stim 1.19.0 → 1.20.0

package/dist/{doctor-PRJH94v6.mjs → doctor-DPAqhVCK.mjs}

@@ -1,246 +1,143 @@
-import { t as getExecutor } from "./exec-i8GDPwq9.mjs";
-import { d as quotedPath, f as refuseNoProject, l as phaseLine, u as plural } from "./command-output-Bt8ygHE7.mjs";
-import { _ as loadConfig$1, p as getProject, s as configCorruptRepair, u as getConcurrencyLimits } from "./config-DC5jEtd1.mjs";
-import { _ as workspaceDerivedData, d as sharedBuildCache } from "./workspace-state-CR9X86xJ.mjs";
-import { f as appProjectProblem, h as isPackageResolvable, p as detectIsExpo, r as findProjectRoot } from "./project-B5eQ1USs.mjs";
-import { B as settingShapeErrors, Et as compilerCacheFallbackMessage, G as webSettings, H as settingsLayers, I as resolveSettings, M as remoteAndroidSetting, Ot as resolveOptimizations, P as remoteIosSetting, R as settingOrigin, St as makeTemporaryDirectory, W as unknownSettingKeys, et as dirtyFingerprintFiles, gt as resolveSourceCheckout, i as SETTING_SHAPE_REMEDY, k as projectOptimizations, lt as listWorktrees, mt as repoRoot, n as PATH_SETTINGS, nt as gitCommonDir, r as SETTINGS_WITH_RESOLVE_TIME_FALLBACK, ut as locallyKnownUpstream, v as iosSimSlimProfileSetting, wt as temporaryRoot, xt as filesystemDevice, y as mergeSettingsLayers } from "./settings-CxgngUZk.mjs";
-import { St as inspectWatchmanMemory, a as inspectBudget, n as budgetLine } from "./budget-Dz-kyXLv.mjs";
-import { N as listBuildSlots } from "./workspaces-Djb2gfi9.mjs";
-import { C as diffFingerprintSources, D as fingerprintProject, h as listBuildLocks } from "./device-lease-Cu7PtQpZ.mjs";
-import { D as hostSystemImageArch, ft as parkedMaxSetting, o as androidHome, ot as POOL_SETTING_REMEDY } from "./android-BdQC6zs1.mjs";
-import { M as readHostMemoryPressure, b as pickDefaultIosCreation, j as hostMemoryPressureAdvice, l as iosRuntimeMatches, m as listIosRuntimes } from "./ios-BWbHFZVz.mjs";
-import { L as realIo, P as inspectDeviceHostMachines, j as inspectBuildMachines, o as offloadCheck, u as simulatorRuntime } from "./client-CuUo8Nvg.mjs";
-import { i as countLiveOwnedDevices } from "./device-capacity-BoN1jQkO.mjs";
-import { a as projectCmakeLauncher } from "./manifest-CX0d1IkZ.mjs";
-import { A as bundlerPin, i as macosToolchain, j as podInstallCommand, n as androidToolchain, r as iosToolchain, t as androidRequirements, x as detectXcodeMajor } from "./toolchain-C3xSoyUl.mjs";
-import { f as resolveEasCliBin, i as checkEasAuth$1, l as ownerFromConfig, u as providerFromConfig } from "./remote-cache-N3hAEaAL.mjs";
-import { _ as androidPathRoomMessage, a as apkOutputsDir, c as ccacheEnabled, g as androidPathRoom, p as androidSdkRefusal, v as androidPathRoomRemedy } from "./device-ios-B2ruohE-.mjs";
-import { _ as MIN_EAS_CLI_SIMULATOR_VERSION, s as readInstalledEasCliVersion, v as easCliSupport, y as easCliUpgradeRemedy } from "./device-remote-B5GiUifk.mjs";
-import { n as inspectStimVersions, t as compareStimVersions } from "./stim-installations-DbmUjsLv.mjs";
-import { n as simslimIsOnPath, r as MIN_EAS_CLI_BUILD_DOWNLOAD_VERSION } from "./simslim-D9LkJxIO.mjs";
-import { r as resolveAndroidCompilerCache, t as readAndroidCasToolchain } from "./android-cas-C87geAg-.mjs";
-import { g as resolveRuntime, m as resolveDeviceType } from "./support-CNqYkV0y.mjs";
-import { n as hasInstalledDependencies, r as installedNpmTreeIsValid, t as dependencyState } from "./dependency-state-DKaS1OM9.mjs";
-import { a as findChrome, t as CHROME_INSTALL_REMEDY } from "./chrome-BTUOo8p2.mjs";
-import { r as maintenanceStatus, t as maintenanceLine } from "./status-BEeL6IKz.mjs";
-import { a as writeIgnoreDirs, i as watchedCheckouts, n as inspectNestedWorktrees, r as nestedWorktreeFinding, s as recordDoctorRun } from "./doctor-watchman-wZhyTdp4.mjs";
+import { t as getExecutor } from "./exec-B81Qodjn.mjs";
+import { _ as loadConfig$1, s as configCorruptRepair, u as getConcurrencyLimits } from "./config-D0LhTY3S.mjs";
+import { B as remoteAndroidSetting, D as mergeSettingsLayers, Et as repoRoot, G as resolveIosProjectDir, H as remoteIosSetting, I as projectSettingsContext, It as temporaryRoot, Nt as filesystemDevice, Ot as resolveSourceCheckout, Pt as makeTemporaryDirectory, Q as settingShapeErrors, St as locallyKnownUpstream, T as iosSimSlimProfileSetting, U as resolveAndroidLayout, X as settingOrigin, a as SETTING_SHAPE_REMEDY, et as settingsLayers, ft as dirtyFingerprintFiles, i as SETTINGS_WITH_RESOLVE_TIME_FALLBACK, m as defaultAndroidLayout, mt as gitCommonDir, nt as unknownSettingKeys, q as resolveSettings, r as PATH_SETTINGS, rt as webSettings, xt as listWorktrees } from "./settings-Bbztm4oV.mjs";
+import { C as diffFingerprintSources, D as fingerprintProject, h as listBuildLocks } from "./device-lease-DHOBXGgS.mjs";
+import { b as workspaceDerivedData, m as sharedBuildCache } from "./workspace-state-CSIFuuDa.mjs";
+import { d as quotedPath, u as plural } from "./command-output-BjPN99ZB.mjs";
+import { S as resolvePackageJson, _ as detectIsExpo, g as appProjectProblem, y as isPackageResolvable } from "./project-B8_duAzW.mjs";
+import { D as hostSystemImageArch, at as POOL_SETTING_REMEDY, dt as parkedMaxSetting, o as androidHome } from "./android-BsYNR81W.mjs";
+import { I as listBuildSlots } from "./workspaces-D2xSHBDY.mjs";
+import { l as realIo } from "./tailnet-CoJUb2tB.mjs";
+import { p as resolveOptimizations, u as compilerCacheFallbackMessage } from "./errors-DzkMYh8Q.mjs";
+import { f as resolveEasCliBin, i as checkEasAuth$1, l as ownerFromConfig, u as providerFromConfig } from "./remote-cache-Bsts6f6Y.mjs";
+import { M as hostMemoryPressureAdvice, P as readHostMemoryPressure } from "./ios-CXLIUxXJ.mjs";
+import { i as projectCmakeLauncher } from "./ccache-CjHQ5F8g.mjs";
+import { r as androidSdkRefusal } from "./gradle-C2OEKCCI.mjs";
+import { L as podInstallCommand } from "./toolchain-DqyDXs30.mjs";
+import { i as countLiveOwnedDevices } from "./device-capacity-Ca_ke1LE.mjs";
+import { d as androidPathRoomRemedy, i as ccacheEnabled, l as androidPathRoom, t as apkOutputsDir, u as androidPathRoomMessage } from "./react-native-build-oAw6gQeW.mjs";
+import { r as resolveAndroidCompilerCache, t as readAndroidCasToolchain } from "./android-cas-DCAuXryb.mjs";
+import { g as easCliUpgradeRemedy, h as easCliSupport, m as MIN_EAS_CLI_SIMULATOR_VERSION, s as readInstalledEasCliVersion } from "./device-remote-Bmg42063.mjs";
+import { t as MIN_EAS_CLI_BUILD_DOWNLOAD_VERSION } from "./eas-build-Dw_ec2Km.mjs";
+import { n as simslimIsOnPath } from "./simslim-ChMfe8rg.mjs";
+import { n as hasInstalledDependencies, r as installedNpmTreeIsValid, t as dependencyState } from "./dependency-state-B2m8eqsS.mjs";
+import { a as findChrome, t as CHROME_INSTALL_REMEDY } from "./chrome-Dp2lMLBe.mjs";
 import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync, rmSync } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { dirname as dirname$1, isAbsolute as isAbsolute$1, join as join$1, relative as relative$1, resolve as resolve$1, sep as sep$1 } from "path";
-import { isJsonObject, maintenanceNdjsonFile, readHostedAppMetadata, readHostedSessions, readJsonObject, readStats, settingDefinition } from "@stim-cli/core/state";
-import chalk from "chalk";
-import { existsSync as existsSync$1, lstatSync as lstatSync$1, mkdirSync as mkdirSync$1, readFileSync as readFileSync$1, readdirSync as readdirSync$1, realpathSync as realpathSync$1, renameSync as renameSync$1, rmSync as rmSync$1, writeFileSync as writeFileSync$1 } from "fs";
-import { InvalidArgumentError } from "commander";
-import { homedir } from "os";
+import { basename as basename$1, dirname as dirname$1, isAbsolute as isAbsolute$1, join as join$1, relative as relative$1, resolve as resolve$1, sep as sep$1 } from "path";
+import { isJsonObject, readJsonObject, readStats, settingDefinition } from "@stim-cli/core/state";
+import { existsSync as existsSync$1, lstatSync as lstatSync$1, readFileSync as readFileSync$1, readdirSync as readdirSync$1, realpathSync as realpathSync$1, rmSync as rmSync$1 } from "fs";
 import * as expoFingerprint from "@expo/fingerprint";
-//#region src/diagnostics/sandbox.ts
-/**
-* What a sandboxed harness has to permit for Stim to work: its state
-* directory, the XPC service simctl talks to, and the port adb's server binds.
