stim 1.18.0 → 1.20.0

package/dist/{workspaces-xXItD8Dj.mjs → workspaces-D2xSHBDY.mjs}

@@ -1,57 +1,31 @@
 import { n as ownership_claim_exports, t as process_identity_exports } from "./process-identity-Biv3arCO.mjs";
-import { t as getExecutor } from "./exec-DWhCZDGm.mjs";
+import { t as getExecutor } from "./exec-B81Qodjn.mjs";
+import { D as withConfigLock$1, H as projectDeviceSlots, M as isOnMountedVolume, N as listMountedVolumes, P as measuredDirectorySize, _ as loadConfig$1, d as getConfigDir, g as isPathPrefix, j as formatBytes, k as acquireAvdClaim, p as getProject, z as deviceSlotPlatforms } from "./config-D0LhTY3S.mjs";
+import { Et as repoRoot, st as resolveTailscaleBinary } from "./settings-Bbztm4oV.mjs";
+import { h as listBuildLocks } from "./device-lease-DHOBXGgS.mjs";
+import { T as workspaceName, r as readWorkspaceState$1, s as workspaceLastUsed, x as workspaceDir, y as workspaceAgentDeviceDir } from "./workspace-state-CSIFuuDa.mjs";
 import { t as createLineReader } from "./process-output-Fpl8PYi8.mjs";
-import { a as formatElapsed, l as phaseLine } from "./command-output-CBtzyIgF.mjs";
-import { D as withConfigLock$1, H as projectDeviceSlots, M as isOnMountedVolume, N as listMountedVolumes, P as measuredDirectorySize, _ as loadConfig$1, d as getConfigDir, g as isPathPrefix, j as formatBytes, k as acquireAvdClaim, p as getProject, z as deviceSlotPlatforms } from "./config-CgYMahz7.mjs";
-import { y as repoRoot } from "./worktree-CsKYexJM.mjs";
-import { o as pidExists, u as signalProcessTree } from "./metro-Dh8T4Ytd.mjs";
-import { S as workspaceName, g as workspaceAgentDeviceDir, r as readWorkspaceState$1, s as workspaceLastUsed, v as workspaceDir } from "./workspace-state-C59dqG-Z.mjs";
-import { _ as removeSingletonFiles, c as webClaimRoot, f as webProfileDir, g as liveProfileHolder, h as chromeProcessState, i as clearWebRecord, o as readWebRecord, t as CDP_PORT_LABEL, u as webFacts } from "./state-BG-aAk4k.mjs";
-import { t as agentDeviceDaemon, u as readAgentDeviceRecords } from "./activity-BxnkDZDi.mjs";
-import { h as listBuildLocks } from "./device-lease-Co-EwifR.mjs";
+import { a as formatElapsed, l as phaseLine } from "./command-output-BjPN99ZB.mjs";
+import { B as ownedAvdSystemImage, I as ownedAvdDirectory, J as resolveOwnedAvdSerial, L as ownedAvdMatchesConfiguration, M as listOrphanedAvdDirectories, O as listAdbDevices, X as shutdownAndroidEmulator, Z as sleepSync, _ as avdStorageRoots, ct as eraseParkedAfter, et as waitForAndroidEmulatorShutdown, f as assertOwnedAvdStopped, ft as readParked, h as avdPathExists, nt as wipeAvdUserData, pt as removeParkedAfter, rt as isStimOwnedAvd, ut as parkSim, x as deleteAvd } from "./android-BsYNR81W.mjs";
+import { n as readCreatedDevices$1, r as recordCreatedDevice, t as forgetCreatedDevice } from "./created-devices-HU_DAb_Q.mjs";
+import { d as signalProcessTree, s as pidExists } from "./metro-D_j9sN-B.mjs";
 import { n as declareSpawnsOn, o as stopDeclaringSpawnsOn } from "./spawn-claims-Kqiifsk2.mjs";
-import { n as readCreatedDevices$1, r as recordCreatedDevice, t as forgetCreatedDevice } from "./created-devices-DKbeWsiK.mjs";
-import { B as ownedAvdSystemImage, I as ownedAvdDirectory, J as resolveOwnedAvdSerial, L as ownedAvdMatchesConfiguration, M as listOrphanedAvdDirectories, O as listAdbDevices, X as shutdownAndroidEmulator, Z as sleepSync, _ as avdStorageRoots, dt as parkSim, et as waitForAndroidEmulatorShutdown, f as assertOwnedAvdStopped, h as avdPathExists, it as isStimOwnedAvd, lt as eraseParkedAfter, mt as removeParkedAfter, nt as wipeAvdUserData, pt as readParked, x as deleteAvd } from "./android-DC3ZLuw0.mjs";
-import { D as shutdownIosSim, T as resolveOwnedIosSim, _ as parkedSimName, c as eraseIosSim, o as deleteIosSim, p as listIosDeviceTypes, s as deleteParkedIosSim, v as parseRuntimeVersion, x as renameIosSim } from "./ios-B3SbOWdw.mjs";
-import { J as resolveTailscaleBinary } from "./settings-CQyMElEP.mjs";
-import { a as withWorkspaceProcessLock, o as workspaceProcessLockError, r as releaseBrowserPort, s as workspaceProcessLockPath } from "./named-ports-BFIz1Shz.mjs";
-import { i as macosRuntimeClaim } from "./state-xnqpx3AD.mjs";
+import { a as withWorkspaceProcessLock, o as workspaceProcessLockError, r as releaseBrowserPort, s as workspaceProcessLockPath } from "./named-ports-C2lvoPsb.mjs";
+import { _ as removeSingletonFiles, c as webClaimRoot, f as webProfileDir, g as liveProfileHolder, h as chromeProcessState, i as clearWebRecord, o as readWebRecord, t as CDP_PORT_LABEL, u as webFacts } from "./state-DI84A-uu.mjs";
+import { t as agentDeviceDaemon, u as readAgentDeviceRecords } from "./activity-BrGh9EAI.mjs";
+import { E as resolveOwnedIosSim, O as shutdownIosSim, S as renameIosSim, c as eraseIosSim, o as deleteIosSim, p as listIosDeviceTypes, s as deleteParkedIosSim, v as parkedSimName, y as parseRuntimeVersion } from "./ios-CXLIUxXJ.mjs";
+import { a as macosRuntimeClaim, n as macosDir } from "./state-Boo0IMJq.mjs";
 import { closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { basename as basename$1, isAbsolute as isAbsolute$1, join as join$1, relative as relative$1, resolve as resolve$1 } from "path";
-import { buildSlotsDir, hostedNativeRecords, isJsonObject, macosAppState, parseHostedNativePlacement, readJsonFile, readMacosRecord, tryAcquireBuildSlotClaim, unreadableHostedNative } from "@stim-cli/core/state";
+import { buildSlotsDir, hostedNativeRecords, isJsonObject, macosAppState, parseHostedNativePlacement, readJsonFile, readMacosRecord, requireAutomaticMachine, tryAcquireBuildSlotClaim, unreadableHostedNative } from "@stim-cli/core/state";
+import { existsSync as existsSync$1, lstatSync as lstatSync$1, readdirSync as readdirSync$1, realpathSync as realpathSync$1, rmSync as rmSync$1, statSync as statSync$1 } from "fs";
+import { createHash, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
 import chalk from "chalk";
 import { isDeepStrictEqual } from "node:util";
-import { existsSync as existsSync$1, lstatSync as lstatSync$1, readdirSync as readdirSync$1, realpathSync as realpathSync$1, rmSync as rmSync$1, statSync as statSync$1 } from "fs";
-import { createHash, randomUUID } from "node:crypto";
 import { resolve4 } from "node:dns/promises";
 import { request } from "node:https";
-//#region src/commands/gc/paths.ts
-function canonicalPath(p) {
-	try {
-		return realpathSync$1(p);
-	} catch {
-		return resolve$1(p);
-	}
-}
-//#endregion
-//#region src/commands/gc/results.ts
-const results = [];
-function recordGcResult(kind, status, label, { id = null, bytes = null, detail = null } = {}) {
-	results.push({
-		kind,
-		status,
-		label,
-		id,
-		bytes,
-		detail
-	});
-}
-function takeGcResults() {
-	return results.splice(0);
-}
-//#endregion
 //#region src/engine/build-slots.ts
 const SLOT_PREFIX = "slot-";
 const SLOT_POLL_MS = 1e3;
@@ -101,7 +75,8 @@ function tryAcquireBuildSlot({ max, root = null, logFile = null }) {
 function slotWaitingLine({ max, elapsedMs }) {
 	return `${"build".padEnd(11)} waiting for a build slot (all ${max} in use, ${formatElapsed(elapsedMs)} elapsed) -- stim guide lifecycle concurrency`;
 }
-async function acquireBuildSlot({ max, root = null, logFile = null, now = Date.now, out = () => {}, waitingFor = () => {}, sleep = sleepAsync$1, intervalMs = SLOT_POLL_MS, progressMs = SLOT_PROGRESS_MS, ceilingMs = SLOT_CEILING_MS }) {
+async function acquireBuildSlot({ max, root = null, logFile = null, now = Date.now, out = () => {}, waitingFor = () => {}, sleep = sleepAsync$1, intervalMs = SLOT_POLL_MS, progressMs = SLOT_PROGRESS_MS, ceilingMs = SLOT_CEILING_MS, automatic = false }) {
+	if (automatic) requireAutomaticMachine("build", "local");
 	if (!max || max <= 0) return {
 		acquired: true,
 		unlimited: true
@@ -111,6 +86,7 @@ async function acquireBuildSlot({ max, root = null, logFile = null, now = Date.n
 	let waited = false;
 	try {
 		for (;;) {
+			if (automatic) requireAutomaticMachine("build", "local");
 			const got = tryAcquireBuildSlot({
 				max,
 				root,
@@ -187,1285 +163,1389 @@ function listBuildSlots() {
 	return slots;
 }
 //#endregion
-//#region src/devices/agent-device-cleanup.ts
-function parseAgentDeviceSessions(output) {
-	const result = JSON.parse(output);
-	if (result?.success !== true || !Array.isArray(result.data?.sessions)) throw new Error("agent-device did not return a successful session list");
-	return result.data.sessions.flatMap((entry) => {
-		if (!entry || typeof entry !== "object") return [];
-		const row = entry;
-		const id = row.platform === "ios" ? row.device_udid : row.id;
-		if (row.platform !== "ios" && row.platform !== "android" || typeof row.name !== "string" || !row.name.trim() || typeof id !== "string" || !id || typeof row.createdAt !== "number" || !Number.isFinite(row.createdAt) || row.platform === "ios" && row.id !== void 0 && row.id !== id) return [];
-		return [{
-			name: typeof row.address === "string" && row.address.trim() ? row.address : row.name,
-			platform: row.platform,
-			id,
-			device: typeof row.device === "string" ? row.device : null,
-			createdAt: row.createdAt
-		}];
-	});
+//#region src/supervisor/ownership.ts
+function resolveSupervisorTarget({ state, record, reservedPort, isAlive = pidExists, inspectIdentity = process_identity_exports.inspectProcessIdentity } = {}) {
+	const statePid = numberOrNull(state?.pid);
+	const recordPid = numberOrNull(record?.pid);
+	const pid = statePid ?? recordPid;
+	if (!pid) return { status: "none" };
+	if (statePid && recordPid && statePid !== recordPid) return {
+		status: "unverified",
+		pid,
+		reason: `workspace state.json records supervisor pid ${statePid} but the registry records pid ${recordPid}`
+	};
+	if (!isAlive(pid)) return {
+		status: "stale",
+		pid
+	};
+	const port = numberOrNull(state?.port) ?? numberOrNull(record?.port);
+	if (reservedPort !== null && reservedPort !== void 0 && port !== null && port !== reservedPort) return {
+		status: "unverified",
+		pid,
+		reason: `supervisor pid ${pid} records port ${port}, but this project reserved port ${reservedPort}`
+	};
+	if (reservedPort !== null && reservedPort !== void 0 && port === null) return {
+		status: "unverified",
+		pid,
+		reason: `supervisor pid ${pid} has no recorded port, so it cannot be matched against reserved port ${reservedPort}`
+	};
+	const identityRecord = statePid ? state : record;
+	if (statePid && recordPid && state?.processToken !== record?.processToken) return {
+		status: "unverified",
+		pid,
+		reason: "workspace state and registry process identities disagree"
+	};
+	const identity = inspectIdentity(identityRecord);
+	if (identity === "gone" || identity === "different") return {
+		status: "stale",
+		pid
+	};
+	if (identity !== "same") return {
+		status: "unverified",
+		pid,
+		reason: "the recorded process identity could not be verified"
+	};
+	return {
+		status: "ours",
+		processToken: identityRecord.processToken,
+		pid,
+		port,
+		mode: state?.mode ?? record?.mode ?? null,
+		startedAt: state?.startedAt ?? record?.startedAt ?? null
+	};
 }
-function isOwnDeviceSession(session, device, owner) {
-	if (session.platform !== device.platform || device.id !== null && session.id !== device.id) return false;
-	if (device.platform === "android" && session.device !== device.avdName.replaceAll("_", " ")) return false;
-	if (!owner) return true;
-	return owner.claims.some((claim) => claim.deviceId === session.id && claim.session === session.name && claim.workspace !== null && (within(owner.workspace, claim.workspace) || claim.workspace === owner.repoRoot));
+function numberOrNull(v) {
+	return typeof v === "number" && Number.isSafeInteger(v) && v > 0 ? v : null;
 }
-function within(root, path) {
-	const rest = relative(root, path);
-	return rest === "" || !isAbsolute(rest) && rest.split(sep)[0] !== "..";
+//#endregion
+//#region src/engine/public-http-probe.ts
+const DNS_TIMEOUT_MS = 5e3;
+async function resolveAddresses(hostname, signal) {
+	if (signal.aborted) throw signal.reason;
+	let timer;
+	let onAbort;
+	const unavailable = new Promise((_resolve, reject) => {
+		onAbort = () => reject(signal.reason);
+		signal.addEventListener("abort", onAbort, { once: true });
+		if (signal.aborted) onAbort();
+		else timer = setTimeout(() => reject(/* @__PURE__ */ new Error("DNS lookup timed out")), DNS_TIMEOUT_MS);
+	});
+	try {
+		return await Promise.race([resolve4(hostname), unavailable]);
+	} finally {
+		clearTimeout(timer);
+		if (onAbort) signal.removeEventListener("abort", onAbort);
+	}
 }
-function canonical(path) {
+async function probePublicHttp(url, signal) {
 	try {
-		return realpathSync(path);
+		return (await fetch(url, {
+			signal,
+			redirect: "follow"
+		})).status;
+	} catch (error) {
+		const cause = error?.cause;
+		if (cause?.code !== "ENOTFOUND" && cause?.code !== "EAI_AGAIN") return null;
+	}
+	const hostname = new URL(url).hostname;
+	if (!hostname.endsWith(".trycloudflare.com")) return null;
+	let addresses;
+	try {
+		addresses = await resolveAddresses(hostname, signal);
 	} catch {
 		return null;
 	}
+	const firstAddress = addresses[0];
+	if (!firstAddress) return null;
+	return new Promise((resolve) => {
+		const request$1 = request(url, {
+			signal,
+			lookup: (_hostname, options, callback) => {
+				if (options.all) callback(null, addresses.map((address) => ({
+					address,
+					family: 4
+				})));
+				else callback(null, firstAddress, 4);
+			}
+		}, (response) => {
+			response.resume();
+			resolve(response.statusCode ?? null);
+		});
