordRunStats,
+	recordCapacityRefusal,
+	readEstimates: readRunEstimates,
+	now: () => Date.now()
+};
+//#endregion
+//#region src/commands/ios/result.ts
+function lastBuildRecord({ devicePlacement, fingerprint = null, cacheKey = null, cacheHit = false, cacheSkipped = false, durationMs = 0, appPath = null, bundleId = null, startedAt, status, errorCode = null, missReason = null, diagnostics = null, configuration = null, buildMachine = "auto", builtOn, offloadedTo = null, offloadFallback = null }) {
+	const record = {
+		platform: "ios",
+		fingerprint,
+		cacheKey,
+		cacheHit: cacheLevel(cacheHit),
+		cacheSkipped: Boolean(cacheSkipped),
+		durationMs,
+		appPath,
+		bundleId,
+		startedAt,
+		status,
+		configuration
+	};
+	if (errorCode) record.errorCode = errorCode;
+	if (devicePlacement) record.devicePlacement = devicePlacement;
+	record.buildMachine = buildMachine;
+	if (builtOn) record.builtOn = builtOn;
+	if (offloadedTo) record.offloadedTo = offloadedTo;
+	if (offloadFallback) record.offloadFallback = offloadFallback;
+	if (missReason && !cacheLevel(cacheHit)) record.missReason = missReason;
+	const recorded = status === "failed" ? buildDiagnostics(diagnostics) : [];
+	if (recorded.length) record.diagnostics = recorded;
+	return record;
+}
+function iosFacts({ root, slot, udid, deviceName, deviceType = null, runtime = null, fingerprint, configuration = null, scheme = null, cacheKey, cacheHit, cacheSkipped = false, compilationCache = COMPILATION_CACHE_NOT_RUN, waitedForBuild = null, appPath, bundleId, installSkipped = false, metroPort, logsDir, durationMs, launched = true, webPreviewUrl = null, lease, devServer = null, buildMachine = "auto", builtOn, offloadedTo = null, offloadFallback = null }) {
+	return {
+		platform: "ios",
+		...slot && slot !== "default" ? { slot } : {},
+		udid,
+		deviceName: deviceName ?? null,
+		deviceType: deviceType ?? null,
+		runtime: runtime ?? null,
+		fingerprint,
+		configuration: configuration ?? null,
+		...scheme ? { scheme } : {},
+		cacheKey,
+		cacheHit: cacheLevel(cacheHit),
+		cacheSkipped: Boolean(cacheSkipped),
+		buildMachine,
+		...builtOn ? { builtOn } : {},
+		...offloadedTo ? { offloadedTo } : {},
+		...offloadFallback ? { offloadFallback } : {},
+		compilationCache,
+		waitedForBuild: waitedForBuild ? {
+			pid: waitedForBuild.pid ?? null,
+			ms: waitedForBuild.ms ?? 0
+		} : null,
+		appPath,
+		bundleId,
+		installSkipped: Boolean(installSkipped),
+		launched: launched === "unverified" || launched === "bundling" ? launched : Boolean(launched),
+		metroPort,
+		logs: { dir: logsDir },
+		...root ? { agentDevice: { stateDir: workspaceAgentDeviceDir(root) } } : {},
+		durationMs,
+		...webPreviewUrl ? { webPreviewUrl } : {},
+		...lease === void 0 ? {} : { lease },
+		...devServer ? { devServer } : {}
+	};
+}
+function writeLastBuild(root, record, { record: recordBuild = recordFinishedBuild } = {}) {
+	try {
+		recordBuild(root, record);
+	} catch {}
+	return record;
+}
+async function finishIosUpload(uploadPending, remote, phase, note) {
+	if (!uploadPending) return false;
+	const upload = await uploadPending;
+	if (upload?.uploaded) phase("cache", `uploaded (${remote?.name})`);
+	else if (upload?.timedOut) {
+		note(chalk.yellow(phaseLine("cache", `${remote?.name} upload still running after ${formatDuration(UPLOAD_TIMEOUT_MS)}; not waiting`)));
+		return true;
+	} else if (upload?.failed) {
+		const authNote = remote?.name === "eas" && isEasAuthFailureText(upload.failed) ? easAuthNote({
+			code: "logged-out",
+			reason: upload.failed,
+			phase: "upload"
+		}) : null;
+		note(chalk.yellow(phaseLine("cache", authNote || `${remote?.name} upload failed: ${upload.failed}`)));
+	}
+	return false;
+}
+function reportIosResult({ devicePlacement, host, slot, root, json, release, runtimeKind = release ? "embedded-js" : "metro", configuration, buildScheme = null, metroCheck, metroPort, logsDir, device, udid, appPath, bundleId, installSkipped, elapsed, startedAt, storeHash, storeKey, cacheHit, missReason, compilationCache, useBuildCache, waitedForBuild, launchState, launchWarning, providerName, buildMachine = "auto", builtOn, offloadedTo = null, offloadFallback = null, closeWriter, webPreviewUrl, lease, recordRun, reclaimed = [], devServer = null, links }) {
+	const durationMs = elapsed();
+	recordRun({
+		failed: false,
+		cacheHit,
+		waited: waitedForBuild,
+		durationMs,
+		offloadedTo
+	});
+	writeLastBuild(root, lastBuildRecord({
+		devicePlacement,
+		fingerprint: storeHash,
+		cacheKey: storeKey,
+		cacheHit,
+		cacheSkipped: !useBuildCache,
+		missReason,
+		durationMs,
+		appPath,
+		bundleId,
+		startedAt,
+		status: "ok",
+		configuration: configuration ?? "Debug",
+		buildMachine,
+		builtOn,
+		offloadedTo,
+		offloadFallback
+	}));
+	closeWriter();
+	const facts = iosFacts({
+		root,
+		slot,
+		udid,
+		deviceName: device?.deviceName ?? null,
+		deviceType: device?.deviceType,
+		runtime: device?.runtime,
+		fingerprint: storeHash,
+		configuration,
+		scheme: buildScheme,
+		cacheKey: storeKey,
+		cacheHit,
+		compilationCache,
+		cacheSkipped: !useBuildCache,
+		waitedForBuild,
+		appPath,
+		bundleId,
+		installSkipped,
+		metroPort,
+		logsDir,
+		durationMs,
+		launched: launchState,
+		webPreviewUrl,
+		lease,
+		devServer,
+		buildMachine,
+		builtOn,
+		offloadedTo,
+		offloadFallback
+	});
+	if (devicePlacement) facts.devicePlacement = devicePlacement;
+	if (host) facts.host = host;
+	if (json) console.log(JSON.stringify({
+		...facts,
+		...links ? { links } : {},
+		...reclaimed.length ? { reclaimed } : {}
+	}));
+	else {
+		const summary = `${launchWarning ? "WARNING" : "OK"}: ${bundleId} on ${host ? `${device.deviceName} (iOS ${device.runtime?.replace(/^iOS /, "")}) on ${host.machine}` : deviceLabel(device, udid)}, ` + (runtimeKind === "process" ? `${configuration ?? "Debug"} (native process, no Metro)` : runtimeKind === "embedded-js" ? `${configuration} (embedded JS, no Metro)` : `Metro port ${metroPort}`) + ` (${cacheDescription(cacheHit, providerName, offloadedTo)}, ${formatDuration(durationMs)})`;