-*/
-function sandboxAllowance(stimHome = "~/.stim") {
-	return {
-		allowWrite: [stimHome],
-		allowMachLookup: ["com.apple.coresimulator.*"],
-		allowLocalBinding: true
-	};
-}
-function detectHarness(env = process.env) {
-	if (env.CLAUDECODE || env.CLAUDE_CODE_ENTRYPOINT) return "claude-code";
-	if (Object.keys(env).some((k) => k.startsWith("CODEX_"))) return "codex";
-	return null;
-}
-function expandHome(value, home) {
-	const v = value.trim();
-	if (v === "~" || v === "$HOME") return home;
-	if (v.startsWith("~/")) return join$1(home, v.slice(2));
-	if (v.startsWith("$HOME/")) return join$1(home, v.slice(6));
-	return v;
-}
-/**
-* Whether the sandbox actually stops Stim, rather than whether a harness that
-* can sandbox is present: a session with its sandbox off exports the same
-* variables as one with it on, so only a write says which this is.
-*/
-function sandboxBlocksStimHome(stimHome, home = homedir()) {
-	const dir = expandHome(stimHome, home);
-	const probe = join$1(dir, `.probe-${process.pid}-${Math.random().toString(36).slice(2)}`);
+//#region src/diagnostics/doctor-config.ts
+function readMachineSettings(context) {
 	try {
-		mkdirSync$1(dir, { recursive: true });
-		writeFileSync$1(probe, "");
-		rmSync$1(probe, { force: true });
-		return false;
-	} catch (err) {
-		const code = err.code;
-		return code === "EPERM" || code === "EACCES";
+		const layers = settingsLayers(context);
+		return {
+			settings: mergeSettingsLayers(layers.map((layer) => layer.settings)),
+			layers,
+			corrupt: null
+		};
+	} catch (error) {
+		if (error.code !== "STIM_CONFIG_CORRUPT") throw error;
+		return {
+			settings: {},
+			layers: [],
+			corrupt: {
+				level: "note",
+				title: "The Stim config is not a valid JSON object",
+				detail: `${String(error.message).split("\n")[0]}. Every setting and device record lives in that file, so no other machine-level check can run until it parses.`,
+				fix: configCorruptRepair()
+			}
+		};
 	}
 }
-/** Where a per-user, gitignored Claude Code settings file belongs for this project. */
-function claudeLocalSettingsPath(root) {
-	return join$1(root, ".claude", "settings.local.json");
-}
-/** Every settings file that may already carry the allowance, most local first. */
-function allowanceSearchPaths(settingsRoot, home = homedir()) {
-	return [
-		claudeLocalSettingsPath(settingsRoot),
-		join$1(settingsRoot, ".claude", "settings.json"),
-		join$1(home, ".claude", "settings.json")
-	];
-}
-function isPlainObject(value) {
-	return !!value && typeof value === "object" && !Array.isArray(value);
-}
-/**
-* Absent, unreadable and present-but-not-an-object are three different states.
-* Collapsing them loses the one distinction that matters before a write: a
-* file whose contents did not parse still holds settings we must not destroy.
-*/
-function readSettings(path) {
-	let raw;
-	try {
-		raw = readFileSync$1(path, "utf-8");
-	} catch (err) {
-		return err.code === "ENOENT" ? { kind: "absent" } : { kind: "invalid" };
-	}
-	try {
-		const parsed = JSON.parse(raw);
-		return isPlainObject(parsed) ? {
-			kind: "object",
-			value: parsed
-		} : { kind: "invalid" };
-	} catch {
-		return { kind: "invalid" };
+const PATH_SETTINGS_TRIMMED_BY_THEIR_CONSUMER = /* @__PURE__ */ new Set(["android.keystore"]);
+function checkMachineSettings({ settings, layers, projectRoot, optimizations = null, reportedElsewhere = [], exists = existsSync, env = process.env }) {
+	const findings = [];
+	const fallback = optimizations?.android.compilerCacheFallback ?? null;
+	const fallbackEntry = fallback ? settingOrigin(layers, fallback.key) : null;
+	const attributed = fallback && (fallback.fromEnvironment || fallbackEntry) ? fallback : null;
+	const reported = attributed?.manifest && !exists(attributed.manifest) ? null : attributed;
+	const skip = new Set(reportedElsewhere);
+	if (reported) skip.add(reported.key);
+	if (!optimizations) for (const key of SETTINGS_WITH_RESOLVE_TIME_FALLBACK) skip.add(key);
+	for (const key of PATH_SETTINGS) {
+		const variable = settingDefinition(key)?.env;
+		if (skip.has(key) || variable && skip.has(variable)) continue;
+		const override = variable ? env[variable] : void 0;
+		if (variable && override) {
+			const named = missingPath(override, projectRoot, exists);
+			if (named) findings.push({
+				level: "note",
+				title: "An environment variable points at a path that is not there",
+				detail: `${variable} in the environment names ${named}, which does not exist.`,
+				fix: `Point ${variable} at the path it should name, or unset it.`
+			});
+			continue;
+		}
+		const entry = settingOrigin(layers, key);
+		if (!entry || typeof entry.value !== "string") continue;
+		const named = missingPath(entry.value, projectRoot, exists, PATH_SETTINGS_TRIMMED_BY_THEIR_CONSUMER.has(key));
+		if (!named) continue;
+		findings.push({
+			level: "note",
+			title: "A setting points at a path that is not there",
+			detail: `${key} in ${entry.file} names ${named}, which does not exist.`,
+			fix: `Point ${key} at the path it should name, or remove it from ${entry.file}.`
+		});
 	}
-}
-function nested(source, ...keys) {
-	let cursor = source;
-	for (const key of keys) {
-		if (!isPlainObject(cursor)) return void 0;
-		cursor = cursor[key];
+	if (reported && optimizations) findings.push(compilerCacheFinding({
+		fallback: reported,
+		optimizations,
+		file: fallbackEntry?.file ?? null
+	}));
+	for (const key of unknownSettingKeys(settings)) {
+		const file = settingOrigin(layers, key)?.file ?? null;
+		findings.push({
+			level: "note",
+			title: "A key in the config is inert",
+			detail: `${key}${file ? ` in ${file}` : ""} is not read by Stim, so its value changes nothing.`,
+			fix: `Remove ${key}${file ? ` from ${file}` : ""}, or run \`stim guide settings\` for the name that replaced it.`
+		});
 	}
-	return cursor;
-}
-/** Whether an allowWrite entry covers the Stim home, including as a parent. */
-function covers(entry, target, home) {
-	const posix = (value) => {
-		const expanded = expandHome(value, home);
-		return sep$1 === "/" ? expanded : expanded.replaceAll(sep$1, "/");
-	};
-	const e = posix(entry).replace(/\/+\*+$/, "").replace(/\/+$/, "");
-	const t = posix(target).replace(/\/+$/, "");
-	return e === t || t.startsWith(`${e}/`);
+	return findings;
 }
-/**
-* Which parts of the allowance the settings files already carry. Any file may
-* supply any part, so a project that solved this in one place is not asked to
-* repeat it in another.
-*/
-function missingAllowance(paths, stimHome = "~/.stim", home = homedir()) {
-	const files = paths.map((p) => {
-		const read = readSettings(p);
-		return read.kind === "object" ? read.value : null;
-	});
-	const list = (...keys) => files.flatMap((f) => {
-		const value = nested(f, ...keys);
-		return Array.isArray(value) ? value.map(String) : [];
+function compilerCacheFinding({ fallback, optimizations, file }) {
+	const detail = compilerCacheFallbackMessage({
+		fallback,
+		compilerCache: optimizations.android.compilerCache === "none" ? "none" : "ccache",
+		file
 	});
-	const missing = [];
-	if (!list("sandbox", "filesystem", "allowWrite").some((w) => covers(w, stimHome, home))) missing.push("sandbox.filesystem.allowWrite");
-	if (!list("sandbox", "network", "allowMachLookup").some((l) => l.toLowerCase().startsWith("com.apple.coresimulator"))) missing.push("sandbox.network.allowMachLookup");
-	if (!files.some((f) => nested(f, "sandbox", "network", "allowLocalBinding") === true)) missing.push("sandbox.network.allowLocalBinding");
-	return missing;
-}
-/**
-* The key that stops a merge, or null when the settings can take the
-* allowance. A value of an unexpected shape is someone else's, and rewriting
-* it would lose whatever it means.
-*/
-function unmergeableKey(settings) {
-	if (!("sandbox" in settings)) return null;
-	if (!isPlainObject(settings.sandbox)) return "sandbox";
-	const sandbox = settings.sandbox;
-	if ("filesystem" in sandbox && !isPlainObject(sandbox.filesystem)) return "sandbox.filesystem";
-	if ("network" in sandbox && !isPlainObject(sandbox.network)) return "sandbox.network";
-	return null;
-}
-/** Merge the allowance into a settings object, leaving everything else as it is. */
-function withAllowance(settings, allowance) {
-	const next = { ...settings };
-	const sandbox = isPlainObject(next.sandbox) ? { ...next.sandbox } : {};
-	const filesystem = isPlainObject(sandbox.filesystem) ? { ...sandbox.filesystem } : {};
-	const network = isPlainObject(sandbox.network) ? { ...sandbox.network } : {};
-	const writes = Array.isArray(filesystem.allowWrite) ? filesystem.allowWrite.map(String) : [];
-	const lookups = Array.isArray(network.allowMachLookup) ? network.allowMachLookup.map(String) : [];
-	filesystem.allowWrite = [.../* @__PURE__ */ new Set([...writes, ...allowance.allowWrite])];
-	network.allowMachLookup = [.../* @__PURE__ */ new Set([...lookups, ...allowance.allowMachLookup])];
-	network.allowLocalBinding = true;
-	sandbox.filesystem = filesystem;
-	sandbox.network = network;
-	next.sandbox = sandbox;
-	return next;
-}
-/**
-* Write the allowance into a Claude Code local settings file, creating it if
-* needed. Refuses whenever the current contents cannot be read back, because
-* the merge would replace settings rather than extend them.