+		request$1.on("error", () => resolve(null));
+		request$1.end();
+	});
 }
-function deviceClaims(device) {
-	return readAgentDeviceRecords(homedir()).filter((record) => record.kind === "claim" && (device.id === null || record.deviceId === device.id)).map((record) => ({
-		deviceId: record.deviceId,
-		session: record.session,
-		workspace: record.workspace && canonical(record.workspace)
-	}));
+//#endregion
+//#region src/engine/tunnel.ts
+function tunnelArgv(provider, port, ngrokUrl, logFile, tailscaleBinary = "tailscale") {
+	if (provider === "tailscale") return {
+		bin: tailscaleBinary,
+		args: [
+			"serve",
+			`--https=${port}`,
+			`http://127.0.0.1:${port}`
+		]
+	};
+	if (provider === "cloudflared") return {
+		bin: "cloudflared",
+		args: [
+			"tunnel",
+			"--url",
+			`http://127.0.0.1:${port}`,
+			...logFile ? ["--logfile", logFile] : []
+		]
+	};
+	return {
+		bin: "ngrok",
+		args: [
+			"http",
+			String(port),
+			`--log=${logFile || "stdout"}`,
+			"--log-format=json",
+			...ngrokUrl ? ["--url", ngrokUrl] : []
+		]
+	};
 }
-function explainFailure(error) {
-	const stdout = error?.stdout;
-	let failure;
+const CLOUDFLARED_URL_RE = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/i;
+function parseCloudflaredLine(line) {
+	const match = line.match(CLOUDFLARED_URL_RE);
+	return match ? match[0] : null;
+}
+function parseNgrokLine(line) {
+	let data;
 	try {
-		failure = typeof stdout === "string" ? JSON.parse(stdout)?.error : void 0;
+		data = JSON.parse(line);
 	} catch {
-		failure = void 0;
+		return null;
 	}
-	if (typeof failure?.message !== "string" || !failure.message) return error;
-	const reason = typeof failure.details?.reason === "string" ? ` (${failure.details.reason})` : "";
-	return /* @__PURE__ */ new Error(`agent-device refused: ${failure.message}${reason}`);
+	if (typeof data !== "object" || data === null) return null;
+	const url = data.url;
+	return typeof url === "string" && /^https?:\/\//i.test(url) ? url : null;
 }
-function report(message) {
-	process.stderr.write(`${phaseLine("device", message)}\n`);
+function parseTailscaleLine(line) {
+	return /^https:\/\/[^\s/]+\.ts\.net(:\d+)?\/?$/.test(line) ? line : null;
 }
-function closeOwnedDeviceSessions(device, stillOwned, workspace, repoRoot) {
-	const exec = getExecutor();
-	try {
-		if (!exec.findExecutable("agent-device")) return;
-		const root = workspace === void 0 ? void 0 : canonical(workspace);
-		if (root === null) return;
-		const owner = root === void 0 ? void 0 : {
-			workspace: root,
-			repoRoot: repoRoot && (canonical(repoRoot) ?? void 0),
-			claims: deviceClaims(device)
-		};
-		const stateDir = root === void 0 ? void 0 : workspaceAgentDeviceDir(root);
-		const stateDirs = [void 0, ...stateDir && !["none", "dead"].includes(agentDeviceDaemon(stateDir)) ? [stateDir] : []];
-		for (const dir of stateDirs) {
-			const deadline = Date.now() + 15e3;
-			const run = (args) => {
-				const remaining = deadline - Date.now();
-				if (remaining <= 0) throw new Error("agent-device cleanup timed out");
-				try {
-					return exec.runFile("agent-device", [
-						...args,
-						...dir ? ["--state-dir", dir] : [],
-						"--json",
-						"--daemon-transport",
-						"socket"
-					], {
-						timeoutMs: Math.min(5e3, remaining),
-						killSignal: "SIGKILL"
-					});
-				} catch (error) {
-					throw explainFailure(error);
-				}
-			};
-			const list = () => parseAgentDeviceSessions(run([
-				"session",
-				"list",
-				"--session",
-				"stim-teardown-inventory"
-			]));
-			try {
-				const sessions = list().filter((session) => isOwnDeviceSession(session, device, owner));
-				for (const session of sessions) try {
-					if (!list().some((current) => current.name === session.name && current.platform === session.platform && current.id === session.id && current.createdAt === session.createdAt)) continue;
-					if (!stillOwned(session.id)) continue;
-					if (JSON.parse(run([
-						"close",
-						"--session",
-						session.name,
-						"--session-lock",
-						"reject",
-						"--platform",
-						device.platform,
-						device.platform === "ios" ? "--udid" : "--serial",
-						session.id
-					]))?.success !== true) throw new Error("agent-device did not confirm session close");
-					report(`closed agent-device session ${session.name} on ${session.id}`);
-				} catch (error) {
-					report(`could not close agent-device session ${session.name} on ${session.id}: ${error.message}`);
-				}
-			} catch (error) {
-				report(`could not list agent-device sessions for ${device.platform === "ios" ? device.id : device.id ?? device.avdName}: ${error.message}`);
-			}
-		}
-	} catch (error) {
-		report(`could not list agent-device sessions for ${device.platform === "ios" ? device.id : device.id ?? device.avdName}: ${error.message}`);
-	}
+function parserFor(provider) {
+	if (provider === "tailscale") return parseTailscaleLine;
+	return provider === "cloudflared" ? parseCloudflaredLine : parseNgrokLine;
 }
-//#endregion
-//#region src/devices/teardown.ts
-function teardownParkedAvd(avdName) {
-	try {
-		return removeParkedAfter("android", avdName, () => {
-			const result = teardownOwnedAvd(avdName, {
-				del: true,
-				owner: { pool: true }
-			});
-			if (result.status !== "torn-down" && result.status !== "missing") throw new Error(result.reason);
-		}) ? {
-			status: "torn-down",
-			label: avdName
-		} : {
-			status: "skipped",
-			kind: "not-parked",
-			reason: "emulator is no longer parked"
-		};
-	} catch (error) {
-		return {
-			status: "failed",
-			reason: String(error?.message || error)
-		};
-	}
+const URL_TIMEOUT_MS = 15e3;
+const REACHABLE_TIMEOUT_MS = 24e4;
+const REACHABLE_POLL_MS = 2e3;
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function withManagedTunnelLock(root, fn, options = {}) {
+	return withWorkspaceProcessLock(managedTunnelLockRoot(root), "metro-tunnel", fn, {
+		...options,
+		rejectOwnerPurposes: ["workspace removal"]
+	});
 }
-function teardownParkedIosSim(udid, { label, deleteSim = deleteParkedIosSim } = {}) {
-	try {
-		const removed = removeParkedAfter("ios", udid, () => {
-			closeOwnedDeviceSessions({
-				platform: "ios",
-				id: udid
-			}, () => Boolean(resolveOwnedIosSim(udid).sim));
-			deleteSim(udid);
-		});
-		if (!removed) return {
-			status: "skipped",
-			kind: "not-parked",
-			reason: "simulator is no longer parked"
-		};
-		return {
-			status: "torn-down",
-			label: label ?? removed.name
-		};
-	} catch (error) {
-		return {
-			status: "failed",
-			reason: String(error?.message || error)
-		};
+async function withManagedTunnelRemovalLock(root, fn, options = {}) {
+	return withWorkspaceProcessLock(managedTunnelLockRoot(root), "metro-tunnel", fn, {
+		...options,
+		ownerPurpose: "workspace removal"
+	});
+}
+async function withManagedRemoteWorktreeLock(worktreeRoot, fn, options = {}) {
+	return withWorkspaceProcessLock(managedRemoteWorktreeLockRoot(worktreeRoot), "managed-remote", fn, {
+		...options,
+		external: true,
+		rejectOwnerPurposes: ["worktree removal"]
+	});
+}
+async function withManagedRemoteWorktreeRemovalLock(worktreeRoot, fn, options = {}) {
+	return withWorkspaceProcessLock(managedRemoteWorktreeLockRoot(worktreeRoot), "managed-remote", fn, {
+		...options,
+		external: true,
+		ownerPurpose: "worktree removal"
+	});
+}
+function managedLockHolders(root) {
+	const locks = [{
+		label: "managed tunnel",
+		path: workspaceProcessLockPath(managedTunnelLockRoot(root), "metro-tunnel", false)
+	}, {
+		label: "managed remote",
+		path: workspaceProcessLockPath(managedRemoteWorktreeLockRoot(root), "managed-remote", true)
+	}];
+	const reasons = [];
+	for (const { label, path } of locks) {
+		const claims = (0, ownership_claim_exports.readClaimSet)(path);
+		const holder = claims.live[0];
+		if (holder) {
+			const purpose = typeof holder.details.purpose === "string" ? ` for ${holder.details.purpose}` : "";
+			reasons.push(`the ${label} lock is held${purpose}`);
+		} else if (claims.unresolved[0]) reasons.push(`the ${label} lock cannot be resolved: ${claims.unresolved[0].reason}`);
 	}
+	return reasons;
 }
-function eraseParkedIosSim(udid, { label } = {}) {
-	try {
-		const erased = eraseParkedAfter("ios", udid, (_record, eraseStarted) => {
-			closeOwnedDeviceSessions({
-				platform: "ios",
-				id: udid
-			}, () => Boolean(resolveOwnedIosSim(udid).sim));
-			const resolved = resolveOwnedIosSim(udid);
-			if (resolved.missing) throw new Error(`simulator ${udid} is not on this machine`);
-			if (resolved.notOwned) throw new Error(`simulator ${udid} is now named ${JSON.stringify(resolved.notOwned)}`);
-			const state = resolved.sim.state;
-			if (state !== "Shutdown") throw new Error(`simulator ${udid} is ${state}, not Shutdown; it was kept`);
-			eraseStarted();
-			eraseIosSim(udid);
-		});
-		if (!erased) return {
-			status: "skipped",
-			kind: "not-parked",
-			reason: "simulator is no longer parked"
+function managedTunnelLockRoot(root) {
+	const key = createHash("sha256").update(resolve(root)).digest("hex");
+	return join(getConfigDir(), "process-locks", key);
+}
+function managedRemoteWorktreeLockRoot(worktreeRoot) {
+	const key = createHash("sha256").update(resolve(worktreeRoot)).digest("hex");
+	return join(getConfigDir(), "process-locks", "worktrees", key);
+}
+async function defaultProbeReachable(url, signal) {
+	const status = await probePublicHttp(url, signal);
+	return status !== null && status > 0;
+}
+function waitForUrl(child, parseLine, timeoutMs) {
+	return new Promise((resolve) => {
+		let settled = false;
+		let lastLine = null;
+		let timer;
+		let onOut;
+		let onErr;
+		let onError;
+		let onExit;
+		const finish = (url, exited = false) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			child.stdout?.removeListener("data", onOut);
+			child.stderr?.removeListener("data", onErr);
+			child.removeListener("error", onError);
+			child.removeListener("exit", onExit);
+			resolve({
+				url,
+				exited,
+				lastLine
+			});
 		};
-		return {
-			status: "torn-down",
-			label: label ?? erased.name
+		const onLine = (line) => {
+			if (settled) return;
+			if (line.trim()) lastLine = line.trim();
+			const url = parseLine(line);
+			if (url) finish(url);
 		};
-	} catch (error) {
-		return {
-			status: "failed",
-			reason: String(error?.message || error)
+		const outReader = createLineReader(onLine);
+		const errReader = createLineReader(onLine);
+		onOut = (chunk) => outReader.push(chunk);
+		onErr = (chunk) => errReader.push(chunk);
+		onError = () => finish(null);
+		onExit = () => {
+			outReader.flush();
+			errReader.flush();
+			finish(null, true);
 		};
-	}
+		child.stdout?.setEncoding?.("utf-8");
+		child.stderr?.setEncoding?.("utf-8");
+		child.stdout?.on("data", onOut);
+		child.stderr?.on("data", onErr);
+		child.on("error", onError);
+		child.on("exit", onExit);
+		timer = setTimeout(() => finish(null), timeoutMs);
+	});
 }
-function eraseParkedAvd(avdName) {
-	try {
-		return eraseParkedAfter("android", avdName, (_record, eraseStarted) => {
-			if (resolveOwnedAvdSerial(avdName).serial) throw new Error(`AVD ${avdName} is running; it was kept`);
-			const result = teardownOwnedAvd(avdName, {
-				wipe: true,
-				owner: { pool: true },
-				onWipeStart: eraseStarted
+function waitForFileUrl(child, logFile, parseLine, timeoutMs) {
+	return new Promise((resolve) => {
+		let settled = false;
+		const finish = (url, exited = false) => {
+			if (settled) return;
+			settled = true;
+			clearInterval(interval);
+			clearTimeout(timer);
+			child.removeListener("error", onError);
+			child.removeListener("exit", onExit);
+			resolve({
+				url,
+				exited
 			});
-			if (result.status !== "torn-down") throw new Error(result.reason ?? `AVD ${avdName} is ${result.status}`);
-		}) ? {
-			status: "torn-down",
-			label: avdName
-		} : {
-			status: "skipped",
-			kind: "not-parked",
-			reason: "emulator is no longer parked"
 		};
-	} catch (error) {
-		return {
-			status: "failed",
-			reason: String(error?.message || error)
+		const probe = () => {
+			try {
+				for (const line of readFileSync(logFile, "utf-8").split(/\r?\n/)) {
+					const url = parseLine(line);
+					if (url) return finish(url);
+				}
+			} catch {}
 		};
-	}
-}
-const IOS_SHUTDOWN_SETTLE_MS = 15e3;
-const ADB_RELEASE_WAIT_MS = 3e3;
-function repoRootAbove(workspace) {
-	if (workspace === void 0 || !getExecutor().findExecutable("agent-device")) return void 0;
-	const root = repoRoot(workspace);
-	try {
-		return root && realpathSync(root) !== realpathSync(workspace) ? root : void 0;
-	} catch {
-		return;
-	}
+		const onError = () => finish(null);
+		const onExit = () => finish(null, true);
+		child.on("error", onError);
+		child.on("exit", onExit);
+		const interval = setInterval(probe, 25);
+		const timer = setTimeout(() => finish(null), timeoutMs);
+		probe();
+	});
 }
-const IOS_SHUTDOWN_POLL_MS = 250;
-const IOS_SHUTDOWN_ATTEMPTS = 2;
-function settleIosSimShutdown(udid, { now = Date.now, sleep = sleepSync }) {
-	let resolved = resolveOwnedIosSim(udid);
-	for (let attempt = 1;; attempt++) {
-		const deadline = now() + IOS_SHUTDOWN_SETTLE_MS;
-		while (resolved.sim && resolved.sim.state !== "Shutdown" && now() < deadline) {
-			sleep(IOS_SHUTDOWN_POLL_MS);
-			resolved = resolveOwnedIosSim(udid);
-		}
-		if (!resolved.sim || resolved.sim.state === "Shutdown" || attempt === IOS_SHUTDOWN_ATTEMPTS) return resolved;
-		shutdownIosSim(udid);
-		resolved = resolveOwnedIosSim(udid);
-	}
+function createTunnelLogFile(provider) {