+		const outcome = launchWarning ? chalk.yellow(`${summary} -- ${launchWarning}`) : launchState === "unverified" ? chalk.yellow(`${summary} -- launch UNVERIFIED`) : launchState === "bundling" ? chalk.green(`${summary} -- bundle requested, still building`) : chalk.green(summary);
+		const deviceName = device?.deviceName ?? device?.name ?? udid;
+		const cacheResult = useBuildCache ? cacheDescription(cacheHit, providerName, offloadedTo) : `bypassed; ${cacheDescription(false, null, offloadedTo)}`;
+		const metroResult = runtimeKind === "process" ? "native process (no Metro)" : runtimeKind === "embedded-js" ? `embedded (${configuration})` : !metroCheck ? `check skipped on port ${metroPort}` : launchState === "unverified" ? `state unverified on port ${metroPort}` : `running on port ${metroPort}${devServer ? ` (started: ${devServer.reason})` : ""}`;
+		console.log([
+			outcome,
+			phaseLine("device", host ? `${deviceName} (iOS ${device.runtime?.replace(/^iOS /, "")}) on ${host.machine}` : `${deviceName} (${udid})`),
+			phaseLine("app", bundleId),
+			phaseLine(runtimeKind === "process" ? "runtime" : "metro", metroResult),
+			phaseLine("cache", cacheResult),
+			...compilationCache.status === "not-run" ? [phaseLine("compilation cache", compilationCacheActivityLine(compilationCache))] : [],
+			phaseLine("logs", logsDir),
+			phaseLine("agent-device", `AGENT_DEVICE_STATE_DIR=${workspaceAgentDeviceDir(root)}`)
+		].join("\n"));
+		if (facts.webPreviewUrl) console.error(chalk.dim(`Watch this device: ${facts.webPreviewUrl}`));
+		if (links) console.error(chalk.dim(workspaceLinkLine(links)));
+	}
+	return facts;
+}
+function cacheDescription(cacheHit, providerName = null, offloadedTo = null) {
+	if (cacheHit === "remote") return `from ${providerName || "the remote cache"}`;
+	if (cacheHit === "local") return "from cache";
+	return offloadedTo ? `built on ${offloadedTo}` : "built";
+}
+//#endregion
+//#region src/commands/ios/launch.ts
+function iosProcessRuntime(prepare, kind = "process") {
+	return {
+		kind,
+		prepare,
+		devMenuParams: () => false,
+		scheme: () => void 0,
+		verificationWaitMs: RELEASE_VERIFY_WAIT_MS,
+		launch: async (_prepared, { launch }) => launch({
+			metroPort: null,
+			devMenuParams: false,
+			payloadUrl: null
+		}),
+		verify: async (_prepared, context) => verifyIosProcessRun({
+			...context,
+			embeddedJavaScript: kind === "embedded-js"
+		})
+	};
+}
+function iosMetroRuntime(prepare) {
+	return {
+		kind: "metro",
+		prepare,
+		devMenuParams: (root, d) => d.devClientTakesDevMenuParams(root),
+		scheme: (root, appPath, d) => d.devClientScheme(root, appPath),
+		verificationWaitMs: DEBUG_VERIFY_STEP_MS,
+		launch: async ({ metroPort }, { launch, scheme, devMenuParams, lanAddress }) => launch({
+			metroPort,
+			devClientScheme: scheme,
+			devMenuParams,
+			payloadUrl: scheme && metroPort !== null && lanAddress ? devClientUrl(scheme, metroPort, lanAddress) : null
+		}),
+		verify: async ({ metroPort }, context) => verifyIosMetroRun({
+			...context,
+			metroPort
+		})
+	};
+}
+function missingCrashReportHint({ physical, remote, crashed }) {
+	return crashed && !physical && !remote ? `No attributable native crash report captured yet. ${IOS_CRASH_REPORT_RETRY}` : "No attributable native crash report captured. Read `stim logs --source device` for available output.";
+}
+async function verifyIosProcessRun({ root, slot, appPath, d, launched, configuration, phase, note, logsDir, launchedAt, bundleId, udid, physical, appName, remoteDevice, embeddedJavaScript }) {
+	const readNativeCrashes = () => remoteDevice ? [] : captureNativeCrashes({
+		root,
+		slot,
+		platform: "ios",
+		deviceId: udid,
+		appId: bundleId,
+		since: launchedAt,
+		appPath,
+		physical
+	}, logsDir);
+	const processCheck = physical ? await d.verifyIosDeviceReleaseLaunch({
+		udid,
+		appName: appName ?? bundleId
+	}) : await d.verifyReleaseLaunch({ pid: launched?.pid ?? null });
+	const crashes = readNativeCrashes();
+	if (processCheck?.verified && !crashes.length) {
+		phase("verify", `process alive ${formatDuration(processCheck.waitedMs ?? 0)} after launch (${configuration}: no bundle fetch to observe)`);
+		return { state: true };
+	}
+	for (const line of launchErrorPreview(crashes, root)) note(chalk.red(phaseLine("launch", line)));
+	if (!crashes.length) note(phaseLine("logs", missingCrashReportHint({
+		physical,
+		remote: Boolean(remoteDevice),
+		crashed: processCheck?.reason === "exited"
+	})));
+	phase("verify", chalk.yellow(crashes.length ? "FATAL: the app reported a native crash" : processCheck?.reason === "exited" ? `FATAL: the app process exited within ${formatDuration(processCheck.waitedMs ?? 0)} of launch` : physical ? `UNVERIFIED: devicectl could not read ${udid}'s process list` : "UNVERIFIED: simctl launch reported no process id to check"));
+	note(chalk.yellow(phaseLine("", `${embeddedJavaScript ? "Release" : "Process"} readiness was not established. Run \`stim logs --errors\` for captured crash reports, or \`stim logs --source device\` for the full device output.`)));
+	return { state: crashes.length || processCheck?.reason === "exited" ? LAUNCH_FATAL : LAUNCH_UNVERIFIED };
+}
+async function verifyIosMetroRun({ root, slot, appPath, d, launched, phase, note, metroCheck, logsDir, launchedAt, metroPort, isExpo, bundleId, udid, scheme, physical, appName, lanAddress, lanOrigin, remoteDevice, metroOrigin }) {
+	const runCommand = nativeRunCommand("ios", slot, {
+		physical,
+		deviceId: udid
+	});
+	const readNativeCrashes = () => remoteDevice ? [] : captureNativeCrashes({
+		root,
+		slot,
+		platform: "ios",
+		deviceId: udid,
+		appId: bundleId,
+		since: launchedAt,
+		appPath,
+		physical
+	}, logsDir);
+	const deviceProcess = () => {
+		const pid = d.iosDeviceProcess({
+			udid,
+			appName: appName ?? bundleId
+		});
+		return pid === void 0 ? null : pid !== null;
+	};