-*/
-function applyClaudeAllowance(path, allowance) {
-	const read = readSettings(path);
-	if (read.kind === "invalid") return {
-		status: "refused",
-		reason: `${path} is not a plain JSON object, so Stim cannot merge into it without losing what is there. Comments make a settings file unparseable here even though Claude Code accepts them.`
-	};
-	const existing = read.kind === "object" ? read.value : {};
-	const blocker = unmergeableKey(existing);
-	if (blocker) return {
-		status: "refused",
-		reason: `${path} holds a "${blocker}" that is not an object, so Stim cannot merge into it without discarding that value.`
+	if (fallback.key === "optimizations.android.compilerCache") return {
+		level: "note",
+		title: "A setting needs a companion this config does not supply",
+		detail,
+		fix: "Set optimizations.android.casToolchain to the toolchain JSON manifest, or set optimizations.android.compilerCache to ccache."
 	};
-	mkdirSync$1(dirname$1(path), { recursive: true });
-	const tmp = `${path}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
-	writeFileSync$1(tmp, `${JSON.stringify(withAllowance(existing, allowance), null, 2)}\n`);
-	try {
-		renameSync$1(tmp, path);
-	} catch (err) {
-		rmSync$1(tmp, { force: true });
-		throw err;
-	}
-	return { status: read.kind === "absent" ? "created" : "updated" };
-}
-/**
-* The finding a sandboxed session should see: what fails, and the one command
-* that fixes it where the harness has a per-path allowance.
-*/
-function sandboxFinding(settingsRoot, { env = process.env, home = homedir(), stimHome = process.env.STIM_HOME || "~/.stim", blocked } = {}) {
-	const harness = detectHarness(env);
-	if (!harness) return null;
-	if (!(blocked ?? sandboxBlocksStimHome(stimHome, home))) return null;
-	const symptoms = `Writes to ${stimHome} raise EPERM on a directory you can write, the simulator service looks dead, and the adb server looks unreachable.`;
-	const title = "This session sandboxes shell commands, and Stim is not allowed through";
-	if (harness === "codex") return {
-		level: "cost",
+	const title = fallback.fromEnvironment ? "An environment variable holds a value Stim cannot use" : "A setting holds a value Stim cannot use";
+	if (fallback.manifest) return {
+		level: "note",
 		title,
-		detail: `${symptoms} Codex has one sandbox setting and no per-path allowance, so there is nothing to add.`,
-		fix: "Run Stim with the sandbox off, or start Codex with `codex -s danger-full-access`, which turns the whole sandbox off rather than allowing these three. See `stim guide errors sandbox`."
-	};
-	const paths = allowanceSearchPaths(settingsRoot, home);
-	const missing = missingAllowance(paths, stimHome, home);
-	if (missing.length === 0) return {
-		level: "cost",
-		title: "Stim is allowed through this sandbox, but the session has not picked it up",
-		detail: `${symptoms} ${paths[0]} already grants all three, so the settings were read before they were written.`,
-		fix: "Restart the session for the allowance to take effect."
+		detail,
+		fix: `Repair ${fallback.manifest}, or ${fallback.fromEnvironment ? `unset ${fallback.key}` : `remove ${fallback.key}${file ? ` from ${file}` : ""}`}.`
 	};
 	return {
-		level: "cost",
+		level: "note",
 		title,
-		detail: `${symptoms} Missing: ${missing.join(", ")}.`,
-		fix: `Run \`stim doctor --fix\` to write sandbox.filesystem.allowWrite, sandbox.network.allowMachLookup, and sandbox.network.allowLocalBinding into ${paths[0]}, merged with what is there, or add the missing keys by hand. See \`stim guide errors sandbox\`.`
+		detail,
+		fix: fallback.fromEnvironment ? "Point STIM_ANDROID_CAS_TOOLCHAIN at an absolute path to the toolchain JSON manifest, or unset it." : "Set optimizations.android.casToolchain to an absolute path to the toolchain JSON manifest, or remove it."
 	};
 }
+function missingPath(value, projectRoot, exists, trim = false) {
+	const opened = trim ? value.trim() : value;
+	if (opened.trim() === "") return null;
+	const path = isAbsolute(opened) ? opened : resolve(projectRoot, opened);
+	if (exists(path)) return null;
+	return opened === opened.trim() ? path : JSON.stringify(path);
+}
 //#endregion
 //#region src/diagnostics/doctor-storage.ts
-function checkStorageLayout(projectRoot, { platform, host = process.platform, device = filesystemDevice, stagingRoot = temporaryRoot } = {}) {
+function checkStorageLayout(projectRoot, { platform, iosProjectPath = "ios", androidLayout = defaultAndroidLayout(projectRoot), host = process.platform, device = filesystemDevice, stagingRoot = temporaryRoot, scope } = {}) {
 	const findings = [];
 	const temporaryFix = "Unset STIM_TMPDIR / machine tempDir to select same-volume staging automatically, or point the override at a writable directory on the relevant volume outside Git working trees.";
 	const check = (operation, paths, fix) => {
@@ -253,18 +150,21 @@ function checkStorageLayout(projectRoot, { platform, host = process.platform, de
 		});
 	};
 	try {
-		const target = repoRoot(projectRoot) ?? projectRoot;
-		const source = resolveSourceCheckout(target);
-		check("Worktree copy", ["path" in source ? source.path : target, target], "Keep the source checkout and linked worktree on the same volume to share file blocks when warming.");
 		const cache = sharedBuildCache();
-		check("Cached app/APK staging", [cache, stagingRoot(join(cache, "artifact.app"))], temporaryFix);
+		if (scope !== "native") {
+			const target = repoRoot(projectRoot) ?? projectRoot;
+			const source = resolveSourceCheckout(target);
+			check("Worktree copy", ["path" in source ? source.path : target, target], "Keep the source checkout and linked worktree on the same volume to share file blocks when warming.");
+			check("Cached app/APK staging", [cache, stagingRoot(join(cache, "artifact.app"))], temporaryFix);
+		}
 		const cacheFix = "Place STIM_BUILD_CACHE / machine caches.buildCache on the build-output volume, or accept the full-copy cost of keeping the cache on a separate volume.";
-		if ((platform === "ios" || platform !== "android" && existsSync(join(projectRoot, "ios"))) && host === "darwin") {
+		const localIos = platform === "ios" || platform !== "android" && existsSync(join(projectRoot, iosProjectPath));
+		if (scope !== "shared" && localIos && host === "darwin") {
 			const output = join(workspaceDerivedData(projectRoot), "Build", "Products");
 			check("iOS build-cache storage", [output, cache], cacheFix);
 			check("iOS device app staging", [output, stagingRoot(join(output, "artifact.app"))], temporaryFix);
 		}
-		if (platform === "android" || platform !== "ios" && existsSync(join(projectRoot, "android"))) check("Android build-cache storage", [apkOutputsDir(projectRoot), cache], cacheFix);
+		if (scope !== "shared" && (platform === "android" || platform !== "ios" && existsSync(androidLayout.gradleRoot))) check("Android build-cache storage", [apkOutputsDir(androidLayout), cache], cacheFix);
 	} catch (error) {
 		findings.push({
 			level: "cost",
@@ -347,8 +247,8 @@ function parseIosDebugArchitectures(output) {
 		unknown: report.unknown || !inspected
 	};
 }
-function inspectIosDebugArchitectures(projectRoot) {
-	const iosRoot = join(projectRoot, "ios");
+function inspectIosDebugArchitectures(projectRoot, iosProjectPath = "ios") {
+	const iosRoot = join(projectRoot, iosProjectPath);
 	if (!existsSync(iosRoot)) return [];
 	const findings = [];
 	const unknown = [];
@@ -425,8 +325,8 @@ function children(path) {
 		throw error;
 	}
 }
-function moduleRoots(root) {
-	const modules = [join(root, "android", "app")];
+function moduleRoots(root, layout) {
+	const modules = [layout.moduleDir];
 	const dependencies = join(root, "node_modules");
 	for (const name of children(dependencies)) {
 		if (name.startsWith(".")) continue;
@@ -448,8 +348,8 @@ function cacheFiles(base, depth = 0) {
 	}
 	return files;
 }
-function readCxxLauncherStates(root) {
-	return moduleRoots(root).flatMap((module) => cacheFiles(join(module, ".cxx")).map((path) => ({
+function readCxxLauncherStates(root, layout = defaultAndroidLayout(root)) {
+	return moduleRoots(root, layout).flatMap((module) => cacheFiles(join(module, ".cxx")).map((path) => ({
 		path: relative(root, path),
 		launcher: parseCmakeCacheLauncher(readFileSync(path, "utf8"))
 	})));
@@ -468,10 +368,11 @@ function contained(root, path) {
 	const rel = relative(root, path);
 	return rel !== "" && rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);
 }
-function selectedCompilerCache(root) {
+function selectedCompilerCache(settings) {
+	if (!settings) return null;
 	try {
 		return resolveAndroidCompilerCache({
-			optimizations: projectOptimizations(root),
+			optimizations: resolveOptimizations(settings),
 			use: readAndroidCasToolchain
 		}).optimizations.android.compilerCache;
 	} catch {
@@ -482,16 +383,16 @@ function selectedCompilerCache(root) {
 * Keep every native build stopped until repair finishes. The supplemental
 * cache-lock check cannot detect uncached builds, release-swap fallback, or direct Gradle.