+	const dir = join(getConfigDir(), "tunnel-logs");
+	mkdirSync(dir, { recursive: true });
+	const path = join(dir, `${provider}-${randomUUID()}.log`);
+	closeSync(openSync(path, "wx", 384));
+	return path;
 }
-function iosShutdownFailureReason(udid, state) {
-	return `simulator ${udid} is still ${state} after ${IOS_SHUTDOWN_ATTEMPTS} shutdown attempts and ${IOS_SHUTDOWN_ATTEMPTS * IOS_SHUTDOWN_SETTLE_MS / 1e3}s of waiting`;
+function removeTunnelLogFile(path) {
+	if (!path) return;
+	try {
+		unlinkSync(path);
+	} catch {}
 }
-function parkOwnedIosSim(settled, udid, park) {
-	if (settled.missing) throw new Error(`simulator ${udid} disappeared after shutdown`);
-	if (settled.notOwned) throw new Error(`simulator ${udid} is now named ${JSON.stringify(settled.notOwned)}`);
-	const sim = settled.sim;
-	if (sim.state !== "Shutdown") throw new Error(iosShutdownFailureReason(udid, sim.state));
-	const model = listIosDeviceTypes().find((d) => d.identifier === sim.deviceTypeIdentifier)?.name ?? null;
-	const runtime = parseRuntimeVersion(sim.runtime);
-	const name = parkedSimName(sim.udid, {
-		model,
-		runtime
-	});
-	renameIosSim(sim.udid, name);
-	const record = {
-		udid: sim.udid,
-		name,
-		deviceTypeIdentifier: sim.deviceTypeIdentifier,
-		runtimeIdentifier: sim.runtime,
-		parkedAt: (/* @__PURE__ */ new Date()).toISOString(),
-		simslimManaged: Boolean(park.simslimManaged),
-		...park.appId ? { bundleId: park.appId } : {},
-		...park.cacheKey ? { cacheKey: park.cacheKey } : {}
-	};
-	return {
-		record,
-		evicted: parkSim({
-			platform: "ios",
-			projectPath: park.projectPath,
-			slot: park.slot,
-			record,
-			max: park.max
-		})
-	};
+function removeRecordedTunnelLogFile(path) {
+	if (!path) return;
+	const dir = resolve(join(getConfigDir(), "tunnel-logs"));
+	const resolved = resolve(path);
+	if (!resolved.startsWith(`${dir}${sep}`) || resolve(join(dir, basename(resolved))) !== resolved) return;
+	removeTunnelLogFile(resolved);
 }
-function teardownOwnedIosSim(udid, { del = false, label, park, workspace, shutdownClock = {} } = {}) {
-	let parkFallback;
+async function waitUntilReachable({ url, now, sleep, probe, timeoutMs }) {
+	const deadline = now() + timeoutMs;
+	for (;;) {
+		if (await probe(url, new AbortController().signal).catch(() => false)) return true;
+		if (now() >= deadline) return false;
+		await sleep(REACHABLE_POLL_MS);
+	}
+}
+const CLEANUP_TIMEOUT_MS = 1e3;
+const CLEANUP_POLL_MS = 25;
+async function startTunnel({ provider, port, spawnFn = null, urlTimeoutMs = URL_TIMEOUT_MS, reachableTimeoutMs = REACHABLE_TIMEOUT_MS, probeReachable = defaultProbeReachable, now = Date.now, sleep = defaultSleep, ngrokUrl = null, requireReachable = true, cleanupTimeoutMs = CLEANUP_TIMEOUT_MS, isChildAlive = pidExists, readProcessToken = process_identity_exports.captureProcessToken, logFile = null }) {
+	const spawn = spawnFn || ((cmd, args, opts) => getExecutor().spawn(cmd, args, opts));
+	const outputFile = provider === "tailscale" ? null : logFile || (spawnFn ? null : createTunnelLogFile(provider));
+	let child;
 	try {
-		const resolved = resolveOwnedIosSim(udid);
-		if (resolved.notOwned) return {
-			status: "skipped",
-			kind: "not-owned",
-			reason: `sim "${resolved.notOwned}" is not Stim-owned: Stim has no record of creating it`
-		};
-		if (resolved.missing) return { status: "missing" };
-		closeOwnedDeviceSessions({
-			platform: "ios",
-			id: udid
-		}, () => Boolean(resolveOwnedIosSim(udid).sim), workspace);
-		const current = resolveOwnedIosSim(udid);
-		if (current.missing) return { status: "missing" };
-		if (current.notOwned) return {
-			status: "skipped",
-			kind: "not-owned",
-			reason: "simulator ownership changed before shutdown"
-		};
-		shutdownIosSim(udid);
-		const sim = resolved.sim;
-		if (del && park && park.max > 0) try {
-			const { record, evicted } = parkOwnedIosSim(settleIosSimShutdown(udid, shutdownClock), udid, park);
-			const removed = [];
-			const failures = [];
-			for (const entry of evicted) {
-				const result = teardownParkedIosSim(entry.udid, { label: entry.name });
-				if (result.status === "torn-down") removed.push({
-					udid: entry.udid,
-					name: entry.name
-				});
-				else if (result.status === "failed") failures.push(`could not delete evicted ${entry.name} (${entry.udid}): ${result.reason}`);
-			}
-			return {
-				status: "torn-down",
-				label: label ?? sim.name ?? udid,
-				parked: {
-					udid: record.udid,
-					name: record.name
-				},
-				evicted: removed,
-				...failures.length ? { evictionFailures: failures } : {}
-			};
-		} catch (e) {
-			parkFallback = String(e?.message || e);
-		}
-		if (del) {
-			deleteIosSim(udid);
-			return {
-				status: "torn-down",
-				label: label ?? sim.name ?? udid,
-				...parkFallback ? { parkFallback } : {}
-			};
-		}
-		const settled = settleIosSimShutdown(udid, shutdownClock);
-		if (settled.sim && settled.sim.state !== "Shutdown") return {
-			status: "failed",
-			label: label ?? sim.name ?? udid,
-			reason: iosShutdownFailureReason(udid, settled.sim.state)
-		};
-		const root = sim.state === "Shutdown" ? void 0 : repoRootAbove(workspace);
-		if (root && settled.sim) closeOwnedDeviceSessions({
-			platform: "ios",
-			id: udid
-		}, () => resolveOwnedIosSim(udid).sim?.state === "Shutdown", workspace, root);
+		const binary = provider === "tailscale" ? resolveTailscaleBinary((bin) => getExecutor().findExecutable(bin)) : provider;
+		if (!binary) throw new Error("Install Tailscale and sign in to your tailnet.");
+		const { bin, args } = tunnelArgv(provider, port, ngrokUrl, outputFile, binary);
+		child = spawn(bin, args, {
+			stdio: outputFile ? [
+				"ignore",
+				"ignore",
+				"ignore"
+			] : [
+				"ignore",
+				"pipe",
+				"pipe"
+			],
+			detached: true
+		});
+	} catch (err) {
+		removeTunnelLogFile(outputFile);
 		return {
-			status: "torn-down",
-			label: label ?? sim.name ?? udid
+			failed: true,
+			reason: `Could not start ${provider}: ${describe(err)}`
 		};
-	} catch (e) {
-		return {
+	}
+	let childExited = false;
+	child.once("exit", () => {
+		childExited = true;
+	});
+	const cleanup = async (alreadyExited = childExited) => {
+		const stopped = await terminateChild(child, {
+			alreadyExited,
+			timeoutMs: cleanupTimeoutMs,
+			now,
+			sleep,
+			isAlive: isChildAlive
+		});
+		if (stopped) removeTunnelLogFile(outputFile);
+		return stopped ? { status: "stopped" } : {
 			status: "failed",
-			reason: String(e?.message || e),
-			...parkFallback ? { parkFallback } : {}
+			reason: `Sent SIGKILL but could not confirm that pid ${child.pid ?? "unknown"} exited.`
 		};
-	}
-}
-function assertAvdReferences(avdName, owner) {
-	const config = loadConfig$1();
-	if (!config) throw new Error("Cannot verify AVD references without a Stim config; the data was kept.");
-	if (owner && "projectPath" in owner && owner.expectedRecord && !isDeepStrictEqual(deviceSlotPlatforms(config.projects[owner.projectPath], owner.slot)?.android, owner.expectedRecord)) throw new Error(`AVD ${avdName} has a changed workspace record; its data was kept.`);
-	for (const [projectPath, project] of Object.entries(config.projects)) for (const { slot, platforms } of projectDeviceSlots(project)) {
-		if (platforms.android?.avdName?.toLowerCase() !== avdName.toLowerCase()) continue;
-		if (!owner || !("projectPath" in owner) || owner.projectPath !== projectPath || (owner.slot ?? "default") !== slot || !platforms.android.owned) throw new Error(`AVD ${avdName} is referenced by ${projectPath} (${slot}); its data was kept.`);
-	}
-	if (readParked("android", { config }).some((entry) => entry.name.toLowerCase() === avdName.toLowerCase()) && !(owner && "pool" in owner)) throw new Error(`AVD ${avdName} is in the emulator pool; its data was kept.`);
-}
-function removeOrphanedAvdDirectory(candidate, owner) {
-	const surveyed = listOrphanedAvdDirectories(candidate.name).find((entry) => entry.directory === candidate.directory);
-	if (!surveyed || surveyed.name !== candidate.name || surveyed.dev !== candidate.dev || surveyed.ino !== candidate.ino) throw new Error(`AVD data at ${candidate.directory} changed or is registered; it was kept.`);
-	assertOwnedAvdStopped(candidate.name, { resolveDirectory: () => candidate.directory });
-	const detached = withConfigLock$1(() => {
-		const current = lstatSync(candidate.directory);
-		if (!current.isDirectory() || current.dev !== candidate.dev || current.ino !== candidate.ino) throw new Error(`AVD data at ${candidate.directory} changed or is registered; it was kept.`);
-		assertAvdReferences(candidate.name, owner);
-		const name = `stim-gc-${randomUUID()}`;
-		recordCreatedDevice("android", name);
-		const destination = join(dirname(candidate.directory), `${name}.avd`);
+	};
+	const failAfterCleanup = async (reason, alreadyExited = childExited) => {
+		const stopped = await cleanup(alreadyExited);
+		return stopped.status === "stopped" ? {
+			failed: true,
+			reason
+		} : {
+			failed: true,
+			reason: `${reason} ${stopped.reason}`,
+			cleanupFailed: true
+		};
+	};
+	const pid = child.pid;
+	if (!pid) return failAfterCleanup(`${provider} started but reported no pid.`);
+	const captureChildIdentity = () => {
 		try {
-			renameSync(candidate.directory, destination);
-		} catch (error) {
-			forgetCreatedDevice("android", name);
-			throw error;
+			return readProcessToken(pid);
+		} catch {
+			return null;
 		}
-		forgetCreatedDevice("android", candidate.name);
-		return destination;
-	});
-	const current = lstatSync(detached);
-	if (!current.isDirectory() || current.dev !== candidate.dev || current.ino !== candidate.ino) throw new Error(`Detached AVD data changed at ${detached}; it was kept.`);
-	try {
-		rmSync(detached, { recursive: true });
-	} catch (error) {
-		throw new Error(`Could not remove AVD data at ${detached}; retry gc --delete: ${error.message}`, { cause: error });
-	}
-	forgetCreatedDevice("android", basename(detached, ".avd"));
-}
-function teardownUnregisteredAvd(avdName, del, owner, surveyed) {
-	const candidates = surveyed ? [surveyed] : listOrphanedAvdDirectories(avdName);
-	if (candidates.length === 0) {
-		if (avdStorageRoots().some((root) => avdPathExists(join(root, `${avdName}.ini`)) || avdPathExists(join(root, `${avdName}.avd`)))) throw new Error(`AVD ${avdName} is not listed but its storage remains; it was kept.`);
-		return { status: "missing" };
-	}
-	if (!del) return {
-		status: "skipped",
-		reason: "AVD registration is missing; its data was kept."
 	};
-	for (const candidate of candidates) {
-		if (candidate.name !== avdName) throw new Error(`AVD data does not match ${avdName}; it was kept.`);
-		removeOrphanedAvdDirectory(candidate, owner);
+	const initialProcessToken = captureChildIdentity();
+	if (!initialProcessToken) return failAfterCleanup(`${provider} started but its process identity token could not be read.`);
+	const { url, exited, lastLine } = outputFile ? await waitForFileUrl(child, outputFile, parserFor(provider), urlTimeoutMs) : await waitForUrl(child, parserFor(provider), urlTimeoutMs);
+	if (!url) return failAfterCleanup(exited ? provider === "tailscale" && lastLine ? `${provider} exited before printing a tunnel URL: ${lastLine}` : `${provider} exited before printing a tunnel URL.` : `${provider} did not print a tunnel URL within ${urlTimeoutMs}ms.`, exited || childExited);
+	if (!outputFile) resumeChildPipes(child);
+	if (requireReachable) {
+		if (!await waitUntilReachable({
+			url,
+			now,
+			sleep,
+			probe: probeReachable,
+			timeoutMs: reachableTimeoutMs
+		})) return failAfterCleanup(`${url} did not become reachable within ${reachableTimeoutMs}ms; ${provider} may still be registering, or the network path is blocked.`);
 	}
+	const finalProcessToken = captureChildIdentity();
+	if (!finalProcessToken || finalProcessToken !== initialProcessToken) return failAfterCleanup(`${provider} process identity changed before its tunnel could be recorded.`);
+	if (!outputFile) unrefChildPipes(child);
+	child.unref?.();
+	if (childExited) return failAfterCleanup(`${provider} exited before its tunnel could be recorded.`, true);
 	return {
-		status: "torn-down",
-		label: avdName
+		url,
+		pid,
+		processToken: initialProcessToken,
+		logFile: outputFile,
+		cleanup: () => cleanup()
 	};
 }
-function teardownOwnedAvd(avdName, options = {}) {
-	let claim;
-	try {
-		if (!isStimOwnedAvd(avdName)) return {
-			status: "skipped",
-			kind: "not-owned",
-			reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
+async function startTunnelSequence({ providers, port, ngrokUrl = null, requireReachable = true, start = startTunnel }) {
+	const failures = [];
+	for (const provider of providers) {
+		const result = await start({
+			provider,
+			port,
+			ngrokUrl: provider === "ngrok" ? ngrokUrl : null,
+			requireReachable
+		});
+		if (!("failed" in result)) return {
+			provider,
+			...result
 		};
-		claim = acquireAvdClaim(avdName);
-		const result = teardownClaimedAvd(avdName, claim, options);
-		if (result.status === "torn-down" || result.status === "missing") options.onRemoved?.();
-		return result;
-	} catch (error) {
-		return {
-			status: "failed",
-			reason: String(error?.message || error)
+		failures.push(`${provider}: ${result.reason}`);
+		if (result.cleanupFailed) return {
+			failed: true,
+			reason: failures.join(" ")
 		};
-	} finally {
-		(0, ownership_claim_exports.releaseClaim)(claim);
 	}
+	return {
+		failed: true,
+		reason: failures.join(" ") || "No managed tunnel provider was selected."