+	const siblings = metroCheck ? siblingPlatformSlots(root, "ios", slot) : [];
+	const verification = metroCheck ? await d.verifyLaunch({
+		requireBundleResponse: true,
+		slot: launchSlotScope(root, slot),
+		appPid: physical || remoteDevice ? null : launched?.pid,
+		platformShared: siblings.length > 0,
+		onReadinessPending: () => phase("readiness", "waiting for app readiness (up to 30s after bundle load)"),
+		logsDir,
+		since: launchedAt,
+		metroPort,
+		platform: "ios",
+		mode: isExpo ? MODE_EXPO : MODE_BARE,
+		readNativeCrashes,
+		processAlive: remoteDevice ? null : physical ? deviceProcess : () => {
+			if (launched?.pid) return d.pidExists(launched.pid);
+			const pid = iosAppProcess(udid, bundleId);
+			return pid === void 0 ? null : pid !== null;
+		}
+	}) : {
+		verified: false,
+		skipped: true
+	};
+	const nativeCrashes = verification.errors?.some((record) => record.event === "native_crash") ? [] : readNativeCrashes();
+	if (nativeCrashes.length) verification.fatal = true;
+	verification.errors = await errorDiagnostics([...verification.errors ?? [], ...nativeCrashes], {
+		root,
+		logsDir,
+		port: metroPort,
+		allowRequest: true
+	});
+	if (verification.readiness) phase("readiness", appReadinessMessage(verification.readiness, verification.waitedMs ?? 0));
+	if (verification?.fatal) {
+		const nativeFatal = verification.errors?.some((record) => record.event === "native_crash");
+		const deliveryFailed = verification.record?.event === "bundle_response_failed";
+		const reason = nativeFatal ? "the app reported a native crash" : verification.processAlive === false ? "the app process exited" : deliveryFailed ? "Metro bundle delivery failed" : "Metro could not build the bundle";
+		phase("verify", chalk.red(`FATAL after ${formatDuration(verification.waitedMs ?? 0)}: ${reason}`));
+		for (const line of launchErrorPreview(verification.errors ?? [], root)) note(chalk.red(phaseLine("", line)));
+		if (verification.processAlive === false && !verification.errors?.some((record) => record.event === "native_crash")) note(phaseLine("logs", missingCrashReportHint({
+			physical,
+			remote: Boolean(remoteDevice),
+			crashed: true
+		})));
+		if (nativeFatal || verification.processAlive === false) note(chalk.yellow(phaseLine("remedy", `Fix the crash, then run \`${runCommand}\` again. A Metro reload cannot restart an exited app.`)));
+		else if (verification.processAlive === true && metroPort !== null) {
+			const reloadRemedy = `press Reload on the app's own error screen -- run \`agent-device snapshot -i --platform ios --udid ${udid}\` in your existing automation session to reach it. Neither \`stim reload ios\` nor \`agent-device metro reload\` can: this app never connected to Metro.`;
+			note(chalk.yellow(phaseLine("remedy", `The native app is still running. ${deliveryFailed ? "Check the Metro logs and device connection, then" : "Fix the JavaScript or TypeScript error, then"} ${reloadRemedy} Do not run \`${runCommand}\` unless native inputs changed or the app process exits.`)));
+		}
+		return { state: LAUNCH_FATAL };
+	}
+	if (verification?.verified) {
+		phase("verify", `bundle loaded` + (verification.processAlive === true ? ", process alive" : "") + (verification.readiness ? "" : ", stable for 3s -- the first screen may still be rendering") + ` (${formatDuration(verification.waitedMs ?? 0)} total)`);
+		const hasAppErrors = reportLaunchErrors(verification.errors ?? [], note, root);
+		if (hasAppErrors && verification.processAlive === true && metroPort !== null) {
+			const reloadRemedy = physical || remoteDevice ? `run \`agent-device metro reload --metro-port ${metroPort}\`.` : "run `stim reload ios`.";
+			note(chalk.yellow(phaseLine("remedy", `The native app is still running. Fix the JavaScript or TypeScript error; Fast Refresh should apply the edit. If the error screen remains, ${reloadRemedy} Do not run \`${runCommand}\` unless native inputs changed or the app process exits.`)));
+		}
+		return {
+			state: true,
+			warning: hasAppErrors ? "app errors detected; inspect the error above" : verification.readiness === "timed-out" || verification.readiness === "error" ? "app readiness not confirmed; inspect the UI and logs" : void 0
+		};
+	}
+	if (verification?.skipped) {
+		phase("verify", "skipped (--no-metro-check): the launch is reported as unverified");
+		return { state: LAUNCH_UNVERIFIED };
+	}
+	if (verification?.requested) {
+		phase("verify", `BUNDLING: the app asked port ${metroPort} for its bundle; build or delivery was still pending after ${formatDuration(verification.waitedMs ?? 0)} (a cold bundle on a large graph outlasts this window)`);
+		note(chalk.dim(phaseLine("", "Nothing to do: `stim logs --source metro` shows the build finishing, usually within a minute.")));
+		return { state: LAUNCH_BUNDLING };
+	}
+	return reportUnverified({
+		verification,
+		siblings,
+		slot,
+		phase,
+		note,
+		metroPort,
+		bundleId,
+		udid,
+		scheme,
+		lanAddress,
+		isExpo,
+		remoteDevice,
+		physical,
+		lanOrigin,
+		metroOrigin,
+		logsDir,
+		launchedAt,
+		launched
+	});
+}
+function reportUnverified({ verification, siblings, slot, phase, note, metroPort, bundleId, udid, scheme, lanAddress, isExpo, remoteDevice, physical, lanOrigin, metroOrigin, logsDir, launchedAt, launched }) {
+	if (verification.unattributed) {
+		const [headline, ...lines] = unattributedLaunchLines({
+			platform: "ios",
+			metroPort,
+			slot,
+			siblings
+		});
+		phase("verify", chalk.yellow(headline));
+		for (const line of lines) note(chalk.yellow(phaseLine("", line)));
+		return {
+			state: LAUNCH_UNVERIFIED,
+			unattributed: true
+		};
+	}
+	phase("verify", chalk.yellow("UNVERIFIED: no bundle request reached this workspace's Metro"));
+	for (const line of unverifiedLaunchLines({
+		platform: "ios",
+		metroPort: metroPort ?? 8081,
+		waitedMs: verification.waitedMs,
+		bundleId,
+		udid,
+		devClientUrl: scheme ? launched?.url ?? devClientUrl(scheme, metroPort ?? 8081, lanAddress ?? void 0) : null,