 */
-function repairCxxLauncherState(root) {
+function repairCxxLauncherState(root, settings, layout = defaultAndroidLayout(root)) {
 	const canonicalRoot = realpathSync(root);
 	const result = {
 		removed: [],
 		refused: []
 	};
-	if (selectedCompilerCache(root) !== "ccache") return result;
+	if (selectedCompilerCache(settings) !== "ccache") return result;
 	if (!getExecutor().findExecutable("ccache")) return result;
-	const appOverrides = declaredLauncher(join(root, "android", "app"));
-	const targets = readCxxLauncherStates(root).filter(({ launcher }) => {
+	const appOverrides = declaredLauncher(layout.moduleDir);
+	const targets = readCxxLauncherStates(root, layout).filter(({ launcher }) => {
 		if (!launcher) return true;
 		const command = launcher.split(";")[0]?.trim();
 		return Boolean(command && isAbsolute(command) && basename(command) === "ccache" && !existsSync(command));
@@ -545,114 +446,6 @@ function repairCxxLauncherState(root) {
 	return result;
 }
 //#endregion
-//#region src/diagnostics/doctor-config.ts
-function readMachineSettings(context) {
-	try {
-		const layers = settingsLayers(context);
-		return {
-			settings: mergeSettingsLayers(layers.map((layer) => layer.settings)),
-			layers,
-			corrupt: null
-		};
-	} catch (error) {
-		if (error.code !== "STIM_CONFIG_CORRUPT") throw error;
-		return {
-			settings: {},
-			layers: [],
-			corrupt: {
-				level: "note",
-				title: "The Stim config is not a valid JSON object",
-				detail: `${String(error.message).split("\n")[0]}. Every setting and device record lives in that file, so no other machine-level check can run until it parses.`,
-				fix: configCorruptRepair()
-			}
-		};
-	}
-}
-const PATH_SETTINGS_TRIMMED_BY_THEIR_CONSUMER = /* @__PURE__ */ new Set(["android.keystore"]);
-function checkMachineSettings({ settings, layers, projectRoot, optimizations = null, reportedElsewhere = [], exists = existsSync, env = process.env }) {
-	const findings = [];
-	const fallback = optimizations?.android.compilerCacheFallback ?? null;
-	const fallbackEntry = fallback ? settingOrigin(layers, fallback.key) : null;
-	const attributed = fallback && (fallback.fromEnvironment || fallbackEntry) ? fallback : null;
-	const reported = attributed?.manifest && !exists(attributed.manifest) ? null : attributed;
-	const skip = new Set(reportedElsewhere);
-	if (reported) skip.add(reported.key);
-	if (!optimizations) for (const key of SETTINGS_WITH_RESOLVE_TIME_FALLBACK) skip.add(key);
-	for (const key of PATH_SETTINGS) {
-		const variable = settingDefinition(key)?.env;
-		if (skip.has(key) || variable && skip.has(variable)) continue;
-		const override = variable ? env[variable] : void 0;
-		if (variable && override) {
-			const named = missingPath(override, projectRoot, exists);
-			if (named) findings.push({
-				level: "note",
-				title: "An environment variable points at a path that is not there",
-				detail: `${variable} in the environment names ${named}, which does not exist.`,
-				fix: `Point ${variable} at the path it should name, or unset it.`
-			});
-			continue;
-		}
-		const entry = settingOrigin(layers, key);
-		if (!entry || typeof entry.value !== "string") continue;
-		const named = missingPath(entry.value, projectRoot, exists, PATH_SETTINGS_TRIMMED_BY_THEIR_CONSUMER.has(key));
-		if (!named) continue;
-		findings.push({
-			level: "note",
-			title: "A setting points at a path that is not there",
-			detail: `${key} in ${entry.file} names ${named}, which does not exist.`,
-			fix: `Point ${key} at the path it should name, or remove it from ${entry.file}.`
-		});
-	}
-	if (reported && optimizations) findings.push(compilerCacheFinding({
-		fallback: reported,
-		optimizations,
-		file: fallbackEntry?.file ?? null
-	}));
-	for (const key of unknownSettingKeys(settings)) {
-		const file = settingOrigin(layers, key)?.file ?? null;
-		findings.push({
-			level: "note",
-			title: "A key in the config is inert",
-			detail: `${key}${file ? ` in ${file}` : ""} is not read by Stim, so its value changes nothing.`,
-			fix: `Remove ${key}${file ? ` from ${file}` : ""}, or run \`stim guide settings\` for the name that replaced it.`
-		});
-	}
-	return findings;
-}
-function compilerCacheFinding({ fallback, optimizations, file }) {
-	const detail = compilerCacheFallbackMessage({
-		fallback,
-		compilerCache: optimizations.android.compilerCache === "none" ? "none" : "ccache",
-		file
-	});
-	if (fallback.key === "optimizations.android.compilerCache") return {
-		level: "note",
-		title: "A setting needs a companion this config does not supply",
-		detail,
-		fix: "Set optimizations.android.casToolchain to the toolchain JSON manifest, or set optimizations.android.compilerCache to ccache."
-	};
-	const title = fallback.fromEnvironment ? "An environment variable holds a value Stim cannot use" : "A setting holds a value Stim cannot use";
-	if (fallback.manifest) return {
-		level: "note",
-		title,
-		detail,
-		fix: `Repair ${fallback.manifest}, or ${fallback.fromEnvironment ? `unset ${fallback.key}` : `remove ${fallback.key}${file ? ` from ${file}` : ""}`}.`
-	};
-	return {
-		level: "note",
-		title,
-		detail,
-		fix: fallback.fromEnvironment ? "Point STIM_ANDROID_CAS_TOOLCHAIN at an absolute path to the toolchain JSON manifest, or unset it." : "Set optimizations.android.casToolchain to an absolute path to the toolchain JSON manifest, or remove it."
-	};
-}
-function missingPath(value, projectRoot, exists, trim = false) {
-	const opened = trim ? value.trim() : value;
-	if (opened.trim() === "") return null;
-	const path = isAbsolute(opened) ? opened : resolve(projectRoot, opened);
-	if (exists(path)) return null;
-	return opened === opened.trim() ? path : JSON.stringify(path);
-}
-//#endregion
 //#region src/diagnostics/doctor.ts
 function finding(level, title, detail, fix) {
 	return {
@@ -715,8 +508,8 @@ function brokenPodLinks(podsRoot) {
 		return [];
 	}
 }
-function hasIosWarmOutput(root) {
-	if (existsSync$1(join$1(root, "ios", "build"))) return true;
+function hasIosWarmOutput(root, iosRoot) {
+	if (existsSync$1(join$1(iosRoot, "build"))) return true;
 	const derivedData = workspaceDerivedData(root);
 	if (existsSync$1(join$1(derivedData, "Build", "Products"))) return true;
 	try {
@@ -802,8 +595,13 @@ function seedFindings(mainRoot, upstream) {
 	if (defaultBranch !== null && defaultBranch !== branch) findings.push(finding("note", `The source checkout is on ${branch}, not the default branch ${defaultBranch}`, `Every worktree warmed from here carries ${branch}'s dependencies. \`stim worktree warm --refresh\` warns and continues; it never switches a branch under another checkout.`, `Run \`git -C ${quotedRoot} checkout ${defaultBranch}\`.`));
 	return findings;
 }
-function checkMainCheckout(projectRoot, { npmTreeValid, brokenPods = void 0, upstream = void 0, linkedWorktrees = void 0, platform, localIos = platform !== "android" } = {}) {
+function checkMainCheckout(projectRoot, { npmTreeValid, brokenPods = void 0, upstream = void 0, linkedWorktrees = void 0, platform, localIos = platform !== "android", iosProjectPath = "ios", androidLayout = defaultAndroidLayout(projectRoot) } = {}) {
 	const mainRoot = mainCheckoutProjectRoot(projectRoot);
+	const mainAndroid = {
+		...androidLayout,
+		gradleRoot: join$1(mainRoot, relative$1(projectRoot, androidLayout.gradleRoot)),
+		moduleDir: join$1(mainRoot, relative$1(projectRoot, androidLayout.moduleDir))
+	};
 	const findings = [];
 	const dependencies = dependencyState(mainRoot);
 	if (dependencies) {
@@ -814,9 +612,10 @@ function checkMainCheckout(projectRoot, { npmTreeValid, brokenPods = void 0, ups
 			if ((npmTreeValid === void 0 ? installedNpmTreeIsValid(dependencies.root) : npmTreeValid) === false) findings.push(finding("cost", "The source checkout dependency tree is stale", `npm reports that ${dependencies.root}/node_modules does not match the project dependency graph. Copying it makes each worktree start from the same invalid state.`, `Run \`${installCommand}\` before creating native worktrees, or let \`stim worktree warm --refresh\` run it from a linked worktree.`));
 		}
 	}
-	const podfileLock = join$1(mainRoot, "ios", "Podfile.lock");
-	const podManifest = join$1(mainRoot, "ios", "Pods", "Manifest.lock");
-	const podsRoot = join$1(mainRoot, "ios", "Pods");
+	const iosRoot = join$1(mainRoot, iosProjectPath);
+	const podfileLock = join$1(iosRoot, "Podfile.lock");
+	const podManifest = join$1(iosRoot, "Pods", "Manifest.lock");
+	const podsRoot = join$1(iosRoot, "Pods");
 	if (localIos && existsSync$1(podfileLock)) {
 		let podsState = null;
 		if (!existsSync$1(podManifest)) podsState = "missing";
@@ -826,18 +625,16 @@ function checkMainCheckout(projectRoot, { npmTreeValid, brokenPods = void 0, ups
 			podsState = "stale";
 		}
 		if (podsState) {
-			const iosRoot = join$1(mainRoot, "ios");
 			const podCommand = `cd ${quotedPath(iosRoot)} && ${podInstallCommand(mainRoot)}`;