+	};
 }
-function serialFree(serial) {
-	const adb = listAdbDevices();
-	return ![
-		...adb.emulators,
-		...adb.physical,
-		...adb.unhealthy
-	].some((entry) => entry.serial === serial);
+function closeChildPipes(child) {
+	child.stdout?.destroy?.();
+	child.stderr?.destroy?.();
 }
-function teardownClaimedAvd(avdName, claim, { del = false, wipe = false, park, owner, workspace, orphanedDirectory, onlyIfMissing = false, onWipeStart, waitForShutdown = waitForAndroidEmulatorShutdown, assertStopped = assertOwnedAvdStopped, resolveAvd = resolveOwnedAvdSerial }) {
-	let parkFallback;
+function unrefChildPipes(child) {
+	resumeChildPipes(child);
+	for (const stream of [child.stdout, child.stderr]) stream?.unref?.();
+}
+function resumeChildPipes(child) {
+	child.stdout?.resume?.();
+	child.stderr?.resume?.();
+}
+async function signalAndWaitForExit(child, signal, { timeoutMs, now, sleep, isAlive, platform }) {
+	let exited = false;
+	const onExit = () => {
+		exited = true;
+	};
+	child.once("exit", onExit);
 	try {
-		if (del || wipe) withConfigLock$1(() => assertAvdReferences(avdName, owner));
-		const resolved = resolveAvd(avdName);
-		if (resolved.notOwned) return {
-			status: "skipped",
-			kind: "not-owned",
-			reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
-		};
-		if (resolved.missing) {
-			if (wipe) throw new Error(`AVD ${avdName} is not registered; its data was kept.`);
-			return teardownUnregisteredAvd(avdName, del, owner, orphanedDirectory);
-		}
-		if (onlyIfMissing) return {
-			status: "skipped",
-			reason: "AVD registration appeared; its record was kept."
-		};
-		if (orphanedDirectory) return {
-			status: "skipped",
-			reason: "AVD registration appeared; its data was kept."
-		};
-		const serial = resolved.serial;
-		const stillStopped = (sessionSerial) => {
-			const current = resolveAvd(avdName);
-			return !current.notOwned && !current.missing && !current.serial && serialFree(sessionSerial);
-		};
-		if (serial) {
-			const stillOwned = () => {
-				const current = resolveAvd(avdName);
-				return !current.notOwned && !current.missing && current.serial === serial;
-			};
-			closeOwnedDeviceSessions({
-				platform: "android",
-				id: serial,
-				avdName
-			}, stillOwned, workspace);
-			if (!stillOwned()) throw new Error(`Owned AVD ${avdName} changed before shutdown; it was kept.`);
-			waitForShutdown(avdName, (timeoutMs) => {
-				(0, ownership_claim_exports.markClaimChildPending)(claim);
-				try {
-					shutdownAndroidEmulator(serial, timeoutMs);
-				} finally {
-					(0, ownership_claim_exports.clearClaimChild)(claim);
-				}
-			});
-			const root = repoRootAbove(workspace);
-			if (root) {
-				const deadline = Date.now() + ADB_RELEASE_WAIT_MS;
-				while (!serialFree(serial) && Date.now() < deadline) sleepSync(250);
-				closeOwnedDeviceSessions({
-					platform: "android",
-					id: serial,
-					avdName
-				}, stillStopped, workspace, root);
-			}
-		} else {
-			closeOwnedDeviceSessions({
-				platform: "android",
-				id: null,
-				avdName
-			}, stillStopped, workspace);
-			waitForShutdown(avdName, null);
-		}
-		if (wipe && !del) {
-			const current = resolveAvd(avdName);
-			if (current.notOwned || current.missing) throw new Error(`AVD ${avdName} changed before its data was wiped.`);
-			if (current.serial) throw new Error(`Owned AVD ${avdName} started again before its data was wiped.`);
-			assertStopped(avdName);
-			withConfigLock$1(() => assertAvdReferences(avdName, owner));
-			const directory = ownedAvdDirectory(avdName);
-			if (!directory) throw new Error(`The data directory of AVD ${avdName} could not be resolved.`);
-			onWipeStart?.();
-			wipeAvdUserData(directory);
-		}
-		if (del) {
-			const current = resolveAvd(avdName);
-			if (current.notOwned) return {
-				status: "skipped",
-				kind: "not-owned",
-				reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
-			};
-			if (current.missing) return teardownUnregisteredAvd(avdName, del, owner);
-			if (current.serial) throw new Error(`Owned AVD ${avdName} started again before deletion.`);
-			assertStopped(avdName);
-			withConfigLock$1(() => assertAvdReferences(avdName, owner));
-			if (park && park.max > 0) try {
-				const systemImage = ownedAvdSystemImage(avdName);
-				if (!systemImage || !park.configuration || !ownedAvdMatchesConfiguration(avdName, park.configuration)) throw new Error("the AVD has no verified creation configuration");
-				const evicted = parkSim({
-					platform: "android",
-					projectPath: park.projectPath,
-					slot: park.slot,
-					max: park.max,
-					record: {
-						udid: avdName,
-						name: avdName,
-						systemImage,
-						configuration: park.configuration,
-						parkedAt: (/* @__PURE__ */ new Date()).toISOString(),
-						...park.appId ? { packageName: park.appId } : {},
-						...park.cacheKey ? { cacheKey: park.cacheKey } : {}
-					}
-				});
-				const removed = [];
-				const failures = [];
-				for (const entry of evicted) {
-					const result = teardownParkedAvd(entry.name);
-					if (result.status === "torn-down") removed.push({
-						udid: entry.name,
-						name: entry.name,
-						platform: "android"
-					});
-					else if (result.status === "failed") failures.push(`could not delete evicted ${entry.name}: ${result.reason}`);
-				}
-				return {
-					status: "torn-down",
-					label: avdName,
-					parked: {
-						udid: avdName,
-						name: avdName,
-						platform: "android"
-					},
-					evicted: removed,
-					...failures.length ? { evictionFailures: failures } : {}
-				};
-			} catch (error) {
-				parkFallback = String(error?.message || error);
-			}
-			const directory = ownedAvdDirectory(avdName);
-			const paths = avdStorageRoots().map((root) => join(root, `${avdName}.ini`));
-			if (directory) paths.push(directory);
-			(0, ownership_claim_exports.markClaimChildPending)(claim);
-			try {
-				deleteAvd(avdName);
-			} finally {
-				(0, ownership_claim_exports.clearClaimChild)(claim);
-			}
-			const remaining = paths.filter(avdPathExists);
-			if (remaining.length) throw new Error(`AVD ${avdName} was only partially deleted; data remains at ${remaining.join(", ")}.`);
-		}
-		return {
-			status: "torn-down",
-			label: avdName,
-			serial: resolved.serial ?? null,
-			...parkFallback ? { parkFallback } : {}
-		};
-	} catch (e) {
-		return {
-			status: "failed",
-			reason: String(e?.message || e)
-		};
+		if (platform === "win32" && child.pid) signalProcessTree(child.pid, signal, { platform });
+		child.kill(signal);
+	} catch (err) {
+		child.removeListener("exit", onExit);
+		return isEsrch(err);
 	}
+	const hasExited = () => exited;
+	const deadline = now() + timeoutMs;
+	while (!hasExited() && now() < deadline) await sleep(CLEANUP_POLL_MS);
+	if (!hasExited() && child.pid && !isAlive(child.pid)) exited = true;
+	child.removeListener("exit", onExit);
+	return hasExited();
 }
-const BROWSER_EXIT_WAIT_MS = 15e3;
-const CHROME_KILL_WAIT_MS = 5e3;
-async function stopOwnedChrome(record) {
-	for (const signal of ["SIGTERM", "SIGKILL"]) {
-		const state = chromeProcessState(record);
-		if (state === "gone") return true;
-		if (state === "unknown") return false;
-		try {
-			signalProcessTree(record.pid, signal, { group: true });
-		} catch {}
-		const deadline = Date.now() + CHROME_KILL_WAIT_MS;
-		while (chromeProcessState(record) !== "gone" && Date.now() < deadline) await sleepAsync(50);
+async function terminateChild(child, { alreadyExited, timeoutMs, now, sleep, isAlive, platform = process.platform }) {
+	if (alreadyExited) {
+		closeChildPipes(child);
+		return true;
+	}
+	if (await signalAndWaitForExit(child, "SIGTERM", {
+		timeoutMs,
+		now,
+		sleep,
+		isAlive,
+		platform
+	})) {
+		closeChildPipes(child);
+		return true;
 	}
-	return chromeProcessState(record) === "gone";
+	const killed = await signalAndWaitForExit(child, "SIGKILL", {
+		timeoutMs,
+		now,
+		sleep,
+		isAlive,
+		platform
+	});
+	closeChildPipes(child);
+	return killed;
 }
-const sleepAsync = (ms) => new Promise((done) => setTimeout(done, ms));
-/**
-* Closes the workspace's Stim-owned Chrome and its supervisor, after verifying both process identities. With
-* `deleteProfile`, it also deletes the profile directory, only when the created-devices ledger lists it.
-*/
-async function teardownOwnedBrowser(root, options = {}) {
+function describe(err) {
+	return err?.message || String(err);
+}
+const STOP_TIMEOUT_MS = 5e3;
+const STOP_POLL_MS = 100;
+function isEsrch(err) {
+	return err?.code === "ESRCH";
+}
+async function stopTunnel(record, { isAlive = pidExists, inspectIdentity = process_identity_exports.inspectProcessIdentity, platform = process.platform, kill = (pid) => signalProcessTree(pid, "SIGTERM", { platform }), now = Date.now, sleep = defaultSleep, timeoutMs = STOP_TIMEOUT_MS } = {}) {
+	const missing = () => {
+		removeRecordedTunnelLogFile(record?.logFile);
+		return { status: "missing" };
+	};
+	const pid = record?.pid;
+	if (!pid || !isAlive(pid)) return missing();
+	if (!record.processToken) return {
+		status: "failed",
+		reason: `tunnel pid ${pid} has no process identity token, so Stim cannot verify ownership. Keep the record. Inspect the process, stop it with the provider tooling, remove the stale metroTunnel state, and retry.`
+	};
+	const identity = inspectIdentity(record);
+	if (identity === "gone" || identity === "different") return missing();
+	if (identity !== "same") return {
+		status: "failed",
+		reason: `could not verify the process identity for tunnel pid ${pid}; refusing to signal it.`
+	};
 	try {
-		return await withWorkspaceProcessLock(workspaceDir(root), "web", () => teardownBrowserHeld(root, options), {
-			external: true,
-			ownerPurpose: "browser teardown"
-		});
-	} catch (error) {
-		return {
+		kill(pid);
+	} catch (err) {
+		return isEsrch(err) ? missing() : {
 			status: "failed",
-			reason: String(error?.message || error)
+			reason: describe(err)
 		};
 	}
+	const deadline = now() + timeoutMs;
+	const exited = () => {
+		if (!isAlive(pid)) return true;
+		const current = inspectIdentity(record);
+		return current === "gone" || current === "different";
+	};
+	while (now() < deadline && !exited()) await sleep(STOP_POLL_MS);
+	if (!exited()) return {
+		status: "failed",
+		reason: `pid ${pid} did not exit within ${timeoutMs}ms.`
+	};
+	removeRecordedTunnelLogFile(record.logFile);
+	return { status: "stopped" };
 }
-/** {@link teardownOwnedBrowser} for a caller that already holds the {@link BROWSER_LOCK} lock. */
-async function teardownBrowserHeld(root, { deleteProfile = false } = {}) {
+//#endregion
+//#region src/commands/gc/paths.ts
+function canonicalPath(p) {
 	try {
-		const record = readWebRecord(root);
-		const profile = record?.profile ?? webProfileDir(root);
-		if (record) {
-			const supervisor = (0, process_identity_exports.inspectProcessIdentity)(record);
-			const chrome = record.chromeProcess ? (0, process_identity_exports.inspectProcessIdentity)(record.chromeProcess) : "gone";
-			if (supervisor === "unknown" || chrome === "unknown") return {
-				status: "skipped",
-				kind: "not-verified",
-				reason: `the browser supervisor (pid ${record.pid}) or its Chrome could not be verified; its record was kept`
-			};
-			if (supervisor === "same") {
-				try {
-					process.kill(record.pid, "SIGTERM");
-				} catch {}
-				if (!await (0, process_identity_exports.waitForProcessExit)(record, BROWSER_EXIT_WAIT_MS)) return {
-					status: "failed",
-					reason: `browser supervisor pid ${record.pid} did not exit`
-				};
-			}
-			if (record.chromeProcess && !await stopOwnedChrome(record.chromeProcess)) return {
-				status: "failed",
-				reason: `Chrome pid ${record.chromeProcess.pid} did not exit`
-			};
-			const holder = liveProfileHolder(profile);
-			if (holder !== null) return {
-				status: "skipped",
-				kind: "not-verified",
-				reason: `pid ${holder} still holds ${profile}, and the browser record does not name it; it was left running`
-			};
-			const claims = (0, ownership_claim_exports.clearFreeClaimSet)({
-				root: webClaimRoot(root),
-				label: "browser supervisor"
-			});
-			if (claims.status !== "cleared") return {
-				status: "skipped",
-				kind: "not-verified",
-				reason: claims.status === "held" ? `the browser supervisor claim is still held${claims.holder ? ` by pid ${claims.holder.owner.pid}` : ""}` : `the browser supervisor claim could not be cleared (${claims.reason}); remove it with ${(0, ownership_claim_exports.claimRemoveCommand)(webClaimRoot(root))}`
-			};
-			clearWebRecord(root, record);
-			await releaseBrowserPort(root, record.cdpPort);
-		} else {
-			const holder = liveProfileHolder(profile);
-			if (holder !== null) return {
-				status: "skipped",
-				kind: "not-verified",
-				reason: `pid ${holder} holds ${profile} but no browser supervisor is recorded; it was left running`
-			};
-			const port = getProject(root)?.ports?.[CDP_PORT_LABEL];
-			if (typeof port === "number") await releaseBrowserPort(root, port);
-		}
-		if (existsSync(profile)) removeSingletonFiles(profile);