+		mode: isExpo ? MODE_EXPO : MODE_BARE,
+		remote: remoteDevice,
+		physical,
+		devClient: Boolean(scheme),
+		lanOrigin,
+		metroOrigin,
+		localNetworkPending: physical && localNetworkPending(readCollectorRecords(logsDir), {
+			since: launchedAt,
+			pid: launched?.pid ?? null,
+			lanOrigin
+		})
+	})) note(chalk.yellow(phaseLine("", line)));
+	return { state: LAUNCH_UNVERIFIED };
+}
+function reportLaunchErrors(errors, note, root) {
+	const report = launchErrorReport(errors, root);
+	if (report.summary) note(chalk.dim(phaseLine("launch", report.summary)));
+	for (const line of report.lines) note(chalk.yellow(phaseLine("launch", line)));
+	return report.lines.length > 0;
+}
+function installsOverWifi(d, udid, selectedWireless, note) {
+	const current = d.listIosDevices().find((entry) => entry.udid === udid);
+	const wireless = current ? isWirelessIosDevice(current) : selectedWireless;
+	if (wireless) note(phaseLine("device", `${current?.name ?? udid} is paired over Wi-Fi, so the install and launch go over the network and take longer than over a cable`));
+	return wireless;
+}
+function cleanAdoptedIosApps({ d, udid, bundleId, devClient, phase, note }) {
+	const swept = d.clearOtherUserApps({
+		udid,
+		keep: bundleId
+	});
+	if (swept.removed.length) phase("install", `removed ${swept.removed.join(", ")}, left by the previous workspace`);
+	if (swept.listed && swept.failed.length === 0) {
+		if (swept.kept && bundleId) {
+			try {
+				d.clearIosAppData(udid, bundleId, { defaultsPlist: devClient ? IOS_DEV_MENU_OFF_DEFAULTS_PLIST : null });
+			} catch (error) {
+				return `Could not clear the data ${bundleId} kept from the previous workspace: ${String(error?.message || error)}`;
+			}
+			phase("install", `cleared ${bundleId} data left by the previous workspace`);
+		}
+		return null;
+	}
+	if (!swept.listed) return "Could not list apps left by the previous workspace.";
+	for (const failure of swept.failed) note(chalk.yellow(phaseLine("install", `could not remove ${failure}, left by the previous workspace`)));
+	return `Could not remove ${swept.failed.join(", ")}, left by the previous workspace.`;
+}
+function installMayBeProven(adopting, parkedCacheKey, storeKey) {
+	return !adopting || !parkedCacheKey || parkedCacheKey === storeKey;
+}
+function resolveRunBundleId(d, projectBundleId, appPath, bundleId) {
+	if (!appPath || bundleId) return bundleId;
+	return d.readBundleId(appPath) || projectBundleId();
+}
+function readRunExecutable(d, appPath, note) {
+	const executable = appPath ? d.readBundleExecutable(appPath) : null;
+	if (appPath && !executable) note(chalk.dim(`Could not read CFBundleExecutable from ${appPath}; the device log predicate falls back to the .app basename.`));
+	return executable;
+}
+function recordIosReloadTarget({ d, root, physical, remoteDevice, bundleId, udid, metroPort, release, runtimeKind, launchedAt, note }) {
+	if (physical || remoteDevice) return;
+	try {
+		d.writeWorkspaceLaunch(root, "ios", {
+			appId: bundleId,
+			deviceId: udid,
+			metroPort,
+			release,
+			...runtimeKind === "process" ? { runtime: "process" } : {},
+			launchedAt: new Date(launchedAt).toISOString()
+		});
+	} catch (error) {
+		note(chalk.yellow(phaseLine("state", `could not record iOS launch: ${error?.message || error}`)));
+	}
+}
+function installFailureRemedy(remoteDevice) {
+	return remoteDevice?.failureRemedy() ?? "Check that the simulator is booted and that the app was built for the simulator SDK.";
+}
+function launchFailureRemedy(remoteDevice, udid, bundleId, logFile) {
+	if (remoteDevice) return remoteDevice.failureRemedy();
+	return `If the simulator timed out, run \`stim doctor --platform ios\` and resolve any reported host memory pressure before retrying. Otherwise run \`xcrun simctl launch --terminate-running-process --console ${udid} ${bundleId}\` to see what the app reports, and check ${logFile}.`;
+}
+async function finishIosRun({ projectBundleId, runtime, runtimePreparation, devicePlacement, artifact, d, root, slot, json, release, configuration, buildScheme, isExpo, metroCheck, metroPort, logsDir, logFile, device, udid, physical, wireless, lanAddress, lanOriginUrl, remoteDevice, bootPromise, bootDuration, fail, phase, note, logWriter, elapsed, startedAt, closeWriter, lease, releaseLease, recordRun, reclaimed, devServer, enterPhase }) {
+	const { path: appPath, bundleId: initialBundleId, failureFields: buildFailure, cache } = artifact;
+	const { hit: cacheHit, providerName, buildMachine, builtOn, offloadedTo, offloadFallback, readEnabled: useBuildCache, missReason, waitedForBuild, compilation: compilationCache } = cache;
+	const storeHash = cache.identity?.fingerprint ?? null;
+	const storeKey = cache.identity?.key ?? null;
+	const runCommand = nativeRunCommand("ios", slot, {
+		physical,
+		deviceId: udid
+	});
+	let bundleId = initialBundleId;
+	let leaseWarned = false;
+	const raiseLeaseFor = (boundMs, beforeInstall) => {
+		const step = lease?.raise(boundMs);
+		if (!step || step.ok) return null;
+		if (beforeInstall) {
+			const refusal = lostRefusal(step.holder, step.expiresAt, d.now());
+			return {
+				code: refusal.code,
+				message: refusal.message,
+				remedy: refusal.remedy,
+				lease: refusal.lease
+			};
+		}
+		if (!leaseWarned) {
+			leaseWarned = true;
+			note(chalk.yellow(phaseLine("lease", lostLine(step.holder, step.expiresAt, d.now()))));
+		}
+		return null;
+	};
+	bundleId = resolveRunBundleId(d, projectBundleId, appPath, bundleId);
+	if (appPath && !bundleId) return fail({
+		code: "STIM_INSTALL_FAILED",
+		message: `Could not read a bundle identifier from the cached app at ${appPath}.`,
+		remedy: "Remove the cache entry (`stim gc`) and run again to rebuild it.",
+		build: {
+			...buildFailure,
+			appPath
+		}
+	});
+	if (bundleId) d.upsertProject(root, { bundleId });
+	enterPhase("device");
+	const booted = await bootPromise;
+	if (!booted?.ok) return fail({
+		code: booted?.code || "STIM_NO_DEVICE",