 			findings.push(finding("cost", `The source checkout CocoaPods state is ${podsState}`, `ios/Pods cannot be reused safely because its Manifest.lock ${podsState === "missing" ? "is absent" : "does not match ios/Podfile.lock"}.`, `Run \`${podCommand}\` before creating native worktrees, or let \`stim worktree warm --refresh\` run it from a linked worktree.`));
 		}
 		const broken = brokenPods === void 0 && existsSync$1(podsRoot) ? brokenPodLinks(podsRoot) : brokenPods || [];
 		if (broken.length) {
-			const iosRoot = join$1(mainRoot, "ios");
 			const podCommand = `cd ${quotedPath(iosRoot)} && ${podInstallCommand(mainRoot, "--clean-install")}`;
 			findings.push(finding("cost", "The source checkout CocoaPods state has broken links", `${broken.length} symlink${broken.length === 1 ? "" : "s"} under ios/Pods point to missing files. Worktrees copy these broken links and can fail during compilation. First: ${broken[0]}.`, `Run \`${podCommand}\` before creating native worktrees.`));
 		}
 	}
-	const coldPlatforms = [localIos && existsSync$1(join$1(mainRoot, "ios")) && !hasIosWarmOutput(mainRoot) ? "iOS" : null, platform !== "ios" && existsSync$1(join$1(mainRoot, "android")) && !existsSync$1(join$1(mainRoot, "android", "build")) && !existsSync$1(join$1(mainRoot, "android", "app", "build")) ? "Android" : null].filter((coldPlatform) => coldPlatform !== null);
+	const coldPlatforms = [localIos && existsSync$1(iosRoot) && !hasIosWarmOutput(mainRoot, iosRoot) ? "iOS" : null, platform !== "ios" && hasAndroidProject(mainAndroid) && !existsSync$1(join$1(mainAndroid.gradleRoot, "build")) && !existsSync$1(join$1(mainAndroid.moduleDir, "build")) ? "Android" : null].filter((coldPlatform) => coldPlatform !== null);
 	if (coldPlatforms.length) findings.push(finding("note", `The source checkout has no ${coldPlatforms.join(" or ")} warm build output`, "The shared Stim artifact or compilation cache can still be warm. Building the source checkout once gives later native worktrees the strongest warm starting point.", `When more native worktrees are expected, run \`stim start\`, \`stim ${coldPlatforms[0] === "iOS" ? "ios" : "android"}\`, and \`stim stop\` from ${mainRoot}.`));
 	if (linkedWorktrees === void 0 ? hasLinkedWorktree(projectRoot) : linkedWorktrees) findings.push(...seedFindings(mainRoot, upstream === void 0 ? locallyKnownUpstream(mainRoot) : upstream));
 	return findings;
@@ -882,11 +679,6 @@ function checkChrome({ usesWeb, chrome = findChrome }) {
 	if (!usesWeb() || chrome()) return null;
 	return finding("cost", "No Chrome is installed, so `stim web` cannot open this app", "`stim web` drives the installed Google Chrome or Chromium with a Stim-owned profile, and found neither in /Applications, ~/Applications, Program Files or on PATH. This project renders on the web (web.url is set, app.json lists the web platform, or react-native-web is installed).", CHROME_INSTALL_REMEDY);
 }
-function projectUsesWeb(projectRoot, settings, appConfig, platform) {
-	if (platform) return false;
-	const platforms = (appConfig?.expo ?? appConfig)?.platforms;
-	return webSettings(settings).url !== null || Array.isArray(platforms) && platforms.includes("web") || isPackageResolvable(projectRoot, "react-native-web");
-}
 function checkCcacheInstalled(onPath) {
 	if (onPath) return null;
 	return finding("cost", "ccache is not on PATH, so Android C++ recompiles in every worktree", "Stim resolves the launcher with a PATH lookup for `ccache` -- the same lookup the build itself uses -- and found nothing, so it passes no CMAKE_C_COMPILER_LAUNCHER / CMAKE_CXX_COMPILER_LAUNCHER to Gradle and every AGP CMake task compiles without one. Those tasks are uncacheable by Gradle, so not one C++ object crosses a worktree. Measured on trailhead (arm64, fresh worktree): 49.6s without the launcher against 34.2s with it.", "brew install ccache, then delete android/app/.cxx and node_modules/**/android/.cxx once so CMake reconfigures with the launcher. The shell that runs Stim must have the install location on PATH -- agent shells often lack /opt/homebrew/bin.");
@@ -934,6 +726,7 @@ function checkEasAuth({ provider, owner = null, auth = null } = {}) {
 	if (!status || status.ok) return null;
 	if (status.unknown) return finding("note", "Could not check the EAS session", `\`eas whoami\` did not give a definite answer (${status.unknown}), so whether this project's EAS build cache can be reached is unknown. Offline is the ordinary reason, and it is not a problem: the cache simply does not answer until the machine is back on the network.`, null);
 	if (status.code === "no-cli") return finding("cost", "The build cache provider is \"eas\", but no eas-cli is installed", "The provider shells out to `npx eas-cli` on every lookup and every upload. With no eas-cli resolvable, npx downloads one on the fly (slow, and a version nobody chose) or the call fails -- and the provider swallows that failure and returns null, so every build looks like a cache miss and nothing says why.", status.remedy ?? null);
+	if (status.code === "project-cli") return finding("note", "Did not check the EAS session: doctor runs only an eas-cli it can place outside the repository", `Doctor does not run code from the project tree, and \`eas whoami\` would run ${status.reason}, which is in the repository, in a node_modules/.bin above it, or in a checkout whose repository root git did not report. Builds run that eas-cli, so whether this project's EAS build cache can be reached is unchecked.`, status.remedy ?? null);
 	if (status.code === "logged-out") return finding("cost", "Not logged in to EAS, so the shared build cache never answers", "eas-build-cache-provider catches its own errors and returns null, so an unauthenticated lookup reads as a plain cache miss: every build compiles, nothing is uploaded for anybody else, and no line in any log mentions authentication.", status.remedy ?? null);
 	if (status.code === "wrong-account") return finding("note", `EAS is authenticated as ${status.account}, but this project's owner is ${status.owner}`, `A session on an account that does not cover ${status.owner} cannot read or write that account's builds, so the shared cache silently does nothing here. This is a NOTE and not a hard failure on purpose: \`eas whoami\` only enumerates accounts for some actors (a robot prints a display name that is not an account name at all), the list may be incomplete, and access is the server's decision rather than this list's. Confirm before acting on it.`, status.remedy ?? null);
 	return null;
@@ -942,9 +735,57 @@ function checkConcurrency({ maxBuilds = 0, maxDevices = 0, liveDevices = 0, acti
 	if (!maxBuilds && !maxDevices) return null;
 	return finding("note", "Concurrency limits are set", `${`maxBuilds ${maxBuilds || "unlimited"}, maxDevices ${maxDevices || "unlimited"}`}. Right now ${typeof liveDevices === "number" ? `${liveDevices} Stim device(s) are booted` : `the number of booted Stim devices is unknown (${liveDevices.unknown})`} and ${activeBuilds} build slot(s) are in use on this machine. At the device cap a new \`stim ios\`/\`android\` waits in FIFO order for 600s (--wait changes it; --no-wait refuses with STIM_AT_CAPACITY); at the build cap a compile waits for a free slot.`, null);
 }
+function easCliOutsideRepository(projectRoot) {
+	const found = (String(getExecutor().findExecutable("eas") ?? "").split("\n")[0] ?? "").trim();
+	const root = found ? repoRoot(projectRoot) : null;
+	if (!found || !root) return null;
+	try {
+		const repository = realpathSync$1(root);
+		const directory = realpathSync$1(dirname$1(resolve$1(found)));
+		const within = (path) => {
+			const rel = relative$1(repository, path);
+			return !isAbsolute$1(rel) && rel !== ".." && !rel.startsWith(`..${sep$1}`);
+		};
+		if (within(join$1(directory, basename$1(found))) || within(realpathSync$1(found))) return null;
+		for (let dir = realpathSync$1(projectRoot);; dir = dirname$1(dir)) {
+			if (directory === join$1(dir, "node_modules", ".bin")) return null;
+			if (dirname$1(dir) === dir) return found;
+		}
+	} catch {
+		return null;
+	}
+}
 function readProjectEasCliVersion(projectRoot) {
-	const bin = resolveEasCliBin(projectRoot);
-	return bin ? readInstalledEasCliVersion(bin.file, projectRoot) : null;
+	const packageJson = resolvePackageJson(projectRoot, "eas-cli");
+	if (packageJson) {
+		const version = readJsonObject(packageJson)?.version;
+		return typeof version === "string" ? `eas-cli/${version}` : null;
+	}
+	const onPath = easCliOutsideRepository(projectRoot);
+	return onPath ? readInstalledEasCliVersion(onPath, projectRoot) : null;
+}
+function doctorEasAuth({ projectRoot, owner }) {
+	const file = easCliOutsideRepository(projectRoot);
+	if (file) return checkEasAuth$1({
+		projectRoot,
+		owner,
+		resolveBin: () => ({
+			file,
+			source: "path"
+		})
+	});
+	const unchecked = resolveEasCliBin(projectRoot);
+	if (!unchecked) return checkEasAuth$1({
+		projectRoot,
+		owner,
+		resolveBin: () => null
+	});
+	return {
+		failed: true,
+		code: "project-cli",
+		reason: unchecked.file,
+		remedy: "Once you trust this checkout, run `npx eas whoami` in it. Or install eas-cli globally (`npm i -g eas-cli`) so doctor can check the session."