-		if (deleteProfile && existsSync(profile)) {
-			if (!readCreatedDevices$1().web.has(profile)) return {
-				status: "skipped",
-				kind: "not-owned",
-				reason: `${profile} is not in Stim's ledger; it was kept`
-			};
-			rmSync(profile, {
-				recursive: true,
-				force: true
-			});
-			forgetCreatedDevice("web", profile);
-		}
-		return record ? {
-			status: "torn-down",
-			label: `Chrome (${profile})`
-		} : { status: "missing" };
-	} catch (error) {
-		return {
-			status: "failed",
-			reason: String(error?.message || error)
-		};
+		return realpathSync$1(p);
+	} catch {
+		return resolve$1(p);
 	}
 }
 //#endregion
-//#region src/engine/public-http-probe.ts
-const DNS_TIMEOUT_MS = 5e3;
-async function resolveAddresses(hostname, signal) {
-	if (signal.aborted) throw signal.reason;
-	let timer;
-	let onAbort;
-	const unavailable = new Promise((_resolve, reject) => {
-		onAbort = () => reject(signal.reason);
-		signal.addEventListener("abort", onAbort, { once: true });
-		if (signal.aborted) onAbort();
-		else timer = setTimeout(() => reject(/* @__PURE__ */ new Error("DNS lookup timed out")), DNS_TIMEOUT_MS);
+//#region src/commands/gc/results.ts
+const results = [];
+function recordGcResult(kind, status, label, { id = null, bytes = null, detail = null } = {}) {
+	results.push({
+		kind,
+		status,
+		label,
+		id,
+		bytes,
+		detail
 	});
-	try {
-		return await Promise.race([resolve4(hostname), unavailable]);
-	} finally {
-		clearTimeout(timer);
-		if (onAbort) signal.removeEventListener("abort", onAbort);
-	}
 }
-async function probePublicHttp(url, signal) {
+function takeGcResults() {
+	return results.splice(0);
+}
+//#endregion
+//#region src/devices/agent-device-cleanup.ts
+function parseAgentDeviceSessions(output) {
+	const result = JSON.parse(output);
+	if (result?.success !== true || !Array.isArray(result.data?.sessions)) throw new Error("agent-device did not return a successful session list");
+	return result.data.sessions.flatMap((entry) => {
+		if (!entry || typeof entry !== "object") return [];
+		const row = entry;
+		const id = row.platform === "ios" ? row.device_udid : row.id;
+		if (row.platform !== "ios" && row.platform !== "android" || typeof row.name !== "string" || !row.name.trim() || typeof id !== "string" || !id || typeof row.createdAt !== "number" || !Number.isFinite(row.createdAt) || row.platform === "ios" && row.id !== void 0 && row.id !== id) return [];
+		return [{
+			name: typeof row.address === "string" && row.address.trim() ? row.address : row.name,
+			platform: row.platform,
+			id,
+			device: typeof row.device === "string" ? row.device : null,
+			createdAt: row.createdAt
+		}];
+	});
+}
+function isOwnDeviceSession(session, device, owner) {
+	if (session.platform !== device.platform || device.id !== null && session.id !== device.id) return false;
+	if (device.platform === "android" && session.device !== device.avdName.replaceAll("_", " ")) return false;
+	if (!owner) return true;
+	return owner.claims.some((claim) => claim.deviceId === session.id && claim.session === session.name && claim.workspace !== null && (within(owner.workspace, claim.workspace) || claim.workspace === owner.repoRoot));
+}
+function within(root, path) {
+	const rest = relative(root, path);
+	return rest === "" || !isAbsolute(rest) && rest.split(sep)[0] !== "..";
+}
+function canonical(path) {
 	try {
-		return (await fetch(url, {
-			signal,
-			redirect: "follow"
-		})).status;
-	} catch (error) {
-		const cause = error?.cause;
-		if (cause?.code !== "ENOTFOUND" && cause?.code !== "EAI_AGAIN") return null;
+		return realpathSync(path);
+	} catch {
+		return null;
 	}
-	const hostname = new URL(url).hostname;
-	if (!hostname.endsWith(".trycloudflare.com")) return null;
-	let addresses;
+}
+function deviceClaims(device) {
+	return readAgentDeviceRecords(homedir()).filter((record) => record.kind === "claim" && (device.id === null || record.deviceId === device.id)).map((record) => ({
+		deviceId: record.deviceId,
+		session: record.session,
+		workspace: record.workspace && canonical(record.workspace)
+	}));
+}
+function explainFailure(error) {
+	const stdout = error?.stdout;
+	let failure;
 	try {
-		addresses = await resolveAddresses(hostname, signal);
+		failure = typeof stdout === "string" ? JSON.parse(stdout)?.error : void 0;
 	} catch {
-		return null;
+		failure = void 0;
 	}
-	const firstAddress = addresses[0];
-	if (!firstAddress) return null;
-	return new Promise((resolve) => {
-		const request$1 = request(url, {
-			signal,
-			lookup: (_hostname, options, callback) => {
-				if (options.all) callback(null, addresses.map((address) => ({
-					address,
-					family: 4
-				})));
-				else callback(null, firstAddress, 4);
+	if (typeof failure?.message !== "string" || !failure.message) return error;
+	const reason = typeof failure.details?.reason === "string" ? ` (${failure.details.reason})` : "";
+	return /* @__PURE__ */ new Error(`agent-device refused: ${failure.message}${reason}`);
+}
+function report(message) {
+	process.stderr.write(`${phaseLine("device", message)}\n`);
+}
+function closeOwnedDeviceSessions(device, stillOwned, workspace, repoRoot) {
+	const exec = getExecutor();
+	try {
+		if (!exec.findExecutable("agent-device")) return;
+		const root = workspace === void 0 ? void 0 : canonical(workspace);
+		if (root === null) return;
+		const owner = root === void 0 ? void 0 : {
+			workspace: root,
+			repoRoot: repoRoot && (canonical(repoRoot) ?? void 0),
+			claims: deviceClaims(device)
+		};
+		const stateDir = root === void 0 ? void 0 : workspaceAgentDeviceDir(root);
+		const stateDirs = [void 0, ...stateDir && !["none", "dead"].includes(agentDeviceDaemon(stateDir)) ? [stateDir] : []];
+		for (const dir of stateDirs) {
+			const deadline = Date.now() + 15e3;
+			const run = (args) => {
+				const remaining = deadline - Date.now();
+				if (remaining <= 0) throw new Error("agent-device cleanup timed out");
+				try {
+					return exec.runFile("agent-device", [
+						...args,
+						...dir ? ["--state-dir", dir] : [],
+						"--json",
+						"--daemon-transport",
+						"socket"
+					], {
+						timeoutMs: Math.min(5e3, remaining),
+						killSignal: "SIGKILL"
+					});
+				} catch (error) {
+					throw explainFailure(error);
+				}
+			};
+			const list = () => parseAgentDeviceSessions(run([
+				"session",
+				"list",
+				"--session",
+				"stim-teardown-inventory"
+			]));
+			try {
+				const sessions = list().filter((session) => isOwnDeviceSession(session, device, owner));
+				for (const session of sessions) try {
+					if (!list().some((current) => current.name === session.name && current.platform === session.platform && current.id === session.id && current.createdAt === session.createdAt)) continue;
+					if (!stillOwned(session.id)) continue;
+					if (JSON.parse(run([
+						"close",
+						"--session",
+						session.name,
+						"--session-lock",
+						"reject",
+						"--platform",
+						device.platform,
+						device.platform === "ios" ? "--udid" : "--serial",
+						session.id
+					]))?.success !== true) throw new Error("agent-device did not confirm session close");
+					report(`closed agent-device session ${session.name} on ${session.id}`);
+				} catch (error) {
+					report(`could not close agent-device session ${session.name} on ${session.id}: ${error.message}`);
+				}
+			} catch (error) {
+				report(`could not list agent-device sessions for ${device.platform === "ios" ? device.id : device.id ?? device.avdName}: ${error.message}`);
 			}
-		}, (response) => {
-			response.resume();
-			resolve(response.statusCode ?? null);
-		});
-		request$1.on("error", () => resolve(null));
-		request$1.end();
-	});
+		}
+	} catch (error) {
+		report(`could not list agent-device sessions for ${device.platform === "ios" ? device.id : device.id ?? device.avdName}: ${error.message}`);
+	}
 }
 //#endregion
-//#region src/engine/tunnel.ts
-function tunnelArgv(provider, port, ngrokUrl, logFile, tailscaleBinary = "tailscale") {
-	if (provider === "tailscale") return {
-		bin: tailscaleBinary,
-		args: [
-			"serve",
-			`--https=${port}`,
-			`http://127.0.0.1:${port}`
-		]
-	};
-	if (provider === "cloudflared") return {
-		bin: "cloudflared",
-		args: [
-			"tunnel",
-			"--url",
-			`http://127.0.0.1:${port}`,
-			...logFile ? ["--logfile", logFile] : []
-		]
-	};
-	return {
-		bin: "ngrok",
-		args: [
-			"http",
-			String(port),
-			`--log=${logFile || "stdout"}`,
-			"--log-format=json",
-			...ngrokUrl ? ["--url", ngrokUrl] : []
-		]
-	};
-}
-const CLOUDFLARED_URL_RE = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/i;
-function parseCloudflaredLine(line) {
-	const match = line.match(CLOUDFLARED_URL_RE);
-	return match ? match[0] : null;
+//#region src/devices/teardown.ts
+function teardownParkedAvd(avdName) {
+	try {
+		return removeParkedAfter("android", avdName, () => {
+			const result = teardownOwnedAvd(avdName, {
+				del: true,
+				owner: { pool: true }
+			});
+			if (result.status !== "torn-down" && result.status !== "missing") throw new Error(result.reason);
+		}) ? {
+			status: "torn-down",
+			label: avdName
+		} : {
+			status: "skipped",
+			kind: "not-parked",
+			reason: "emulator is no longer parked"
+		};
+	} catch (error) {
+		return {
+			status: "failed",
+			reason: String(error?.message || error)
+		};
+	}
 }
-function parseNgrokLine(line) {
-	let data;
+function teardownParkedIosSim(udid, { label, deleteSim = deleteParkedIosSim } = {}) {
 	try {
-		data = JSON.parse(line);
-	} catch {
-		return null;
+		const removed = removeParkedAfter("ios", udid, () => {
+			closeOwnedDeviceSessions({
+				platform: "ios",
+				id: udid
+			}, () => Boolean(resolveOwnedIosSim(udid).sim));
+			deleteSim(udid);
+		});
+		if (!removed) return {
+			status: "skipped",
+			kind: "not-parked",
+			reason: "simulator is no longer parked"
+		};
+		return {
+			status: "torn-down",
+			label: label ?? removed.name
+		};
+	} catch (error) {
+		return {
+			status: "failed",
+			reason: String(error?.message || error)
+		};
 	}
-	if (typeof data !== "object" || data === null) return null;
-	const url = data.url;
-	return typeof url === "string" && /^https?:\/\//i.test(url) ? url : null;
 }
-function parseTailscaleLine(line) {
-	return /^https:\/\/[^\s/]+\.ts\.net(:\d+)?\/?$/.test(line) ? line : null;
+function eraseParkedIosSim(udid, { label } = {}) {
+	try {
+		const erased = eraseParkedAfter("ios", udid, (_record, eraseStarted) => {
+			closeOwnedDeviceSessions({
+				platform: "ios",
+				id: udid
+			}, () => Boolean(resolveOwnedIosSim(udid).sim));
+			const resolved = resolveOwnedIosSim(udid);
+			if (resolved.missing) throw new Error(`simulator ${udid} is not on this machine`);
+			if (resolved.notOwned) throw new Error(`simulator ${udid} is now named ${JSON.stringify(resolved.notOwned)}`);
+			const state = resolved.sim.state;
+			if (state !== "Shutdown") throw new Error(`simulator ${udid} is ${state}, not Shutdown; it was kept`);
+			eraseStarted();
+			eraseIosSim(udid);
+		});
+		if (!erased) return {
+			status: "skipped",
+			kind: "not-parked",
+			reason: "simulator is no longer parked"
+		};
+		return {
+			status: "torn-down",
+			label: label ?? erased.name
+		};
+	} catch (error) {
+		return {
+			status: "failed",
+			reason: String(error?.message || error)
+		};
+	}
 }
-function parserFor(provider) {
-	if (provider === "tailscale") return parseTailscaleLine;
-	return provider === "cloudflared" ? parseCloudflaredLine : parseNgrokLine;
+function eraseParkedAvd(avdName) {
+	try {
+		return eraseParkedAfter("android", avdName, (_record, eraseStarted) => {
+			if (resolveOwnedAvdSerial(avdName, { timeoutMs: AVD_INVENTORY_TIMEOUT_MS }).serial) throw new Error(`AVD ${avdName} is running; it was kept`);
+			const result = teardownOwnedAvd(avdName, {
+				wipe: true,
+				owner: { pool: true },
+				onWipeStart: eraseStarted
+			});
+			if (result.status !== "torn-down") throw new Error(result.reason ?? `AVD ${avdName} is ${result.status}`);
+		}) ? {
+			status: "torn-down",
+			label: avdName
+		} : {
+			status: "skipped",
+			kind: "not-parked",
+			reason: "emulator is no longer parked"
+		};
+	} catch (error) {
+		return {
+			status: "failed",
+			reason: String(error?.message || error)
+		};
+	}
 }
-const URL_TIMEOUT_MS = 15e3;
-const REACHABLE_TIMEOUT_MS = 24e4;
-const REACHABLE_POLL_MS = 2e3;
-const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
-async function withManagedTunnelLock(root, fn, options = {}) {
-	return withWorkspaceProcessLock(managedTunnelLockRoot(root), "metro-tunnel", fn, {
-		...options,
-		rejectOwnerPurposes: ["workspace removal"]
-	});
+const IOS_SHUTDOWN_SETTLE_MS = 15e3;
+const ADB_RELEASE_WAIT_MS = 3e3;
+const AVD_INVENTORY_TIMEOUT_MS = 15e3;
+function repoRootAbove(workspace) {
+	if (workspace === void 0 || !getExecutor().findExecutable("agent-device")) return void 0;
+	const root = repoRoot(workspace);
+	try {
+		return root && realpathSync(root) !== realpathSync(workspace) ? root : void 0;
+	} catch {
+		return;
+	}
 }