+		message: booted?.reason || "The owned simulator could not be booted.",
+		remedy: booted?.remedy || `Run \`${runCommand}\` again to re-establish an owned simulator for this workspace.`
+	});
+	const deviceOutcome = physical ? "connected" : `${device?.adopted ? "adopted" : "booted"} ${bootDuration()}`;
+	phase("device", `${deviceLabel(device, udid)} ${deviceOutcome}`);
+	const scheme = runtime.scheme(root, appPath, d);
+	const devMenuParams = runtime.devMenuParams(root, d);
+	const appName = appNameFromPath(appPath);
+	const appExecutable = readRunExecutable(d, appPath, note);
+	const dropSwapDir = artifact.release;
+	let installSkipped = false;
+	let launched;
+	let launchedAt = d.now();
+	if (physical) {
+		const overWifi = installsOverWifi(d, udid, wireless, note);
+		const bounds = iosDeviceBounds(overWifi);
+		const lostBeforeInstall = raiseLeaseFor(bounds.installMs, true);
+		if (lostBeforeInstall) return fail(lostBeforeInstall);
+		await d.stopPreviousCollector({
+			root,
+			note
+		});
+		enterPhase("install");
+		const installTimer = stepTimer(d.now);
+		const installed = d.installIosDeviceApp({
+			udid,
+			appPath,
+			bundleId,
+			wireless: overWifi
+		}, { beforeStep: () => raiseLeaseFor(bounds.installMs, false) });
+		if (installed?.failed) {
+			dropSwapDir();
+			return fail({
+				code: installed.code || "STIM_INSTALL_FAILED",
+				message: installed.reason ?? `devicectl could not install ${appPath} on ${udid}.`,
+				remedy: installed.remedy ?? null,
+				build: {
+					...buildFailure,
+					appPath,
+					bundleId
+				}
+			});
+		}
+		phase("install", `${basename(appPath)} -> ${deviceLabel(device, udid)} ${installTimer()}`);
+		if (installed?.note) {
+			note(chalk.yellow(phaseLine("install", installed.note)));
+			logWriter().write({
+				src: "build",
+				level: "warn",
+				event: "install_uninstalled_first",
+				msg: installed.note
+			});
+		}
+		dropSwapDir();
+		raiseLeaseFor(COLLECTOR_EXIT_WAIT_MS + bounds.launchMs, false);
+		enterPhase("launch");
+		const launchTimer = stepTimer(d.now);
+		launchedAt = d.now();
+		logWriter().write({
+			src: "build",
+			level: "info",
+			marker: true,
+			event: "launch_attempt",
+			ts: launchedAt,
+			platform: "ios",
+			appId: bundleId,
+			deviceId: udid,
+			appPath,
+			physical: true,
+			msg: `launching ${bundleId} on ${udid}`
+		});
+		launched = await runtime.launch(runtimePreparation, {
+			scheme,
+			devMenuParams,
+			lanAddress,
+			launch: async ({ payloadUrl }) => {
+				const collector = await d.replaceCollector({
+					root,
+					slot,
+					udid,
+					bundleId,
+					appName,
+					physical: true,
+					payloadUrl,
+					note
+				});
+				if (!collector?.pid) return { error: {
+					code: "STIM_LAUNCH_FAILED",
+					message: `The device log collector, which is what launches ${bundleId} on a phone, could not be started.`,
+					remedy: `Check ${logFile} and the workspace collector log, then run the command again.`,
+					build: {
+						...buildFailure,
+						appPath,
+						bundleId
+					}
+				} };
+				const started = await d.awaitIosDeviceLaunch({
+					udid,
+					bundleId,
+					appName: appName ?? bundleId,
+					collectorPid: collector.pid,
+					wireless: overWifi,
+					readRecords: () => readCollectorRecords(logsDir).filter((entry) => Number(entry.ts) >= launchedAt && (entry.slot ?? "default") === (slot ?? "default"))
+				});
+				if (started.failed || !started.pid) return { error: {
+					code: started.code ?? "STIM_LAUNCH_FAILED",
+					message: started.reason ?? `${bundleId} did not start on ${udid}.`,
+					remedy: started.remedy ?? null,
+					lines: started.lines ?? [],
+					logPath: logsDir,
+					build: {
+						...buildFailure,
+						appPath,
+						bundleId
+					}
+				} };
+				return {
+					ok: true,
+					mode: payloadUrl ? "payload-url" : "launch",
+					pid: started.pid,
+					...payloadUrl ? { url: payloadUrl } : {},
+					...lanOriginUrl ? { jsLocation: lanOriginUrl } : {}
+				};
+			}
+		});
+		if ("error" in launched) return fail(launched.error);
+		if (launched.failed) return fail({
+			code: launched.code ?? "STIM_LAUNCH_FAILED",
+			message: launched.reason ?? `${bundleId} did not start on ${udid}.`,
+			remedy: `Check ${logFile} and the workspace collector log, then run the command again.`,
+			logPath: logsDir,
+			build: {
+				...buildFailure,
+				appPath,
+				bundleId
+			}
+		});
+		phase("launch", `${bundleId} pid ${launched.pid} ${launchTimer()}`);
+	} else {
+		const adopting = Boolean(device?.adoptionPending);
+		if (adopting) {
+			const cleanupFailure = cleanAdoptedIosApps({
+				d,
+				udid,
+				bundleId,
+				devClient: Boolean(scheme),
+				phase,
+				note
+			});
+			if (cleanupFailure) return fail({
+				code: "STIM_INSTALL_FAILED",
+				message: `${cleanupFailure} Stim kept the adoption cleanup pending and did not install or launch the app.`,
+				remedy: `Run \`${runCommand}\` again after simulator tooling is responsive.`,
+				build: {
+					...buildFailure,
+					appPath,
+					bundleId
+				}
+			});
+		}
+		enterPhase("install");
+		const installTimer = stepTimer(d.now);
+		const installed = d.installIosApp({
+			udid,
+			appPath,
+			bundleId,
+			devClientScheme: scheme,
+			schemeApprovals: device.schemeApprovals,
+			proveInstalled: installMayBeProven(adopting, device?.parkedCacheKey, storeKey)
+		}, { now: d.now });
+		if (installed?.failed) return fail({
+			code: installed.code || "STIM_INSTALL_FAILED",
+			message: installed.reason,
+			remedy: installFailureRemedy(remoteDevice),
+			build: {
+				...buildFailure,
+				appPath,
+				bundleId
+			}
+		});
+		if (adopting) d.clearIosAdoptionPending(root, slot);
+		installSkipped = Boolean(installed?.skipped);
+		const artifactDuration = installed?.artifactDurationMs === void 0 ? installTimer() : `(${formatDuration(installed.artifactDurationMs)})`;
+		phase("install", installSkipped ? `unchanged (${deviceShortName(device, udid)} already has this build) ${artifactDuration}` : `${basename(appPath)} -> ${deviceLabel(device, udid)} ${artifactDuration}`);