+	};
 }
 function checkRemoteDevice({ configured = null, daemonInEnv = false, agentDeviceOnPath = false, easCliResolvable = false, readEasCliVersion = () => null } = {}) {
 	if (!configured) return null;
@@ -1001,40 +842,22 @@ function configuredRemoteBackends(projectSettings, platform) {
 	const androidTarget = remoteAndroidSetting(projectSettings);
 	return [.../* @__PURE__ */ new Set([...platform !== "android" ? [iosTarget?.kind === "backend" ? iosTarget.backend : null] : [], ...platform !== "ios" ? [androidTarget?.kind === "backend" ? androidTarget.backend : null] : []])].filter((backend) => backend !== null);
 }
-function runDoctor(projectRoot, { readFile = readFileSync$1, xcodeMajor = null, easAuth = checkEasAuth$1, concurrency = getConcurrencyLimits, liveDevices = null, activeBuilds = null, remoteEnv = process.env, lookupAgentDevice = null, lookupEasCli = null, lookupSimSlim = null, memoryPressure = readHostMemoryPressure, lookupCcache = null, lookupChrome, tailnetStatus = realIo.status, now = Date.now, platform, host = process.platform } = {}) {
-	const localIos = platform !== "android" && host === "darwin";
-	const read = (rel) => {
-		const p = join$1(projectRoot, rel);
-		if (!existsSync$1(p)) return null;
-		try {
-			return readFile(p, "utf-8");
-		} catch {
-			return null;
-		}
-	};
-	const settingsRepoRoot = repoRoot(projectRoot) ?? projectRoot;
-	const machineSettings = readMachineSettings({
-		projectPath: projectRoot,
-		gitCommonDir: gitCommonDir(projectRoot),
-		repoRoot: settingsRepoRoot
-	});
-	if (machineSettings.corrupt) return [machineSettings.corrupt];
+function runDoctor(projectRoot, options = {}, inspectors = []) {
+	const { concurrency = getConcurrencyLimits, liveDevices = null, activeBuilds = null, lookupSimSlim = null, memoryPressure = readHostMemoryPressure, lookupChrome, platform, host = process.platform, platforms = ["ios", "android"], machineSettings = readMachineSettings(projectSettingsContext(projectRoot)) } = options;
+	const localIos = platforms.includes("ios") && platform !== "android" && host === "darwin";
 	const projectSettings = machineSettings.settings;
-	const pkg = readJsonObject(join$1(projectRoot, "package.json"));
-	const appConfig = readJsonObject(join$1(projectRoot, "app.json"));
-	const dynamicConfig = appConfig ? null : [
-		"app.config.ts",
-		"app.config.js",
-		"app.config.mjs"
-	].find((f) => existsSync$1(join$1(projectRoot, f))) || null;
-	const podfileProperties = readJsonObject(join$1(projectRoot, "ios", "Podfile.properties.json"));
-	const podfile = read(join$1("ios", "Podfile"));
-	const metroConfig = read("metro.config.js") ?? read("metro.config.cjs");
-	const isExpo = detectIsExpo(projectRoot);
-	const expoRange = (pkg?.dependencies)?.expo || "";
-	const sdkMajor = parseInt(String(expoRange).replace(/[^\d.]/g, "").split(".")[0] ?? "", 10) || null;
-	const provider = appConfig ? providerFromConfig(appConfig) : null;
-	const owner = appConfig ? ownerFromConfig(appConfig) : null;
+	const context = {
+		root: projectRoot,
+		options,
+		settings: projectSettings,
+		optimizations: null,
+		platforms,
+		repoRoot: options.repoRoot ?? null
+	};
+	if (machineSettings.corrupt) return {
+		findings: [machineSettings.corrupt],
+		context
+	};
 	const limits = typeof concurrency === "function" ? concurrency() : concurrency;
 	let concurrencyFinding = null;
 	if (limits && (limits.maxBuilds || limits.maxDevices)) concurrencyFinding = checkConcurrency({
@@ -1051,17 +874,9 @@ function runDoctor(projectRoot, { readFile = readFileSync$1, xcodeMajor = null,
 			use: readAndroidCasToolchain
 		}).optimizations;
 	} catch {}
-	const remoteBuildCache = optimizations?.buildCache && optimizations.remoteBuildCache;
-	const easFinding = remoteBuildCache && provider === "eas" ? checkEasAuth({
-		provider,
-		owner,
-		auth: easAuth({
-			projectRoot,
-			owner
-		})
-	}) : null;
+	context.optimizations = optimizations;
 	for (const poolPlatform of ["ios", "android"]) {
-		if (platform && platform !== poolPlatform) continue;
+		if (!platforms.includes(poolPlatform) || platform && platform !== poolPlatform) continue;
 		const poolSettingError = parkedMaxSetting(poolPlatform).error;
 		if (poolSettingError) settingShapeFindings.push(finding("cost", `The ${poolPlatform === "ios" ? "simulator" : "emulator"} pool bound is not a number`, poolSettingError, POOL_SETTING_REMEDY));
 	}
@@ -1077,6 +892,71 @@ function runDoctor(projectRoot, { readFile = readFileSync$1, xcodeMajor = null,
 		profileError: simslimProfileError,
 		onPath: simslimProfile ? lookupSimSlim ? lookupSimSlim() : simslimIsOnPath() : false
 	});
+	const memoryAdvice = localIos && !remoteIosSetting(projectSettings) ? hostMemoryPressureAdvice(memoryPressure()) : null;
+	return {
+		findings: [...[
+			...checkStorageLayout(projectRoot, {
+				platform,
+				host,
+				scope: "shared"
+			}),
+			checkChrome({
+				usesWeb: () => !platform && webSettings(projectSettings).url !== null,
+				chrome: lookupChrome
+			}),
+			concurrencyFinding,
+			memoryAdvice ? finding("cost", "Host memory pressure can stall the iOS simulator", memoryAdvice, "Free host memory, then retry. Run `stim guide lifecycle simslim` for the optional memory reduction setup.") : null,
+			simslimFinding,
+			...settingShapeFindings,
+			...checkMachineSettings({
+				settings: projectSettings,
+				layers: machineSettings.layers,
+				projectRoot,
+				optimizations,
+				reportedElsewhere: simslimProfileError ? ["ios.simslimProfile"] : []
+			})
+		].filter((f) => Boolean(f)), ...inspectors.flatMap((inspect) => inspect(context))],
+		context
+	};
+}
+function reactNativeDoctorFindings({ root: projectRoot, settings: projectSettings, optimizations, options, repoRoot: repositoryRoot }) {
+	const androidLayout = resolveAndroidLayout(projectSettings, projectRoot, repositoryRoot ?? projectRoot);
+	const { readFile = readFileSync$1, xcodeMajor = null, easAuth = doctorEasAuth, remoteEnv = process.env, lookupAgentDevice = null, lookupEasCli = null, lookupCcache = null, tailnetStatus = realIo.status, now = Date.now, platform, host = process.platform } = options;
+	const localIos = platform !== "android" && host === "darwin";
+	const read = (rel) => {
+		const p = join$1(projectRoot, rel);
+		if (!existsSync$1(p)) return null;
+		try {
+			return readFile(p, "utf-8");
+		} catch {
+			return null;
+		}
+	};
+	const pkg = readJsonObject(join$1(projectRoot, "package.json"));
+	const appConfig = readJsonObject(join$1(projectRoot, "app.json"));
+	const dynamicConfig = appConfig ? null : [
+		"app.config.ts",
+		"app.config.js",
+		"app.config.mjs"
+	].find((f) => existsSync$1(join$1(projectRoot, f))) || null;
+	const iosProject = resolveIosProjectDir(projectSettings, projectRoot);
+	const podfileProperties = readJsonObject(join$1(iosProject.dir, "Podfile.properties.json"));
+	const podfile = read(relative$1(projectRoot, join$1(iosProject.dir, "Podfile")));
+	const metroConfig = read("metro.config.js") ?? read("metro.config.cjs");
+	const isExpo = detectIsExpo(projectRoot);
+	const expoRange = (pkg?.dependencies)?.expo || "";
+	const sdkMajor = parseInt(String(expoRange).replace(/[^\d.]/g, "").split(".")[0] ?? "", 10) || null;
+	const provider = appConfig ? providerFromConfig(appConfig) : null;
+	const owner = appConfig ? ownerFromConfig(appConfig) : null;
+	const remoteBuildCache = optimizations?.buildCache && optimizations.remoteBuildCache;
+	const easFinding = remoteBuildCache && provider === "eas" ? checkEasAuth({
+		provider,
+		owner,
+		auth: easAuth({
+			projectRoot,
+			owner
+		})
+	}) : null;
 	const remoteBackends = configuredRemoteBackends(projectSettings, platform);
 	const daemonInEnv = Boolean(remoteEnv.AGENT_DEVICE_DAEMON_BASE_URL?.trim() && remoteEnv.AGENT_DEVICE_DAEMON_AUTH_TOKEN?.trim());
 	const agentDeviceOnPath = remoteBackends.length ? lookupAgentDevice ? lookupAgentDevice() : agentDeviceIsOnPath() : false;
@@ -1089,47 +969,40 @@ function runDoctor(projectRoot, { readFile = readFileSync$1, xcodeMajor = null,
 		readEasCliVersion: () => readProjectEasCliVersion(projectRoot)
 	})).filter((remoteFinding) => remoteFinding !== null);
 	const easBuildDownloadFinding = projectEasBuildDownloadFinding(projectRoot, remoteBackends, lookupEasCli);
-	const memoryAdvice = localIos && !remoteIosSetting(projectSettings) ? hostMemoryPressureAdvice(memoryPressure()) : null;
 	return [
 		checkAppProject(projectRoot),
 		checkIosHost(platform, host),
 		checkXcodeEnvLineEndings(projectRoot, platform, host),
 		...checkMainCheckout(projectRoot, {
 			platform,
-			localIos
+			localIos,
+			iosProjectPath: iosProject.relative,
+			androidLayout
 		}),
-		...localIos ? inspectIosDebugArchitectures(mainCheckoutProjectRoot(projectRoot)) : [],
+		...localIos ? inspectIosDebugArchitectures(mainCheckoutProjectRoot(projectRoot), iosProject.relative) : [],
 		...checkStorageLayout(projectRoot, {
 			platform,
-			host
+			host,
+			scope: "native",
+			iosProjectPath: iosProject.relative,
+			androidLayout
 		}),
 		optimizations?.metroSharedCache ? checkMetroCache(metroConfig) : null,
 		localIos && optimizations?.ios.compilationCache ? checkCompilationCache(podfile, xcodeMajor) : null,
 		localIos && optimizations?.ios.compilationCache ? checkCcacheConflict(podfile, podfileProperties) : null,
-		...platform === "ios" || optimizations?.android.compilerCache !== "ccache" ? [] : androidCcacheFindings(projectRoot, platform, lookupCcache),
+		...platform === "ios" || optimizations?.android.compilerCache !== "ccache" ? [] : androidCcacheFindings(projectRoot, platform, lookupCcache, androidLayout),
 		checkAndroidPathRoom(projectRoot, platform, host),
-		checkAndroidSdk(projectRoot, platform),
+		checkAndroidSdk(projectRoot, platform, androidLayout),
 		checkChrome({
-			usesWeb: () => projectUsesWeb(projectRoot, projectSettings, appConfig, platform),
-			chrome: lookupChrome
+			usesWeb: () => !platform && webSettings(projectSettings).url === null && (Array.isArray((appConfig?.expo ?? appConfig)?.platforms) && (appConfig?.expo ?? appConfig).platforms.includes("web") || isPackageResolvable(projectRoot, "react-native-web")),