-async function withManagedTunnelRemovalLock(root, fn, options = {}) {
-	return withWorkspaceProcessLock(managedTunnelLockRoot(root), "metro-tunnel", fn, {
-		...options,
-		ownerPurpose: "workspace removal"
-	});
-}
-async function withManagedRemoteWorktreeLock(worktreeRoot, fn, options = {}) {
-	return withWorkspaceProcessLock(managedRemoteWorktreeLockRoot(worktreeRoot), "managed-remote", fn, {
-		...options,
-		external: true,
-		rejectOwnerPurposes: ["worktree removal"]
-	});
-}
-async function withManagedRemoteWorktreeRemovalLock(worktreeRoot, fn, options = {}) {
-	return withWorkspaceProcessLock(managedRemoteWorktreeLockRoot(worktreeRoot), "managed-remote", fn, {
-		...options,
-		external: true,
-		ownerPurpose: "worktree removal"
-	});
-}
-function managedLockHolders(root) {
-	const locks = [{
-		label: "managed tunnel",
-		path: workspaceProcessLockPath(managedTunnelLockRoot(root), "metro-tunnel", false)
-	}, {
-		label: "managed remote",
-		path: workspaceProcessLockPath(managedRemoteWorktreeLockRoot(root), "managed-remote", true)
-	}];
-	const reasons = [];
-	for (const { label, path } of locks) {
-		const claims = (0, ownership_claim_exports.readClaimSet)(path);
-		const holder = claims.live[0];
-		if (holder) {
-			const purpose = typeof holder.details.purpose === "string" ? ` for ${holder.details.purpose}` : "";
-			reasons.push(`the ${label} lock is held${purpose}`);
-		} else if (claims.unresolved[0]) reasons.push(`the ${label} lock cannot be resolved: ${claims.unresolved[0].reason}`);
+const IOS_SHUTDOWN_POLL_MS = 250;
+const IOS_SHUTDOWN_ATTEMPTS = 2;
+function settleIosSimShutdown(udid, { now = Date.now, sleep = sleepSync }) {
+	let resolved = resolveOwnedIosSim(udid);
+	for (let attempt = 1;; attempt++) {
+		const deadline = now() + IOS_SHUTDOWN_SETTLE_MS;
+		while (resolved.sim && resolved.sim.state !== "Shutdown" && now() < deadline) {
+			sleep(IOS_SHUTDOWN_POLL_MS);
+			resolved = resolveOwnedIosSim(udid);
+		}
+		if (!resolved.sim || resolved.sim.state === "Shutdown" || attempt === IOS_SHUTDOWN_ATTEMPTS) return resolved;
+		shutdownIosSim(udid);
+		resolved = resolveOwnedIosSim(udid);
 	}
-	return reasons;
-}
-function managedTunnelLockRoot(root) {
-	const key = createHash("sha256").update(resolve(root)).digest("hex");
-	return join(getConfigDir(), "process-locks", key);
 }
-function managedRemoteWorktreeLockRoot(worktreeRoot) {
-	const key = createHash("sha256").update(resolve(worktreeRoot)).digest("hex");
-	return join(getConfigDir(), "process-locks", "worktrees", key);
+function iosShutdownFailureReason(udid, state) {
+	return `simulator ${udid} is still ${state} after ${IOS_SHUTDOWN_ATTEMPTS} shutdown attempts and ${IOS_SHUTDOWN_ATTEMPTS * IOS_SHUTDOWN_SETTLE_MS / 1e3}s of waiting`;
 }
-async function defaultProbeReachable(url, signal) {
-	const status = await probePublicHttp(url, signal);
-	return status !== null && status > 0;
+function parkOwnedIosSim(settled, udid, park) {
+	if (settled.missing) throw new Error(`simulator ${udid} disappeared after shutdown`);
+	if (settled.notOwned) throw new Error(`simulator ${udid} is now named ${JSON.stringify(settled.notOwned)}`);
+	const sim = settled.sim;
+	if (sim.state !== "Shutdown") throw new Error(iosShutdownFailureReason(udid, sim.state));
+	const model = listIosDeviceTypes().find((d) => d.identifier === sim.deviceTypeIdentifier)?.name ?? null;
+	const runtime = parseRuntimeVersion(sim.runtime);
+	const name = parkedSimName(sim.udid, {
+		model,
+		runtime
+	});
+	renameIosSim(sim.udid, name);
+	const record = {
+		udid: sim.udid,
+		name,
+		deviceTypeIdentifier: sim.deviceTypeIdentifier,
+		runtimeIdentifier: sim.runtime,
+		parkedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		simslimManaged: Boolean(park.simslimManaged),
+		...park.appId ? { bundleId: park.appId } : {},
+		...park.cacheKey ? { cacheKey: park.cacheKey } : {}
+	};
+	return {
+		record,
+		evicted: parkSim({
+			platform: "ios",
+			projectPath: park.projectPath,
+			slot: park.slot,
+			record,
+			max: park.max
+		})
+	};
 }
-function waitForUrl(child, parseLine, timeoutMs) {
-	return new Promise((resolve) => {
-		let settled = false;
-		let lastLine = null;
-		let timer;
-		let onOut;
-		let onErr;
-		let onError;
-		let onExit;
-		const finish = (url, exited = false) => {
-			if (settled) return;
-			settled = true;
-			clearTimeout(timer);
-			child.stdout?.removeListener("data", onOut);
-			child.stderr?.removeListener("data", onErr);
-			child.removeListener("error", onError);
-			child.removeListener("exit", onExit);
-			resolve({
-				url,
-				exited,
-				lastLine
-			});
+function teardownOwnedIosSim(udid, { del = false, label, park, workspace, shutdownClock = {} } = {}) {
+	let parkFallback;
+	try {
+		const resolved = resolveOwnedIosSim(udid);
+		if (resolved.notOwned) return {
+			status: "skipped",
+			kind: "not-owned",
+			reason: `sim "${resolved.notOwned}" is not Stim-owned: Stim has no record of creating it`
 		};
-		const onLine = (line) => {
-			if (settled) return;
-			if (line.trim()) lastLine = line.trim();
-			const url = parseLine(line);
-			if (url) finish(url);
+		if (resolved.missing) return { status: "missing" };
+		closeOwnedDeviceSessions({
+			platform: "ios",
+			id: udid
+		}, () => Boolean(resolveOwnedIosSim(udid).sim), workspace);
+		const current = resolveOwnedIosSim(udid);
+		if (current.missing) return { status: "missing" };
+		if (current.notOwned) return {
+			status: "skipped",
+			kind: "not-owned",
+			reason: "simulator ownership changed before shutdown"
 		};
-		const outReader = createLineReader(onLine);
-		const errReader = createLineReader(onLine);
-		onOut = (chunk) => outReader.push(chunk);
-		onErr = (chunk) => errReader.push(chunk);
-		onError = () => finish(null);
-		onExit = () => {
-			outReader.flush();
-			errReader.flush();
-			finish(null, true);
+		shutdownIosSim(udid);
+		const sim = resolved.sim;
+		if (del && park && park.max > 0) try {
+			const { record, evicted } = parkOwnedIosSim(settleIosSimShutdown(udid, shutdownClock), udid, park);
+			const removed = [];
+			const failures = [];
+			for (const entry of evicted) {
+				const result = teardownParkedIosSim(entry.udid, { label: entry.name });
+				if (result.status === "torn-down") removed.push({
+					udid: entry.udid,
+					name: entry.name
+				});
+				else if (result.status === "failed") failures.push(`could not delete evicted ${entry.name} (${entry.udid}): ${result.reason}`);
+			}
+			return {
+				status: "torn-down",
+				label: label ?? sim.name ?? udid,
+				parked: {
+					udid: record.udid,
+					name: record.name
+				},
+				evicted: removed,
+				...failures.length ? { evictionFailures: failures } : {}
+			};
+		} catch (e) {
+			parkFallback = String(e?.message || e);
+		}
+		if (del) {
+			deleteIosSim(udid);
+			return {
+				status: "torn-down",
+				label: label ?? sim.name ?? udid,
+				...parkFallback ? { parkFallback } : {}
+			};
+		}
+		const settled = settleIosSimShutdown(udid, shutdownClock);
+		if (settled.sim && settled.sim.state !== "Shutdown") return {
+			status: "failed",
+			label: label ?? sim.name ?? udid,
+			reason: iosShutdownFailureReason(udid, settled.sim.state)
 		};
-		child.stdout?.setEncoding?.("utf-8");
-		child.stderr?.setEncoding?.("utf-8");
-		child.stdout?.on("data", onOut);
-		child.stderr?.on("data", onErr);
-		child.on("error", onError);
-		child.on("exit", onExit);
-		timer = setTimeout(() => finish(null), timeoutMs);
-	});
-}
-function waitForFileUrl(child, logFile, parseLine, timeoutMs) {
-	return new Promise((resolve) => {
-		let settled = false;
-		const finish = (url, exited = false) => {
-			if (settled) return;
-			settled = true;
-			clearInterval(interval);
-			clearTimeout(timer);
-			child.removeListener("error", onError);
-			child.removeListener("exit", onExit);
-			resolve({
-				url,
-				exited
-			});
+		const root = sim.state === "Shutdown" ? void 0 : repoRootAbove(workspace);
+		if (root && settled.sim) closeOwnedDeviceSessions({
+			platform: "ios",
+			id: udid
+		}, () => resolveOwnedIosSim(udid).sim?.state === "Shutdown", workspace, root);
+		return {
+			status: "torn-down",
+			label: label ?? sim.name ?? udid
 		};
-		const probe = () => {
-			try {
-				for (const line of readFileSync(logFile, "utf-8").split(/\r?\n/)) {
-					const url = parseLine(line);
-					if (url) return finish(url);
-				}
-			} catch {}
+	} catch (e) {
+		return {
+			status: "failed",
+			reason: String(e?.message || e),
+			...parkFallback ? { parkFallback } : {}
 		};
-		const onError = () => finish(null);
-		const onExit = () => finish(null, true);
-		child.on("error", onError);
-		child.on("exit", onExit);
-		const interval = setInterval(probe, 25);
-		const timer = setTimeout(() => finish(null), timeoutMs);
-		probe();
-	});
+	}
 }
-function createTunnelLogFile(provider) {
-	const dir = join(getConfigDir(), "tunnel-logs");
-	mkdirSync(dir, { recursive: true });
-	const path = join(dir, `${provider}-${randomUUID()}.log`);
-	closeSync(openSync(path, "wx", 384));
-	return path;
+function assertAvdReferences(avdName, owner) {
+	const config = loadConfig$1();
+	if (!config) throw new Error("Cannot verify AVD references without a Stim config; the data was kept.");
+	if (owner && "projectPath" in owner && owner.expectedRecord && !isDeepStrictEqual(deviceSlotPlatforms(config.projects[owner.projectPath], owner.slot)?.android, owner.expectedRecord)) throw new Error(`AVD ${avdName} has a changed workspace record; its data was kept.`);
+	for (const [projectPath, project] of Object.entries(config.projects)) for (const { slot, platforms } of projectDeviceSlots(project)) {
+		if (platforms.android?.avdName?.toLowerCase() !== avdName.toLowerCase()) continue;
+		if (!owner || !("projectPath" in owner) || owner.projectPath !== projectPath || (owner.slot ?? "default") !== slot || !platforms.android.owned) throw new Error(`AVD ${avdName} is referenced by ${projectPath} (${slot}); its data was kept.`);
+	}
+	if (readParked("android", { config }).some((entry) => entry.name.toLowerCase() === avdName.toLowerCase()) && !(owner && "pool" in owner)) throw new Error(`AVD ${avdName} is in the emulator pool; its data was kept.`);
 }
-function removeTunnelLogFile(path) {
-	if (!path) return;
-	try {
-		unlinkSync(path);
-	} catch {}
-}
-function removeRecordedTunnelLogFile(path) {
-	if (!path) return;
-	const dir = resolve(join(getConfigDir(), "tunnel-logs"));
-	const resolved = resolve(path);
-	if (!resolved.startsWith(`${dir}${sep}`) || resolve(join(dir, basename(resolved))) !== resolved) return;
-	removeTunnelLogFile(resolved);
+function removeOrphanedAvdDirectory(candidate, owner) {
+	const surveyed = listOrphanedAvdDirectories(candidate.name).find((entry) => entry.directory === candidate.directory);
+	if (!surveyed || surveyed.name !== candidate.name || surveyed.dev !== candidate.dev || surveyed.ino !== candidate.ino) throw new Error(`AVD data at ${candidate.directory} changed or is registered; it was kept.`);
+	assertOwnedAvdStopped(candidate.name, { resolveDirectory: () => candidate.directory });
+	const detached = withConfigLock$1(() => {
+		const current = lstatSync(candidate.directory);
+		if (!current.isDirectory() || current.dev !== candidate.dev || current.ino !== candidate.ino) throw new Error(`AVD data at ${candidate.directory} changed or is registered; it was kept.`);
+		assertAvdReferences(candidate.name, owner);
+		const name = `stim-gc-${randomUUID()}`;
+		recordCreatedDevice("android", name);
+		const destination = join(dirname(candidate.directory), `${name}.avd`);
+		try {
+			renameSync(candidate.directory, destination);
+		} catch (error) {
+			forgetCreatedDevice("android", name);
+			throw error;
+		}
+		forgetCreatedDevice("android", candidate.name);
+		return destination;
+	});
+	const current = lstatSync(detached);
+	if (!current.isDirectory() || current.dev !== candidate.dev || current.ino !== candidate.ino) throw new Error(`Detached AVD data changed at ${detached}; it was kept.`);
+	try {
+		rmSync(detached, { recursive: true });
+	} catch (error) {
+		throw new Error(`Could not remove AVD data at ${detached}; retry gc --delete: ${error.message}`, { cause: error });
+	}
+	forgetCreatedDevice("android", basename(detached, ".avd"));
 }
-async function waitUntilReachable({ url, now, sleep, probe, timeoutMs }) {
-	const deadline = now() + timeoutMs;
-	for (;;) {
-		if (await probe(url, new AbortController().signal).catch(() => false)) return true;
-		if (now() >= deadline) return false;
-		await sleep(REACHABLE_POLL_MS);
+function teardownUnregisteredAvd(avdName, del, owner, surveyed) {
+	const candidates = surveyed ? [surveyed] : listOrphanedAvdDirectories(avdName);
+	if (candidates.length === 0) {
+		if (avdStorageRoots().some((root) => avdPathExists(join(root, `${avdName}.ini`)) || avdPathExists(join(root, `${avdName}.avd`)))) throw new Error(`AVD ${avdName} is not listed but its storage remains; it was kept.`);
+		return { status: "missing" };
 	}
+	if (!del) return {
+		status: "skipped",
+		reason: "AVD registration is missing; its data was kept."