+		if (!remoteDevice && installed?.devClientPreparationDurationMs !== void 0) phase("install", `dev client prepared (${formatDuration(installed.devClientPreparationDurationMs)})`);
+		if (installed.schemeApprovals) d.recordIosSchemeApprovals(root, udid, installed.schemeApprovals, slot);
+		dropSwapDir();
+		if (!remoteDevice) await d.replaceCollector({
+			root,
+			slot,
+			udid,
+			bundleId,
+			appName,
+			appExecutable,
+			note
+		});
+		enterPhase("launch");
+		const launchTimer = stepTimer(d.now);
+		launchedAt = d.now();
+		logWriter().write({
+			src: "build",
+			level: "info",
+			marker: true,
+			event: "launch_attempt",
+			ts: launchedAt,
+			platform: "ios",
+			appId: bundleId,
+			deviceId: udid,
+			appPath,
+			remote: Boolean(remoteDevice),
+			msg: `launching ${bundleId} on ${udid}`
+		});
+		launched = await runtime.launch(runtimePreparation, {
+			scheme,
+			devMenuParams,
+			lanAddress,
+			launch: async ({ metroPort: port, devClientScheme, devMenuParams: menuParams }) => d.launchIosApp({
+				udid,
+				bundleId,
+				metroPort: port,
+				devClientScheme,
+				devMenuParams: menuParams,
+				consolePaths: simulatorConsolePaths({
+					deviceId: udid,
+					appId: bundleId,
+					since: launchedAt
+				}, true, Boolean(remoteDevice))
+			})
+		});
+		if ("error" in launched) return fail(launched.error);
+		if (launched.failed) {
+			printNativeCrashReport({
+				root,
+				slot,
+				platform: "ios",
+				deviceId: udid,
+				appId: bundleId,
+				since: launchedAt,
+				appPath
+			}, logsDir, (line) => note(chalk.red(phaseLine("launch", line))), Boolean(remoteDevice));
+			return fail({
+				code: launched.code || "STIM_LAUNCH_FAILED",
+				message: launched.reason,
+				remedy: launchFailureRemedy(remoteDevice, udid, bundleId, logFile),
+				build: {
+					...buildFailure,
+					appPath,
+					bundleId
+				}
+			});
+		}
+		phase("launch", `${bundleId}${restartedAppNote(launched.restartedPid)} ${launchTimer()}`);
+	}
+	recordIosReloadTarget({
+		d,
+		root,
+		slot,
+		physical,
+		remoteDevice: Boolean(remoteDevice),
+		bundleId,
+		udid,
+		metroPort,
+		release,
+		runtimeKind: runtime.kind,
+		launchedAt,
+		note
+	});
+	logWriter().write({
+		src: "build",
+		level: "info",
+		event: "launch",
+		msg: runtime.kind === "process" ? `launched ${bundleId} on ${udid} (${configuration ?? "Debug"}, native process, no Metro)` : runtime.kind === "embedded-js" ? `launched ${bundleId} on ${udid} (${configuration}, embedded JS bundle, no Metro)` : `launched ${bundleId} on ${udid} against Metro ${lanOriginUrl ?? `port ${metroPort}`}` + (launched?.mode === "openurl" || launched?.mode === "payload-url" ? " (expo-dev-client)" : "") + restartedAppNote(launched.restartedPid, "; ")
+	});
+	if (remoteDevice) logWriter().write({
+		src: "build",
+		level: "info",
+		event: "collector_skipped",
+		msg: `remote session ${udid}: device logs come from agent-device/EAS, so no simctl log stream is attached`
+	});
+	if (physical) raiseLeaseFor(runtime.verificationWaitMs, false);
+	const { state: launchState, warning: launchWarning, unattributed } = await runtime.verify(runtimePreparation, {
+		root,
+		slot,
+		appPath,
+		d,
+		launched,
+		configuration,
+		phase,
+		note,
+		metroCheck,
+		logsDir,
+		launchedAt,
+		metroPort,
+		isExpo,
+		bundleId,
+		udid,
+		scheme,
+		physical,
+		appName,
+		lanAddress,
+		lanOrigin: lanOriginUrl,
+		remoteDevice: Boolean(remoteDevice),
+		metroOrigin: typeof launched?.jsLocation === "string" ? launched.jsLocation : null
+	});
+	if (launchState === "fatal") return fail({
+		code: "STIM_LAUNCH_FAILED",
+		message: "The app failed its launch readiness check.",
+		remedy: `Read the launch error above or run \`stim logs --errors\`. The full timeline is in ${logsDir}.`,
+		logPath: logsDir,
+		build: {
+			...buildFailure,
+			appPath,
+			bundleId
+		}
+	});
+	logWriter().write(runtime.kind === "process" ? {
+		src: "build",
+		level: launchState === "unverified" ? "warn" : "info",
+		event: launchState === "unverified" ? "launch_unverified" : "launch_verified",
+		msg: launchState === "unverified" ? `${bundleId} could not be verified as running` : `${bundleId} is running its native process`
+	} : launchOutcomeRecord({
+		launchState,
+		release: runtime.kind === "embedded-js",
+		bundleId,
+		configuration,
+		metroPort,
+		unattributed
+	}));
+	const leaseFacts = lease?.facts() ?? null;
+	releaseLease();
+	const uploadsAbandoned = await artifact.completeUploads();
+	return {
+		facts: reportIosResult({
+			devicePlacement,
+			root,
+			slot,
+			json,
+			release,
+			runtimeKind: runtime.kind,
+			configuration,
+			buildScheme,
+			metroCheck,
+			metroPort,
+			logsDir,
+			device,
+			udid,
+			appPath,
+			bundleId,
+			installSkipped,
+			elapsed,
+			startedAt,
+			storeHash,
+			storeKey,
+			cacheHit,
+			missReason,
+			compilationCache,
+			useBuildCache,
+			waitedForBuild,
+			launchState,
+			launchWarning,
+			providerName,
+			buildMachine,
+			builtOn,
+			offloadedTo,
+			offloadFallback,
+			closeWriter,
+			webPreviewUrl: remoteDevice?.webPreviewUrl() ?? null,
+			lease: physical ? leaseFacts : void 0,
+			recordRun,
+			reclaimed,
+			devServer,
+			links: workspaceLinks(root, {
+				platform: "ios",
+				slot
+			})
+		}),
+		uploadsAbandoned
+	};
+}
+//#endregion
+//#region src/integrations/ios-project.ts
+var IosRecipeRefusal = class extends Error {
+	failure;
+	constructor(failure) {
+		super(failure.message ?? failure.code);
+		this.failure = failure;
+	}
+};
+//#endregion
+//#region src/integrations/react-native-ios.ts
+const PLATFORM = "ios";
+function reactNativeIosSchemeProblem(root, scheme, isExpo, d) {
+	if (scheme === void 0) return null;
+	if (!scheme.trim()) return {
+		code: "STIM_BAD_ARG",
+		message: "--scheme must name a non-empty shared Xcode app scheme.",
+		remedy: "Pass the exact scheme name shown by xcodebuild -list."