+			chrome: options.lookupChrome
 		}),
 		remoteBuildCache ? checkBuildCacheProvider(appConfig, sdkMajor, isExpo, dynamicConfig) : null,
 		easFinding,
 		easBuildDownloadFinding,
-		concurrencyFinding,
 		readOffloadCandidate(tailnetStatus, now(), host),
-		memoryAdvice ? finding("cost", "Host memory pressure can stall the iOS simulator", memoryAdvice, "Free host memory, then retry. Run `stim guide lifecycle simslim` for the optional memory reduction setup.") : null,
-		simslimFinding,
-		...remoteFindings,
-		...settingShapeFindings,
-		...checkMachineSettings({
-			settings: projectSettings,
-			layers: machineSettings.layers,
-			projectRoot,
-			optimizations,
-			reportedElsewhere: simslimProfileError ? ["ios.simslimProfile"] : []
-		})
-	].filter((f) => Boolean(f));
+		...remoteFindings
+	].filter((value) => Boolean(value));
 }
 function checkAndroidPathRoom(projectRoot, platform, host, hostArch = process.arch) {
 	const room = platform === "ios" ? null : androidPathRoom(projectRoot, {
@@ -1142,15 +1015,18 @@ function checkAndroidPathRoom(projectRoot, platform, host, hostArch = process.ar
 		...finding("cost", "The project path leaves no room for Android native object paths", `${androidPathRoomMessage(room)} \`stim android\` refuses to build here with STIM_PATH_TOO_LONG, because Gradle would fail deep inside ninja instead.`, androidPathRoomRemedy(room))
 	};
 }
-function checkAndroidSdk(projectRoot, platform) {
-	const androidDir = join$1(projectRoot, "android");
+function hasAndroidProject(layout) {
+	return existsSync$1(layout.custom ? layout.moduleDir : layout.gradleRoot);
+}
+function checkAndroidSdk(projectRoot, platform, layout = defaultAndroidLayout(projectRoot)) {
+	const androidDir = layout.gradleRoot;
 	if (platform === "ios" || platform !== "android" && !existsSync$1(androidDir)) return null;
 	const sdkPath = androidHome();
 	const refusal = androidSdkRefusal({
 		sdkPath,
 		sdkExists: existsSync$1(sdkPath),
 		hasLocalProperties: existsSync$1(join$1(androidDir, "local.properties")),
-		localPropertiesPath: "android/local.properties"
+		localPropertiesPath: `${relative$1(projectRoot, androidDir) || "."}/local.properties`
 	});
 	if (!refusal) return null;
 	return {
@@ -1158,13 +1034,13 @@ function checkAndroidSdk(projectRoot, platform) {
 		...finding("cost", "No Android SDK was found", `${refusal.reason} \`stim android\` refuses with ${refusal.code} before Gradle runs.`, refusal.remedy)
 	};
 }
-function androidCcacheFindings(projectRoot, platform, lookupCcache) {
-	if (platform !== "android" && !existsSync$1(join$1(projectRoot, "android"))) return [];
+function androidCcacheFindings(projectRoot, platform, lookupCcache, layout) {
+	if (platform !== "android" && !hasAndroidProject(layout)) return [];
 	const onPath = lookupCcache ? lookupCcache() : ccacheIsOnPath();
 	let cxx;
 	try {
 		cxx = checkCxxCompilerLauncher({
-			states: readCxxLauncherStates(projectRoot),
+			states: readCxxLauncherStates(projectRoot, layout),
 			ccacheOnPath: onPath
 		});
 	} catch (error) {
@@ -1199,6 +1075,14 @@ function checkFingerprintParity({ projectHash, worktreeHash, changed = [], dirty
 	const names = changed.slice(0, 3).join(", ");
 	return finding("note", "This checkout does not fingerprint like a fresh worktree of HEAD", `A clean detached worktree of HEAD computes a different @expo/fingerprint hash than this checkout, so worktrees will MISS the cache entries this checkout fills (and vice versa) until the two agree.${changed.length ? ` The differing source${changed.length === 1 ? "" : "s"}: ${names}${changed.length > 3 ? ` (and ${changed.length - 3} more)` : ""}.` : ""} ${dirtyFiles.length ? `The likely cause is uncommitted changes to tracked fingerprint inputs -- git reports ${dirtyFiles.slice(0, 3).join(", ")}${dirtyFiles.length > 3 ? ` (and ${dirtyFiles.length - 3} more)` : ""} dirty in this checkout.` : "The likely cause is uncommitted changes to tracked fingerprint inputs (this check compared against a clean worktree of HEAD)."} (To measure this, doctor ran a real fingerprint twice and briefly created a temporary git worktree -- .git/worktrees metadata was touched and cleaned up.)`, "Commit the dirty fingerprint inputs, or list the build-irrelevant ones in .fingerprintignore (same syntax as .gitignore, at the project root; Stim already ignores android/local.properties and android/.idea). Only the ones that genuinely cannot change the native build belong there -- generated reports, local env files, a lockfile whose checksums embed absolute machine paths. Never ignore a real native input (a Podfile, a gradle file, the app config) to force a hit: that trades a slow build for a wrong one.");
 }
+function fingerprintConfigSkipped(root) {
+	const file = ["fingerprint.config.js", "fingerprint.config.cjs"].find((name) => existsSync$1(join$1(root, name)));
+	if (!file) return null;
+	return {
+		...finding("note", `Skipped the fingerprint checks: ${file} is code`, `@expo/fingerprint loads ${file} with require(), and doctor does not execute project code, so it did not compare this checkout's fingerprint with a fresh worktree or look for linked libraries that carry Git metadata into it.`, "Builds load the config. Once you trust this checkout, `stim ios` or `stim android` reports whether a worktree hits the cache this checkout fills."),
+		code: "fingerprint-config-skipped"
+	};
+}
 function gitMetadataAt(path) {
 	try {
 		const git = lstatSync$1(join$1(path, ".git"));
@@ -1244,6 +1128,8 @@ function linkedPackageWithGitIn(nodeModules) {
 async function detectLinkedLibraryGitMetadata(projectRoot, { createFingerprint = expoFingerprint.createFingerprintAsync, platform } = {}) {
 	const mainRoot = mainCheckoutProjectRoot(projectRoot);
 	if (!hasLinkedPackageWithGit(mainRoot)) return null;
+	const skipped = fingerprintConfigSkipped(mainRoot);
+	if (skipped) return skipped;
 	let sources;
 	try {
 		sources = (await fingerprintProject(mainRoot, {
@@ -1266,7 +1152,7 @@ async function detectLinkedLibraryGitMetadata(projectRoot, { createFingerprint =
 		code: "linked-library-git-metadata"
 	};
 }
-async function detectFingerprintParity(projectRoot, { createFingerprint = expoFingerprint.createFingerprintAsync, differ = expoFingerprint.diffFingerprints, dirtyFiles = dirtyFingerprintFiles, platform: selectedPlatform } = {}) {
+async function detectFingerprintParity(projectRoot, { createFingerprint = expoFingerprint.createFingerprintAsync, differ = expoFingerprint.diffFingerprints, dirtyFiles = dirtyFingerprintFiles, platform: selectedPlatform, iosProjectPath = "ios" } = {}) {
 	const exec = getExecutor();
 	if (exec.runFileQuiet("git", [
 		"-C",
@@ -1275,7 +1161,9 @@ async function detectFingerprintParity(projectRoot, { createFingerprint = expoFi
 		"--git-dir"
 	], { timeoutMs: 1e4 }) == null) return null;
 	if (hasInstalledDependencies(projectRoot)) return null;
-	const platform = selectedPlatform ?? (existsSync$1(join$1(projectRoot, "ios")) ? "ios" : existsSync$1(join$1(projectRoot, "android")) ? "android" : void 0);
+	const skipped = fingerprintConfigSkipped(projectRoot);
+	if (skipped) return skipped;
+	const platform = selectedPlatform ?? (existsSync$1(join$1(projectRoot, iosProjectPath)) ? "ios" : existsSync$1(join$1(projectRoot, "android")) ? "android" : void 0);
 	let base;
 	try {
 		base = makeTemporaryDirectory(projectRoot, "stim-parity-");
@@ -1286,6 +1174,8 @@ async function detectFingerprintParity(projectRoot, { createFingerprint = expoFi
 	if (exec.runFileQuiet("git", [
 		"-C",
 		projectRoot,
+		"-c",
+		`core.hooksPath=${join$1(base, "hooks")}`,
 		"worktree",
 		"add",
 		"--detach",
@@ -1299,12 +1189,16 @@ async function detectFingerprintParity(projectRoot, { createFingerprint = expoFi
 		return null;
 	}
 	try {
+		const headSkipped = fingerprintConfigSkipped(worktree);
+		if (headSkipped) return headSkipped;
 		const project = await fingerprintProject(projectRoot, {
 			platform,
+			iosProjectPath,
 			createFingerprint
 		});
 		const clean = await fingerprintProject(worktree, {
 			platform,
+			iosProjectPath,
 			createFingerprint
 		});
 		if (!project || !clean) return null;
@@ -1345,309 +1239,4 @@ async function detectFingerprintParity(projectRoot, { createFingerprint = expoFi
 	}
 }
 //#endregion
-//#region src/device-host/agent-driver.ts
-function hostedAgentDriverFinding(driver, apps) {
-	if (apps === 0 || driver !== void 0 && driver !== "none") return null;
-	return {
-		code: "hosted-agent-driver",
-		level: "note",
-		title: `${apps === 1 ? "A hosted app runs" : `${apps} hosted apps run`} with no agent driver`,
-		detail: "The client's coding agent cannot drive these apps because `hosting.agentDriver` is none, so stim-server starts no driver. agent-device confines macOS control to one macos-app lease and iOS or Android control to one device through its daemon policy.",
-		fix: "stim settings set hosting.agentDriver agent-device, with agent-device 0.21.22 or later"
-	};
-}
-function runningHostedApps() {
-	try {
-		return readHostedSessions().filter((session) => {
-			if (![
-				"macos",
-				"ios",
-				"android"
-			].includes(session.platform) || session.state !== "ready" || !session.appAttempt) return false;
-			try {
-				return readHostedAppMetadata(session.id, session.appAttempt).state === "installed";
-			} catch {
-				return false;
-			}
-		}).length;
-	} catch {
-		return 0;
-	}
-}
-/** Notes installed hosted apps on this Mac while `hosting.agentDriver` starts no driver. */
-function inspectHostedAgentDriver() {
-	const hosting = loadConfig$1()?.hosting;
-	return hostedAgentDriverFinding(isJsonObject(hosting) ? hosting.agentDriver : void 0, runningHostedApps());
-}
-//#endregion
-//#region src/commands/doctor.ts
-function parseDoctorPlatform(value) {
-	if (value === "ios" || value === "android") return value;
-	throw new InvalidArgumentError("expected one of: ios, android");
-}
-/**
-* The simulator runtime `stim ios` would build for here: the one `ios.runtime` names, else the workspace's own
-* simulator's, else the one it would create a simulator on.