+	};
+	for (const candidate of candidates) {
+		if (candidate.name !== avdName) throw new Error(`AVD data does not match ${avdName}; it was kept.`);
+		removeOrphanedAvdDirectory(candidate, owner);
+	}
+	return {
+		status: "torn-down",
+		label: avdName
+	};
 }
-const CLEANUP_TIMEOUT_MS = 1e3;
-const CLEANUP_POLL_MS = 25;
-async function startTunnel({ provider, port, spawnFn = null, urlTimeoutMs = URL_TIMEOUT_MS, reachableTimeoutMs = REACHABLE_TIMEOUT_MS, probeReachable = defaultProbeReachable, now = Date.now, sleep = defaultSleep, ngrokUrl = null, requireReachable = true, cleanupTimeoutMs = CLEANUP_TIMEOUT_MS, isChildAlive = pidExists, readProcessToken = process_identity_exports.captureProcessToken, logFile = null }) {
-	const spawn = spawnFn || ((cmd, args, opts) => getExecutor().spawn(cmd, args, opts));
-	const outputFile = provider === "tailscale" ? null : logFile || (spawnFn ? null : createTunnelLogFile(provider));
-	let child;
+function teardownOwnedAvd(avdName, options = {}) {
+	let claim;
 	try {
-		const binary = provider === "tailscale" ? resolveTailscaleBinary((bin) => getExecutor().findExecutable(bin)) : provider;
-		if (!binary) throw new Error("Install Tailscale and sign in to your tailnet.");
-		const { bin, args } = tunnelArgv(provider, port, ngrokUrl, outputFile, binary);
-		child = spawn(bin, args, {
-			stdio: outputFile ? [
-				"ignore",
-				"ignore",
-				"ignore"
-			] : [
-				"ignore",
-				"pipe",
-				"pipe"
-			],
-			detached: true
-		});
-	} catch (err) {
-		removeTunnelLogFile(outputFile);
+		if (!isStimOwnedAvd(avdName)) return {
+			status: "skipped",
+			kind: "not-owned",
+			reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
+		};
+		claim = acquireAvdClaim(avdName);
+		const result = teardownClaimedAvd(avdName, claim, options);
+		if (result.status === "torn-down" || result.status === "missing") options.onRemoved?.();
+		return result;
+	} catch (error) {
 		return {
-			failed: true,
-			reason: `Could not start ${provider}: ${describe(err)}`
+			status: "failed",
+			reason: String(error?.message || error)
 		};
+	} finally {
+		(0, ownership_claim_exports.releaseClaim)(claim);
 	}
-	let childExited = false;
-	child.once("exit", () => {
-		childExited = true;
-	});
-	const cleanup = async (alreadyExited = childExited) => {
-		const stopped = await terminateChild(child, {
-			alreadyExited,
-			timeoutMs: cleanupTimeoutMs,
-			now,
-			sleep,
-			isAlive: isChildAlive
-		});
-		if (stopped) removeTunnelLogFile(outputFile);
-		return stopped ? { status: "stopped" } : {
-			status: "failed",
-			reason: `Sent SIGKILL but could not confirm that pid ${child.pid ?? "unknown"} exited.`
+}
+function serialFree(serial, timeoutMs = AVD_INVENTORY_TIMEOUT_MS) {
+	const adb = listAdbDevices({ timeoutMs });
+	return ![
+		...adb.emulators,
+		...adb.physical,
+		...adb.unhealthy
+	].some((entry) => entry.serial === serial);
+}
+function teardownClaimedAvd(avdName, claim, { del = false, wipe = false, park, owner, workspace, orphanedDirectory, onlyIfMissing = false, onWipeStart, waitForShutdown = waitForAndroidEmulatorShutdown, assertStopped = assertOwnedAvdStopped, resolveAvd = (name) => resolveOwnedAvdSerial(name, { timeoutMs: AVD_INVENTORY_TIMEOUT_MS }) }) {
+	let parkFallback;
+	try {
+		if (del || wipe) withConfigLock$1(() => assertAvdReferences(avdName, owner));
+		const resolved = resolveAvd(avdName);
+		if (resolved.notOwned) return {
+			status: "skipped",
+			kind: "not-owned",
+			reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
 		};
-	};
-	const failAfterCleanup = async (reason, alreadyExited = childExited) => {
-		const stopped = await cleanup(alreadyExited);
-		return stopped.status === "stopped" ? {
-			failed: true,
-			reason
-		} : {
-			failed: true,
-			reason: `${reason} ${stopped.reason}`,
-			cleanupFailed: true
+		if (resolved.missing) {
+			if (wipe) throw new Error(`AVD ${avdName} is not registered; its data was kept.`);
+			return teardownUnregisteredAvd(avdName, del, owner, orphanedDirectory);
+		}
+		if (onlyIfMissing) return {
+			status: "skipped",
+			reason: "AVD registration appeared; its record was kept."
 		};
-	};
-	const pid = child.pid;
-	if (!pid) return failAfterCleanup(`${provider} started but reported no pid.`);
-	const captureChildIdentity = () => {
-		try {
-			return readProcessToken(pid);
-		} catch {
-			return null;
+		if (orphanedDirectory) return {
+			status: "skipped",
+			reason: "AVD registration appeared; its data was kept."
+		};
+		const serial = resolved.serial;
+		const stillStopped = (sessionSerial) => {
+			const current = resolveAvd(avdName);
+			return !current.notOwned && !current.missing && !current.serial && serialFree(sessionSerial);
+		};
+		if (serial) {
+			const stillOwned = () => {
+				const current = resolveAvd(avdName);
+				return !current.notOwned && !current.missing && current.serial === serial;
+			};
+			closeOwnedDeviceSessions({
+				platform: "android",
+				id: serial,
+				avdName
+			}, stillOwned, workspace);
+			if (!stillOwned()) throw new Error(`Owned AVD ${avdName} changed before shutdown; it was kept.`);
+			waitForShutdown(avdName, (timeoutMs) => {
+				(0, ownership_claim_exports.markClaimChildPending)(claim);
+				try {
+					shutdownAndroidEmulator(serial, timeoutMs);
+				} finally {
+					(0, ownership_claim_exports.clearClaimChild)(claim);
+				}
+			});
+			const root = repoRootAbove(workspace);
+			if (root) {
+				const deadline = Date.now() + ADB_RELEASE_WAIT_MS;
+				while (!serialFree(serial, Math.max(1, deadline - Date.now())) && Date.now() < deadline) sleepSync(250);
+				closeOwnedDeviceSessions({
+					platform: "android",
+					id: serial,
+					avdName
+				}, stillStopped, workspace, root);
+			}
+		} else {
+			closeOwnedDeviceSessions({
+				platform: "android",
+				id: null,
+				avdName
+			}, stillStopped, workspace);
+			waitForShutdown(avdName, null);
 		}
-	};
-	const initialProcessToken = captureChildIdentity();
-	if (!initialProcessToken) return failAfterCleanup(`${provider} started but its process identity token could not be read.`);
-	const { url, exited, lastLine } = outputFile ? await waitForFileUrl(child, outputFile, parserFor(provider), urlTimeoutMs) : await waitForUrl(child, parserFor(provider), urlTimeoutMs);
-	if (!url) return failAfterCleanup(exited ? provider === "tailscale" && lastLine ? `${provider} exited before printing a tunnel URL: ${lastLine}` : `${provider} exited before printing a tunnel URL.` : `${provider} did not print a tunnel URL within ${urlTimeoutMs}ms.`, exited || childExited);
-	if (!outputFile) resumeChildPipes(child);
-	if (requireReachable) {
-		if (!await waitUntilReachable({
-			url,
-			now,
-			sleep,
-			probe: probeReachable,
-			timeoutMs: reachableTimeoutMs
-		})) return failAfterCleanup(`${url} did not become reachable within ${reachableTimeoutMs}ms; ${provider} may still be registering, or the network path is blocked.`);
+		if (wipe && !del) {
+			const current = resolveAvd(avdName);
+			if (current.notOwned || current.missing) throw new Error(`AVD ${avdName} changed before its data was wiped.`);
+			if (current.serial) throw new Error(`Owned AVD ${avdName} started again before its data was wiped.`);
+			assertStopped(avdName);
+			withConfigLock$1(() => assertAvdReferences(avdName, owner));
+			const directory = ownedAvdDirectory(avdName);
+			if (!directory) throw new Error(`The data directory of AVD ${avdName} could not be resolved.`);
+			onWipeStart?.();
+			wipeAvdUserData(directory);
+		}
+		if (del) {
+			const current = resolveAvd(avdName);
+			if (current.notOwned) return {
+				status: "skipped",
+				kind: "not-owned",
+				reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
+			};
+			if (current.missing) return teardownUnregisteredAvd(avdName, del, owner);
+			if (current.serial) throw new Error(`Owned AVD ${avdName} started again before deletion.`);
+			assertStopped(avdName);
+			withConfigLock$1(() => assertAvdReferences(avdName, owner));
+			if (park && park.max > 0) try {
+				const systemImage = ownedAvdSystemImage(avdName);
+				if (!systemImage || !park.configuration || !ownedAvdMatchesConfiguration(avdName, park.configuration)) throw new Error("the AVD has no verified creation configuration");
+				const evicted = parkSim({
+					platform: "android",
+					projectPath: park.projectPath,
+					slot: park.slot,
+					max: park.max,
+					record: {
+						udid: avdName,
+						name: avdName,
+						systemImage,
+						configuration: park.configuration,
+						parkedAt: (/* @__PURE__ */ new Date()).toISOString(),
+						...park.appId ? { packageName: park.appId } : {},
+						...park.cacheKey ? { cacheKey: park.cacheKey } : {}
+					}
+				});
+				const removed = [];
+				const failures = [];
+				for (const entry of evicted) {
+					const result = teardownParkedAvd(entry.name);
+					if (result.status === "torn-down") removed.push({
+						udid: entry.name,
+						name: entry.name,
+						platform: "android"
+					});
+					else if (result.status === "failed") failures.push(`could not delete evicted ${entry.name}: ${result.reason}`);
+				}
+				return {
+					status: "torn-down",
+					label: avdName,
+					parked: {
+						udid: avdName,
+						name: avdName,
+						platform: "android"
+					},
+					evicted: removed,
+					...failures.length ? { evictionFailures: failures } : {}
+				};
+			} catch (error) {
+				parkFallback = String(error?.message || error);
+			}
+			const directory = ownedAvdDirectory(avdName);
+			const paths = avdStorageRoots().map((root) => join(root, `${avdName}.ini`));
+			if (directory) paths.push(directory);
+			(0, ownership_claim_exports.markClaimChildPending)(claim);
+			try {
+				deleteAvd(avdName);
+			} finally {
+				(0, ownership_claim_exports.clearClaimChild)(claim);
+			}
+			const remaining = paths.filter(avdPathExists);
+			if (remaining.length) throw new Error(`AVD ${avdName} was only partially deleted; data remains at ${remaining.join(", ")}.`);
+		}
+		return {
+			status: "torn-down",
+			label: avdName,
+			serial: resolved.serial ?? null,
+			...parkFallback ? { parkFallback } : {}
+		};
+	} catch (e) {
+		return {
+			status: "failed",
+			reason: String(e?.message || e)
+		};
 	}
-	const finalProcessToken = captureChildIdentity();
-	if (!finalProcessToken || finalProcessToken !== initialProcessToken) return failAfterCleanup(`${provider} process identity changed before its tunnel could be recorded.`);
-	if (!outputFile) unrefChildPipes(child);
-	child.unref?.();
-	if (childExited) return failAfterCleanup(`${provider} exited before its tunnel could be recorded.`, true);
-	return {
-		url,
-		pid,
-		processToken: initialProcessToken,
-		logFile: outputFile,
-		cleanup: () => cleanup()
-	};
 }
-async function startTunnelSequence({ providers, port, ngrokUrl = null, requireReachable = true, start = startTunnel }) {
-	const failures = [];
-	for (const provider of providers) {
-		const result = await start({
-			provider,
-			port,
-			ngrokUrl: provider === "ngrok" ? ngrokUrl : null,
-			requireReachable
+const BROWSER_EXIT_WAIT_MS = 15e3;
+const CHROME_KILL_WAIT_MS = 5e3;
+async function stopOwnedChrome(record, profile) {
+	for (const signal of ["SIGTERM", "SIGKILL"]) {
+		const state = chromeProcessState(record, profile);
+		if (state === "gone") return true;
+		if (state === "unknown") return false;
+		try {
+			signalProcessTree(record.pid, signal, { group: true });
+		} catch {}
+		const deadline = Date.now() + CHROME_KILL_WAIT_MS;
+		while (chromeProcessState(record, profile) !== "gone" && Date.now() < deadline) await sleepAsync(50);
+	}
+	return chromeProcessState(record, profile) === "gone";
+}
+const sleepAsync = (ms) => new Promise((done) => setTimeout(done, ms));
+/**
+* Closes the workspace's Stim-owned Chrome and its supervisor, after verifying both process identities. With
+* `deleteProfile`, it also deletes the profile directory, only when the created-devices ledger lists it.
+*/
+async function teardownOwnedBrowser(root, options = {}) {
+	try {
+		return await withWorkspaceProcessLock(workspaceDir(root), "web", () => teardownBrowserHeld(root, options), {
+			external: true,
+			ownerPurpose: "browser teardown"
 		});
-		if (!("failed" in result)) return {
-			provider,
-			...result
-		};
-		failures.push(`${provider}: ${result.reason}`);
-		if (result.cleanupFailed) return {
-			failed: true,
-			reason: failures.join(" ")
+	} catch (error) {
+		return {
+			status: "failed",
+			reason: String(error?.message || error)
 		};
 	}
-	return {
-		failed: true,
-		reason: failures.join(" ") || "No managed tunnel provider was selected."