+	};
+	if (isExpo) return null;
+	const project = d.discoverXcodeProject(root);
+	if (project.error) return project.error;
+	return d.resolveScheme(project, { scheme }).error ?? null;
+}
+function reactNativeIosProject(root, dependencies = {}) {
+	const d = {
+		...DEFAULT_DEPS,
+		...dependencies
+	};
+	const isExpo = d.detectIsExpo(root);
+	return {
+		isExpo,
+		bundleId: () => d.detectBundleId(root),
+		schemeProblem: (scheme) => reactNativeIosSchemeProblem(root, scheme, isExpo, d),
+		targets: [
+			"simulator",
+			"physical",
+			"remote",
+			"hosted"
+		],
+		eas: true,
+		runtime: ({ configuration, prepareMetro, prepareEmbedded }) => isReleaseConfiguration(configuration) ? iosProcessRuntime(prepareEmbedded, "embedded-js") : iosMetroRuntime(prepareMetro),
+		artifact: (context) => reactNativeIosArtifact(context, isExpo, d)
+	};
+}
+function fail(failure) {
+	throw new IosRecipeRefusal(failure);
+}
+function reactNativeIosArtifact({ root, logFile, configuration, buildScheme, buildProfile, target, device, easProfile, optimizations, cache: cachePolicy, phase, note, logWriter, estimates, step, setPodsMs }, isExpo, d) {
+	const physical = device !== null;
+	const { udid } = target;
+	const release = isReleaseConfiguration(configuration);
+	const keyOptions = {
+		scheme: buildScheme,
+		...configuration ? { configuration } : {},
+		isSimulator: !physical,
+		...target.keyArch ? { arch: target.keyArch } : {},
+		...buildProfile ? { buildProfile } : {}
+	};
+	let fingerprint = "";
+	let fingerprintSources = [];
+	let storeHash = null;
+	let storeSources = [];
+	let mutatingSteps = [];
+	const identity = () => storeHash ? {
+		hash: storeHash,
+		key: buildCacheKey(PLATFORM, storeHash, keyOptions)
+	} : null;
+	const materialize = async (artifactPath, { fresh: isFresh, ownTemporary }) => {
+		const lanAddress = device?.lanAddress ?? null;
+		const metroPort = device?.metroPort ?? null;
+		const prepareDeviceApp = async (path, { fresh }) => {
+			const refuse = (code, reason, remedy) => {
+				if (fresh) fail({
+					code,
+					message: reason,
+					remedy,
+					build: { appPath: path }
+				});
+				note(chalk.yellow(phaseLine("cache", `${reason} -- building fresh instead`)));
+				note(chalk.dim(phaseLine("", remedy)));
+				return null;
+			};
+			const gateProfile = () => {
+				const gate = d.gateProfileForDevice({
+					appPath: path,
+					udid,
+					configuration
+				});
+				return gate.ok ? path : refuse(gate.code, gate.reason, gate.remedy);
+			};
+			if (release) {
+				if (!fresh) {
+					note(chalk.yellow(phaseLine("cache", `a cached ${configuration} device app carries its builder's JS, and the device JS swap lands with phase 6 of appandflow/stim#178 -- building fresh instead, which bakes in this workspace's JS`)));
+					return null;
+				}
+				return gateProfile();
+			}
+			if (d.devClientScheme(root, path)) return gateProfile();
+			let copy;
+			try {
+				copy = copyAppAside(path);
+			} catch (e) {
+				return refuse("STIM_INSTALL_FAILED", `Could not copy ${path} aside to write its ip.txt: ${e?.message || e}`, "Free space in the temporary directory and run the command again.");
+			}
+			ownTemporary(copy.tmpDir);
+			writeIpTxt(copy.appPath, lanAddress, metroPort);
+			const sealed = d.sealAppForDevice({
+				appPath: copy.appPath,
+				udid,
+				configuration,
+				pinnedName: device?.signingName ?? null,
+				pinnedSha1: device?.signingSha1 ?? null
+			});
+			if (!sealed.ok) {
+				try {
+					rmSync(copy.tmpDir, {
+						recursive: true,
+						force: true
+					});
+				} catch {}
+				for (const line of sealed.lastLines ?? []) note(chalk.dim(phaseLine("", line)));
+				return refuse(sealed.code, sealed.reason, sealed.remedy);
+			}
+			phase("ip.txt", `${lanAddress}:${metroPort} written into the install copy and re-sealed with "${sealed.identity.name}"${sealed.mode === "preserve-metadata" ? "" : ` (${sealed.mode})`}`);
+			return copy.appPath;
+		};
+		const installableCachedApp = async (cachedPath) => {
+			if (physical) return prepareDeviceApp(cachedPath, { fresh: false });
+			if (!release) return cachedPath;
+			phase("swap", `regenerating this workspace's JS for the cached ${configuration} app`);
+			const swap = await d.swapJsBundle({
+				root,
+				isExpo,
+				cachedAppPath: cachedPath,
+				logWriter: logWriter()
+			});
+			if (swap?.ok && swap.appPath) {
+				if (swap.note) note(chalk.yellow(phaseLine("swap", swap.note)));
+				if (swap.tmpDir) ownTemporary(swap.tmpDir);
+				phase("swap", `${swap.hermes ? "hermes bytecode" : "plain JS"} + assets replaced, re-signed (${formatDuration(swap.durationMs ?? 0)})`);
+				return swap.appPath;
+			}
+			note(chalk.yellow(phaseLine("swap", `failed at ${swap?.step || "unknown step"}: ${swap?.reason || "unknown reason"} -- building fresh instead (a cached ${configuration} app carries its builder's JS; it is never installed after a failed swap)`)));
+			for (const line of swap?.lastLines ?? []) note(chalk.dim(phaseLine("", line)));
+			return null;
+		};
+		if (isFresh) return physical ? prepareDeviceApp(artifactPath, { fresh: true }) : artifactPath;
+		return installableCachedApp(artifactPath);
+	};
+	return {
+		async identity() {
+			let computedFingerprint;
+			let fingerprintError = "no hash";
+			try {
+				const computed = await d.fingerprintProject(root, { platform: PLATFORM });
+				computedFingerprint = computed?.hash ?? null;
+				fingerprintSources = computed?.sources ?? [];
+			} catch (error) {
+				computedFingerprint = null;
+				fingerprintError = String(error?.message || error);
+				note(chalk.dim(`Fingerprinting failed: ${fingerprintError}`));
+			}
+			if (!computedFingerprint) fail({
+				code: "STIM_NO_FINGERPRINT",
+				message: `Could not fingerprint ${root}: @expo/fingerprint produced no hash for it.`,
+				remedy: "Check the project native inputs and the @expo/fingerprint error above, then retry.",
+				build: {
+					cacheSkipped: !cachePolicy.read,
+					missReason: fingerprintErrorMissReason(fingerprintError)
+				}
+			});
+			fingerprint = storeHash = computedFingerprint;
+			storeSources = fingerprintSources;
+			return identity();
+		},
+		cache: () => filesystemBuildCapability({
+			resolve: d.resolveBuild,
+			store: d.storeBuild,
+			sources: storeSources
+		}),
+		validateExternal(path) {
+			if (physical) {
+				const gate = d.gateProfileForDevice({
+					appPath: path,
+					udid,
+					configuration
+				});
+				if (!gate.ok) fail({
+					code: gate.code,
+					message: gate.reason,
+					remedy: easDeviceBuildRemedy(easProfile)
+				});
+				if (!d.devClientScheme(root, path)) fail({
+					code: "STIM_BAD_ARG",
+					message: "The EAS device app has no development-client URL scheme.",
+					remedy: "Install expo-dev-client with npx expo install expo-dev-client, then rebuild the EAS profile and retry."
+				});
+			}
+		},
+		materialize,
+		async prepare(beforePrepare) {
+			mutatingSteps = [];
+			const prebuild = d.planPrebuild(root, PLATFORM, {
+				isExpo,
+				fingerprint,
+				sources: fingerprintSources
+			});
+			if (prebuild === "refuse") fail({ ...staleNativeDirRefusal(PLATFORM) });
+			const pods = d.readPodState(root);
+			if ((prebuild === "generate" || prebuild === "regenerate" || podAction(pods, d.podsAreStale(pods.lockText, pods.manifestText)).install) && cachePolicy.read) beforePrepare();
+			if (prebuild === "generate" || prebuild === "regenerate") {
+				step("prebuild");
+				recordPrebuild(root, PLATFORM, null);
+				const result = await d.runPrebuild(root, PLATFORM, logWriter(), { clean: prebuild === "regenerate" });
+				if (result?.failed) {
+					phase("prebuild", "FAILED");
+					fail({
+						code: result.code || "STIM_PREBUILD_FAILED",
+						message: result.reason || "expo prebuild failed.",
+						remedy: result.remedy || `See ${logFile} for the transcript.`,
+						lines: (result.lastLines || []).slice(-5)
+					});
+				}
+				phase("prebuild", `${prebuild === "generate" ? "ios/ absent -> generated" : "ios/ not generated from this fingerprint -> regenerated with --clean"} (${formatDuration(result?.durationMs ?? 0)})`);
+				mutatingSteps.push("prebuild");
+			}
+			if (isExpo && buildScheme !== void 0) {
+				const project = d.discoverXcodeProject(root);
+				if (project.error) fail({ ...project.error });
+				const schemeError = d.resolveScheme(project, { scheme: buildScheme }).error;
+				if (schemeError) fail({ ...schemeError });
+			}
+			const podState = d.readPodState(root);
+			const verdict = d.podsAreStale(podState.lockText, podState.manifestText);
+			const action = podAction(podState, verdict);
+			if (action.install) {
+				step("pods");
+				const result = await d.runPodInstall(root, logWriter(), { estimateMs: estimates().podsMs });
+				const podCommand = result?.command || "pod install";
+				for (const line of result?.notes || []) note(chalk.dim(phaseLine("pods", line)));
+				if (result?.failed) {
+					phase("pods", "FAILED");
+					fail({
+						code: result.code || "STIM_DEPS_FAILED",
+						message: result.reason || "`pod install` failed.",
+						remedy: result.remedy || `See ${logFile} for the transcript.`,
+						lines: result.diagnosticLines?.length ? result.diagnosticLines : (result.lastLines || []).slice(-5)
+					});
+				}
+				setPodsMs(result?.durationMs ?? 0);
+				phase("pods", `${action.reason} -> installed with \`${podCommand}\` (${formatDuration(result?.durationMs ?? 0)})`);
+				mutatingSteps.push(podCommand);
+			}
+		},
+		async reconcile() {
+			const rekeyedBy = [];
+			if (mutatingSteps.length) {
+				const after = await refingerprintAfterMutation({
+					projectRoot: root,
+					platform: PLATFORM,
+					previousHash: fingerprint,
+					fingerprint: d.fingerprintProject
+				});
+				const prebuildRan = mutatingSteps.includes("prebuild");
+				const editedConfig = after ? configInputsChanged(fingerprintSources, after.sources, { prebuildRan }) : [];
+				if (after && !editedConfig.length && prebuildRan) recordPrebuild(root, PLATFORM, after.hash);
+				if (!after || editedConfig.length) {
+					storeHash = null;
+					note(chalk.yellow(phaseLine("fingerprint", after ? changedDuringBuildLine(editedConfig) : `unavailable after ${mutatingSteps.join(", ")}; the build will be installed but not cached`)));
+				} else if (after.moved) {
+					rekeyedBy.push(...mutatingSteps.map((mutation) => mutation === "prebuild" ? mutation : "pod install"));
+					storeHash = after.hash;
+					storeSources = after.sources;
+					note(chalk.dim(phaseLine("fingerprint", `${shortHash(fingerprint)} -> ${shortHash(storeHash)} (after ${mutatingSteps.join(", ")})`)));
+				}
+			}
+			return {
+				identity: identity(),
+				rekeyedBy,
+				mutationLabel: mutatingSteps.join("/")
+			};
+		},
+		async validate() {
+			if (!storeHash) return null;
+			const after = await refingerprintAfterMutation({
+				projectRoot: root,
+				platform: PLATFORM,
+				previousHash: storeHash,
+				fingerprint: d.fingerprintProject
+			});
+			const changed = after ? inputsChangedDuringBuild({
+				platform: PLATFORM,
+				lookup: fingerprintSources,
+				prebuildRan: mutatingSteps.includes("prebuild"),
+				compiled: storeSources,
+				current: after.sources
+			}) : [];
+			if (!after || changed.length) {
+				storeHash = null;
+				note(chalk.yellow(phaseLine("fingerprint", after ? changedDuringBuildLine(changed) : "unavailable after xcodebuild; the build will be installed but not cached")));
+			} else if (after.moved) {
+				const before = storeHash;
+				storeHash = after.hash;
+				storeSources = after.sources;
+				note(chalk.dim(phaseLine("fingerprint", `${shortHash(before)} -> ${shortHash(storeHash)} (after xcodebuild)`)));
+			}
+			return identity();
+		},
+		compile: () => d.buildIos({
+			root,
+			scheme: buildScheme,
+			udid,
+			destination: target.destination,
+			arch: target.arch,
+			...physical ? { sdk: target.sdk } : {},
+			logWriter: logWriter(),
+			...configuration ? { configuration } : {},
+			estimateMs: estimates().coldBuildMs,
+			optimizations
+		}),
+		explain(rekeyedBy) {
+			const current = {
+				hash: storeHash ?? fingerprint,
+				sources: storeSources
+			};
+			const explained = explainBuildMiss({
+				root,
+				platform: PLATFORM,
+				current,
+				rekeyedBy,
+				baselineDeps: { readState: d.readWorkspaceState }
+			});
+			return {
+				reason: explained.reason,
+				diff: explained.previousHash && explained.changedNames.length ? fingerprintDiffRecord({
+					changed: explained.changedNames,
+					previousHash: explained.previousHash,
+					hash: current.hash
+				}) : null
+			};
+		},
+		untrackedLine: () => untrackedMissLine(d.untrackedNativeFiles({ projectRoot: root })),
+		legacyCache: physical || !cachePolicy.remote || buildProfile || buildScheme ? null : {
+			load: () => d.loadProjectProvider(root, { isExpo }),
+			runOptions: iosProviderRunOptions(configuration, target.keyArch)
+		},
+		offload: {
+			context: () => {
+				const runtime = physical || release ? null : target.offloadRuntime();
+				return {
+					runtime,
+					unsupported: target.offloadRefusal ?? (release ? `${configuration} builds build here` : !cachePolicy.write ? "the build cache is off" : !runtime ? `the runtime of simulator ${udid} is unknown` : null)
+				};
+			},
+			target: (runtime) => ({
+				platform: "ios",
+				local: {
+					...iosToolchain(root),
+					...target.hostedArchitecture ? { arch: target.hostedArchitecture === "x86_64" ? "x64" : "arm64" } : {}
+				},
+				runtime,
+				cocoapodsPinned: bundlerPin(root) !== null
+			}),
+			request: (runtime) => ({
+				platform: "ios",
+				runtime,
+				configuration,
+				scheme: buildScheme ?? null,
+				isExpo,
+				optimizations
+			}),
+			unchanged: async () => {
+				const after = await refingerprintAfterMutation({
+					projectRoot: root,
+					platform: PLATFORM,
+					previousHash: storeHash,
+					fingerprint: d.fingerprintProject
+				});
+				return Boolean(after && !after.moved);
+			}
+		}
+	};
+}
+//#endregion
+export { cacheDescription as a, lastBuildRecord as c, DEFAULT_DEPS as d, collectorEntry as f, lanOriginUrlFor as h, finishIosRun as i, reportIosResult as l, chooseLanAddress as m, reactNativeIosSchemeProblem as n, finishIosUpload as o, replaceCollector as p, IosRecipeRefusal as r, iosFacts as s, reactNativeIosProject as t, writeLastBuild as u };