-	};
-}
-function closeChildPipes(child) {
-	child.stdout?.destroy?.();
-	child.stderr?.destroy?.();
-}
-function unrefChildPipes(child) {
-	resumeChildPipes(child);
-	for (const stream of [child.stdout, child.stderr]) stream?.unref?.();
 }
-function resumeChildPipes(child) {
-	child.stdout?.resume?.();
-	child.stderr?.resume?.();
-}
-async function signalAndWaitForExit(child, signal, { timeoutMs, now, sleep, isAlive, platform }) {
-	let exited = false;
-	const onExit = () => {
-		exited = true;
-	};
-	child.once("exit", onExit);
+/** {@link teardownOwnedBrowser} for a caller that already holds the {@link BROWSER_LOCK} lock. */
+async function teardownBrowserHeld(root, { deleteProfile = false } = {}) {
 	try {
-		if (platform === "win32" && child.pid) signalProcessTree(child.pid, signal, { platform });
-		child.kill(signal);
-	} catch (err) {
-		child.removeListener("exit", onExit);
-		return isEsrch(err);
+		const record = readWebRecord(root);
+		const profile = record?.profile ?? webProfileDir(root);
+		if (record) {
+			const supervisor = (0, process_identity_exports.inspectProcessIdentity)(record);
+			const chrome = record.chromeProcess ? (0, process_identity_exports.inspectProcessIdentity)(record.chromeProcess) : "gone";
+			if (supervisor === "unknown" || chrome === "unknown") return {
+				status: "skipped",
+				kind: "not-verified",
+				reason: `the browser supervisor (pid ${record.pid}) or its Chrome could not be verified; its record was kept`
+			};
+			if (supervisor === "same") {
+				try {
+					process.kill(record.pid, "SIGTERM");
+				} catch {}
+				if (!await (0, process_identity_exports.waitForProcessExit)(record, BROWSER_EXIT_WAIT_MS)) return {
+					status: "failed",
+					reason: `browser supervisor pid ${record.pid} did not exit`
+				};
+			}
+			if (record.chromeProcess && !await stopOwnedChrome(record.chromeProcess, profile)) return {
+				status: "failed",
+				reason: `Chrome pid ${record.chromeProcess.pid} did not exit`
+			};
+			const exited = record.chromeProcess;
+			const holder = liveProfileHolder(profile, { alive: (pid) => pidExists(pid) && !(pid === exited?.pid && (0, process_identity_exports.inspectProcessIdentity)(exited) === "gone") });
+			if (holder !== null) return {
+				status: "skipped",
+				kind: "not-verified",
+				reason: `pid ${holder} still holds ${profile}, and the browser record does not name it; it was left running`
+			};
+			const claims = (0, ownership_claim_exports.clearFreeClaimSet)({
+				root: webClaimRoot(root),
+				label: "browser supervisor"
+			});
+			if (claims.status !== "cleared") return {
+				status: "skipped",
+				kind: "not-verified",
+				reason: claims.status === "held" ? `the browser supervisor claim is still held${claims.holder ? ` by pid ${claims.holder.owner.pid}` : ""}` : `the browser supervisor claim could not be cleared (${claims.reason}); remove it with ${(0, ownership_claim_exports.claimRemoveCommand)(webClaimRoot(root))}`
+			};
+			clearWebRecord(root, record);
+			await releaseBrowserPort(root, record.cdpPort);
+		} else {
+			const holder = liveProfileHolder(profile);
+			if (holder !== null) return {
+				status: "skipped",
+				kind: "not-verified",
+				reason: `pid ${holder} holds ${profile} but no browser supervisor is recorded; it was left running`
+			};
+			const port = getProject(root)?.ports?.[CDP_PORT_LABEL];
+			if (typeof port === "number") await releaseBrowserPort(root, port);
+		}
+		if (existsSync(profile)) removeSingletonFiles(profile);
+		if (deleteProfile && existsSync(profile)) {
+			if (!readCreatedDevices$1().web.has(profile)) return {
+				status: "skipped",
+				kind: "not-owned",
+				reason: `${profile} is not in Stim's ledger; it was kept`
+			};
+			rmSync(profile, {
+				recursive: true,
+				force: true
+			});
+			forgetCreatedDevice("web", profile);
+		}
+		return record ? {
+			status: "torn-down",
+			label: `Chrome (${profile})`
+		} : { status: "missing" };
+	} catch (error) {
+		return {
+			status: "failed",
+			reason: String(error?.message || error)
+		};
 	}
-	const hasExited = () => exited;
-	const deadline = now() + timeoutMs;
-	while (!hasExited() && now() < deadline) await sleep(CLEANUP_POLL_MS);
-	if (!hasExited() && child.pid && !isAlive(child.pid)) exited = true;
-	child.removeListener("exit", onExit);
-	return hasExited();
 }
-async function terminateChild(child, { alreadyExited, timeoutMs, now, sleep, isAlive, platform = process.platform }) {
-	if (alreadyExited) {
-		closeChildPipes(child);
-		return true;
-	}
-	if (await signalAndWaitForExit(child, "SIGTERM", {
-		timeoutMs,
-		now,
-		sleep,
-		isAlive,
-		platform
-	})) {
-		closeChildPipes(child);
-		return true;
+//#endregion
+//#region src/macos/instances.ts
+const BUNDLE_EXECUTABLE = /^[^/]+\.app\/Contents\/MacOS\/[^/]+$/;
+function bundleDirs(root) {
+	const dir = macosDir(root);
+	if (process.platform !== "darwin" || !existsSync(dir)) return [];
+	return [.../* @__PURE__ */ new Set([dir, realpathSync(dir)])];
+}
+function isBundleExecutable(path, dirs) {
+	return dirs.some((dir) => path.startsWith(`${dir}/`) && BUNDLE_EXECUTABLE.test(path.slice(dir.length + 1)));
+}
+/** Pids from `ps -axww -o pid=,comm=` output whose command names a bundle executable inside `dirs`. */
+function bundleCandidates(psOutput, dirs) {
+	const pids = [];
+	for (const line of psOutput.split("\n")) {
+		const match = /^\s*(\d+)\s+(.+)$/.exec(line);
+		if (match && isBundleExecutable(match[2], dirs)) pids.push(Number(match[1]));
 	}
-	const killed = await signalAndWaitForExit(child, "SIGKILL", {
-		timeoutMs,
-		now,
-		sleep,
-		isAlive,
-		platform
-	});
-	closeChildPipes(child);
-	return killed;
+	return pids;
 }
-function describe(err) {
-	return err?.message || String(err);
+/** Whether `lsof -Fn -d txt` output for one process names a bundle executable inside `dirs`. */
+function lsofNamesBundleExecutable(lsofOutput, dirs) {
+	return lsofOutput.split("\n").some((line) => line.startsWith("n") && isBundleExecutable(line.slice(1), dirs));
 }
-const STOP_TIMEOUT_MS = 5e3;
-const STOP_POLL_MS = 100;
-function isEsrch(err) {
-	return err?.code === "ESRCH";
+function candidatePids(dirs) {
+	if (!dirs.length) return [];
+	return bundleCandidates(getExecutor().runFile("ps", [
+		"-axww",
+		"-o",
+		"pid=,comm="
+	], { timeoutMs: 1e4 }), dirs).filter((pid) => pid !== process.pid);
 }
-async function stopTunnel(record, { isAlive = pidExists, inspectIdentity = process_identity_exports.inspectProcessIdentity, platform = process.platform, kill = (pid) => signalProcessTree(pid, "SIGTERM", { platform }), now = Date.now, sleep = defaultSleep, timeoutMs = STOP_TIMEOUT_MS } = {}) {
-	const missing = () => {
-		removeRecordedTunnelLogFile(record?.logFile);
-		return { status: "missing" };
-	};
-	const pid = record?.pid;
-	if (!pid || !isAlive(pid)) return missing();
-	if (!record.processToken) return {
-		status: "failed",
-		reason: `tunnel pid ${pid} has no process identity token, so Stim cannot verify ownership. Keep the record. Inspect the process, stop it with the provider tooling, remove the stale metroTunnel state, and retry.`
-	};
-	const identity = inspectIdentity(record);
-	if (identity === "gone" || identity === "different") return missing();
-	if (identity !== "same") return {
-		status: "failed",
-		reason: `could not verify the process identity for tunnel pid ${pid}; refusing to signal it.`
-	};
-	try {
-		kill(pid);
-	} catch (err) {
-		return isEsrch(err) ? missing() : {
-			status: "failed",
-			reason: describe(err)
-		};
-	}
-	const deadline = now() + timeoutMs;
-	const exited = () => {
-		if (!isAlive(pid)) return true;
-		const current = inspectIdentity(record);
-		return current === "gone" || current === "different";
-	};
-	while (now() < deadline && !exited()) await sleep(STOP_POLL_MS);
-	if (!exited()) return {
-		status: "failed",
-		reason: `pid ${pid} did not exit within ${timeoutMs}ms.`
-	};
-	removeRecordedTunnelLogFile(record.logFile);
-	return { status: "stopped" };
+/** Pids that claim to run an app bundle from the workspace's macOS directory. `ps` reports argv[0], so this is a lead. */
+function bundleInstancePids(root) {
+	return candidatePids(bundleDirs(root));
 }
-//#endregion
-//#region src/supervisor/ownership.ts
-function resolveSupervisorTarget({ state, record, reservedPort, isAlive = pidExists, inspectIdentity = process_identity_exports.inspectProcessIdentity } = {}) {
-	const statePid = numberOrNull(state?.pid);
-	const recordPid = numberOrNull(record?.pid);
-	const pid = statePid ?? recordPid;
-	if (!pid) return { status: "none" };
-	if (statePid && recordPid && statePid !== recordPid) return {
-		status: "unverified",
-		pid,
-		reason: `workspace state.json records supervisor pid ${statePid} but the registry records pid ${recordPid}`
-	};
-	if (!isAlive(pid)) return {
-		status: "stale",
-		pid
-	};
-	const port = numberOrNull(state?.port) ?? numberOrNull(record?.port);
-	if (reservedPort !== null && reservedPort !== void 0 && port !== null && port !== reservedPort) return {
-		status: "unverified",
-		pid,
-		reason: `supervisor pid ${pid} records port ${port}, but this project reserved port ${reservedPort}`
-	};
-	if (reservedPort !== null && reservedPort !== void 0 && port === null) return {
-		status: "unverified",
-		pid,
-		reason: `supervisor pid ${pid} has no recorded port, so it cannot be matched against reserved port ${reservedPort}`
-	};
-	const identityRecord = statePid ? state : record;
-	if (statePid && recordPid && state?.processToken !== record?.processToken) return {
-		status: "unverified",
-		pid,
-		reason: "workspace state and registry process identities disagree"
-	};
-	const identity = inspectIdentity(identityRecord);
-	if (identity === "gone" || identity === "different") return {
-		status: "stale",
-		pid
-	};
-	if (identity !== "same") return {
-		status: "unverified",
-		pid,
-		reason: "the recorded process identity could not be verified"
-	};
-	return {
-		status: "ours",
-		processToken: identityRecord.processToken,
-		pid,
-		port,
-		mode: state?.mode ?? record?.mode ?? null,
-		startedAt: state?.startedAt ?? record?.startedAt ?? null
-	};
+function unverified(pid, why) {
+	return Object.assign(/* @__PURE__ */ new Error(`Cannot verify macOS app pid ${pid}: ${why}; no signal was sent.`), { code: "STIM_MACOS_OWNER_UNVERIFIED" });
 }
-function numberOrNull(v) {
-	return typeof v === "number" && Number.isSafeInteger(v) && v > 0 ? v : null;
+/**
+* Every running process whose executable is an app bundle Stim built in the workspace's macOS directory, however it
+* was launched. Each identity is captured before its executable is confirmed with lsof.
+*/
+function runningBundleInstances(root) {
+	const dirs = bundleDirs(root);
+	const instances = [];
+	for (const pid of candidatePids(dirs)) {
+		const processToken = (0, process_identity_exports.captureProcessToken)(pid);
+		const start = (0, process_identity_exports.processStartMicros)(pid);
+		if (!processToken || start.status !== "running") {
+			if (start.status === "gone") continue;
+			throw unverified(pid, "its identity cannot be captured");
+		}
+		const record = {
+			pid,
+			processToken,
+			startedAtMicros: start.startedAtMicros
+		};
+		let open;
+		try {
+			open = getExecutor().runFile("lsof", [
+				"-a",
+				"-p",
+				String(pid),
+				"-d",
+				"txt",
+				"-Fn"
+			], { timeoutMs: 1e4 });
+		} catch (error) {
+			if (["gone", "different"].includes((0, process_identity_exports.inspectProcessIdentity)(record))) continue;
+			open = String(error.stdout ?? "");
+			if (!open.trim()) throw unverified(pid, `lsof failed (${error.message.split("\n")[0]})`);
+		}
+		if (lsofNamesBundleExecutable(open, dirs)) instances.push(record);
+	}
+	return instances;
 }
 //#endregion
 //#region src/workspace/in-use.ts
@@ -1486,6 +1566,12 @@ function workspaceInUse(root, { supervisor = true, managedLocks = true, hosted =
 		if (macos?.host) reasons.push(`its macOS app runs on ${macos.host.machine}`);
 		else if (macos?.state === "running" || macos?.state === "orphaned" || macos?.build.state === "running") reasons.push("its macOS app or build is running");
 		else if (macos?.state === "unverified" || !macos && readWorkspaceState$1(root)?.macos !== void 0) reasons.push("its macOS process owner cannot be verified");
+		else try {
+			const pids = bundleInstancePids(root);
+			if (pids.length) reasons.push(`its macOS app is running (pid ${pids.join(", ")})`);
+		} catch (error) {
+			reasons.push(`its running macOS apps cannot be listed: ${error.message}`);
+		}
 		const runtime = (0, ownership_claim_exports.readClaimSet)(macosRuntimeClaim(root));
 		if (runtime.live.length) reasons.push("its macOS runtime claim is held");
 		else if (runtime.unresolved[0]) reasons.push(`its macOS runtime cannot be verified: ${runtime.unresolved[0].reason}`);
@@ -1855,4 +1941,4 @@ function sizeText(bytes) {
 	return bytes === null ? "size unknown" : formatBytes(bytes);
 }
 //#endregion
-export { teardownParkedIosSim as A, eraseParkedAvd as C, teardownOwnedBrowser as D, teardownOwnedAvd as E, takeGcResults as F, canonicalPath as I, listBuildSlots as M, releaseBuildSlot as N, teardownOwnedIosSim as O, recordGcResult as P, probePublicHttp as S, teardownBrowserHeld as T, terminateChild as _, collectWorkspaceOutputs as a, withManagedTunnelLock as b, listWorkspaceDirs as c, emptyWorkspaceDir as d, withIdleWorkspace as f, stopTunnel as g, startTunnelSequence as h, collectOrphanedWorkspaces as i, acquireBuildSlot as j, teardownParkedAvd as k, rootPresence as l, resolveSupervisorTarget as m, WORKSPACE_OUTPUT_DIRS as n, deleteOrphanedWorkspaces as o, workspaceInUse as p, clearWorkspaceOutputs as r, isInsideWorkspaces as s, REBUILD_COST as t, sizeText as u, withManagedRemoteWorktreeLock as v, eraseParkedIosSim as w, withManagedTunnelRemovalLock as x, withManagedRemoteWorktreeRemovalLock as y };
+export { withManagedRemoteWorktreeRemovalLock as A, recordGcResult as C, stopTunnel as D, startTunnelSequence as E, acquireBuildSlot as F, listBuildSlots as I, releaseBuildSlot as L, withManagedTunnelRemovalLock as M, probePublicHttp as N, terminateChild as O, resolveSupervisorTarget as P, teardownParkedIosSim as S, canonicalPath as T, teardownBrowserHeld as _, collectWorkspaceOutputs as a, teardownOwnedIosSim as b, listWorkspaceDirs as c, emptyWorkspaceDir as d, withIdleWorkspace as f, eraseParkedIosSim as g, eraseParkedAvd as h, collectOrphanedWorkspaces as i, withManagedTunnelLock as j, withManagedRemoteWorktreeLock as k, rootPresence as l, runningBundleInstances as m, WORKSPACE_OUTPUT_DIRS as n, deleteOrphanedWorkspaces as o, workspaceInUse as p, clearWorkspaceOutputs as r, isInsideWorkspaces as s, REBUILD_COST as t, sizeText as u, teardownOwnedAvd as v, takeGcResults as w, teardownParkedAvd as x, teardownOwnedBrowser as y };