-*/
-function iosTargetRuntime(root) {
-	try {
-		const settings = resolveSettings({
-			projectPath: root,
-			gitCommonDir: gitCommonDir(root),
-			repoRoot: repoRoot(root) ?? root
-		});
-		const runtimes = listIosRuntimes();
-		const runtime = resolveRuntime(null, settings);
-		if (runtime) return runtimes.find((each) => iosRuntimeMatches(each, runtime))?.identifier ?? null;
-		const udid = getProject(root)?.platforms?.ios?.deviceUdid;
-		const own = typeof udid === "string" ? simulatorRuntime(udid) : null;
-		if (own) return own;
-		const deviceType = resolveDeviceType(null, settings) ?? void 0;
-		return pickDefaultIosCreation([], runtimes, { deviceType })?.runtimeId ?? null;
-	} catch {
-		return null;
-	}
-}
-function doctorTarget(platform) {
-	if (platform === "ios") return "iOS";
-	if (platform === "android") return "Android";
-	return "all platforms";
-}
-function stimVersionLines(report) {
-	const resolved = report.resolved ? `${report.resolved.version ?? "unknown version"} at ${report.resolved.path}` : "not found on PATH";
-	const paths = `${report.installations.length} distinct PATH install${report.installations.length === 1 ? "" : "s"}`;
-	const pathVersions = [...new Set(report.installations.map((entry) => entry.version).filter(Boolean))];
-	const versions = pathVersions.length > 1 ? ` (${pathVersions.join(", ")})` : "";
-	return [
-		phaseLine("version", report.runningVersion),
-		phaseLine("resolved", resolved),
-		phaseLine("installs", paths + versions)
-	];
-}
-function budgetLines(budget) {
-	return budget ? [phaseLine("budget", budgetLine(budget))] : [];
-}
-function doctorSuccessLines(platform, stim, budget = null) {
-	const lines = [
-		`Doctor (${doctorTarget(platform)})`,
-		phaseLine("result", "PASS"),
-		phaseLine("findings", "0"),
-		...stimVersionLines(stim),
-		...budgetLines(budget),
-		"",
-		"Project",
-		phaseLine("project", "source checkout, dependencies, local upstream, nested worktrees Watchman would crawl"),
-		phaseLine("settings", "every Stim setting type, machine config paths, companions and inert keys")
-	];
-	if (platform !== "android") {
-		lines.push("", "iOS");
-		lines.push(phaseLine("setup", "CocoaPods, warm state, effective Debug simulator architectures"));
-		lines.push(phaseLine("caches", "Metro, Xcode compilation, ccache, build provider"));
-		lines.push(phaseLine("devices", "remote device, SimSlim profile"));
-	}
-	if (platform !== "ios") {
-		lines.push("", "Android");
-		lines.push(phaseLine("setup", "Android SDK, warm state"));
-		lines.push(phaseLine("caches", "Metro, Gradle, ccache, build provider"));
-		lines.push(phaseLine("devices", "remote device"));
-	}
-	lines.push("", "Shared");
-	lines.push(phaseLine("services", "EAS session"));
-	lines.push(phaseLine("storage", "temporary staging and build-cache volume placement"));
-	lines.push(phaseLine("fingerprint", "parity when dependencies are absent"));
-	lines.push("", "Handled automatically");
-	const suppliedCaches = platform === "ios" ? "Metro transform store, Xcode compilation cache" : platform === "android" ? "Metro transform store, Gradle build cache, ccache" : "Metro transform store, Xcode compilation cache, Gradle build cache, ccache";
-	lines.push(phaseLine("caches", suppliedCaches));
-	lines.push(phaseLine("meaning", "missing project cache settings are healthy"));
-	return lines;
-}
-function shadowedStimFinding(report) {
-	if (!report.resolvedIsOlder || !report.resolved?.version || !report.highestVersion) return null;
-	const newer = [...(compareStimVersions(report.runningVersion, report.resolved.version) ?? 0) > 0 ? [{
-		path: report.runningPath,
-		version: report.runningVersion
-	}] : [], ...report.installations.filter((entry) => entry.version && (compareStimVersions(entry.version, report.resolved?.version ?? "") ?? 0) > 0)].find((entry) => entry.version === report.highestVersion);
-	const newerLocation = newer?.path ? ` at ${newer.path}` : "";
-	return {
-		level: "cost",
-		title: "The Stim resolved from PATH is older than another installation",
-		detail: `${report.resolved.path} reports ${report.resolved.version}, while ${report.highestVersion} is also installed${newerLocation}. A shell command named stim uses the first executable on PATH, so newer commands and fixes can appear to be missing.`,
-		fix: `Update or remove ${report.resolved.path}, or put the ${report.highestVersion} installation earlier on PATH. Then run \`stim doctor\` again.`
-	};
-}
-/**
-* Status goes to stderr so `--json --fix` still prints one parseable payload
-* on stdout, and the report that follows shows what the write left.
-*/
-function applySandboxFix(root, env = process.env) {
-	const harness = detectHarness(env);
-	if (harness === "codex") {
-		console.error(chalk.yellow("Nothing to apply under Codex."));
-		console.error(chalk.dim("Its sandbox is one setting, `sandbox_mode`, with no per-path allowance: the only value that clears Stim is `danger-full-access`, which turns the sandbox off rather than allowing these three. Run Stim with the sandbox off instead, or set it yourself."));
-		process.exitCode = 1;
-		return;
-	}
-	if (harness !== "claude-code") {
-		console.error(chalk.dim("No sandboxing harness detected, so there is nothing to apply."));
-		return;
-	}
-	const settingsRoot = repoRoot(root) ?? root;
-	const stimHome = env.STIM_HOME || "~/.stim";
-	const target = claudeLocalSettingsPath(settingsRoot);
-	const missing = missingAllowance(allowanceSearchPaths(settingsRoot), stimHome);
-	if (missing.length === 0) {
-		console.error(chalk.green("Stim is already allowed through this sandbox. Nothing to apply."));
-		return;
-	}
-	const result = applyClaudeAllowance(target, sandboxAllowance(stimHome));
-	if (result.status === "refused") {
-		console.error(chalk.red(result.reason));
-		console.error(chalk.dim(`Nothing was written. Add ${missing.join(", ")} by hand.`));
-		process.exitCode = 1;
-		return;
-	}
-	console.error(chalk.green(`${result.status === "created" ? "Wrote" : "Updated"} ${target}`));
-	console.error(chalk.dim("Added writes to Stim's state directory, the simulator XPC service, and local port binding. Claude Code reads project settings from the directory a session starts in, so this file only counts for sessions rooted there. Restart the session for it to take effect."));
-}
-function doctorCommand(program, version, inspectVersions = inspectStimVersions, host = process.platform) {
-	program.command("doctor").description("Inspect the source checkout and report project state that can make native worktrees slow or invalid. The checkout is left untouched unless --fix is passed; --platform filters native findings. Each run in a React Native or Expo app is recorded in Stim state so guide can say when doctor is due.").option("--json", "print the findings as JSON").option("--platform <platform>", "report shared findings plus only this native platform: ios or android", parseDoctorPlatform).option("--fix", "repair the sandbox allowance when the report names it, and stale Android .cxx configurations in this checkout; add linked worktrees nested in a checkout to its .watchmanconfig ignore_dirs; ask each remote Mac in remote.machines for build and device-host approval. Stop native builds first. Generated CMake output must be ignored and untracked; custom launcher settings and source files are preserved.").action(async (opts) => {
-		const root = findProjectRoot(process.cwd());
-		if (!root) {
-			refuseNoProject({ json: Boolean(opts.json) });
-			return;
-		}
-		if (opts.fix) {
-			if (sandboxFinding(repoRoot(root) ?? root)) applySandboxFix(root);
-			if (opts.platform !== "ios") try {
-				const repair = repairCxxLauncherState(root);
-				for (const path of repair.removed) console.error(phaseLine("cache", `removed ${path}; next build reconfigures`));
-				for (const { path, reason } of repair.refused) console.error(phaseLine("cache", `kept ${path}: ${reason}`));
-				if (repair.refused.length > 0) process.exitCode = 1;
-			} catch (error) {
-				console.error(phaseLine("cache", `CMake cleanup failed: ${error.message}`));
-				process.exitCode = 1;
-			}
-			const nestedToFix = inspectNestedWorktrees(root);
-			const watchedToFix = await watchedCheckouts(nestedToFix.map((entry) => entry.checkout));
-			for (const entry of nestedToFix) {
-				let result;
-				try {
-					result = writeIgnoreDirs(entry);
-				} catch (error) {
-					result = {
-						status: "refused",
-						reason: `${entry.configPath} could not be written: ${error.message}`
-					};
-				}
-				if (result.status === "refused") {
-					console.error(phaseLine("checkout", `kept ${result.reason}; add ${entry.add.join(", ")} to ignore_dirs by hand`));
-					process.exitCode = 1;
-				} else {
-					console.error(phaseLine("checkout", `${result.status} ${entry.configPath}: ignore_dirs ${entry.add.join(", ")}`));
-					if (watchedToFix.has(entry.checkout)) console.error(phaseLine("checkout", `Watchman watches ${entry.checkout} and reads the file only when it adds a root: run \`watchman watch-del ${entry.checkout}\`, then restart watchman to free its memory`));
-				}
-			}
-		}
-		const stim = await inspectVersions(version);
-		const findings = runDoctor(root, {
-			xcodeMajor: opts.platform !== "android" && host === "darwin" ? detectXcodeMajor() : null,
-			platform: opts.platform,
-			host
-		});
-		const parity = await detectFingerprintParity(root, { platform: opts.platform });
-		if (parity) findings.push(parity);
-		const linkedGit = await detectLinkedLibraryGitMetadata(root, { platform: opts.platform });
-		if (linkedGit) findings.push(linkedGit);
-		if (detectHarness()) {
-			const sandbox = sandboxFinding(repoRoot(root) ?? root);
-			if (sandbox) findings.push(sandbox);
-		}
-		const shadowed = shadowedStimFinding(stim);
-		if (shadowed) findings.push(shadowed);
-		const budget = await inspectBudget(root);
-		findings.push(...budget.findings);
-		const watchman = await inspectWatchmanMemory();
-		if (watchman) findings.push(watchman);
-		const nestedWorktrees = inspectNestedWorktrees(root);
-		const watched = await watchedCheckouts(nestedWorktrees.map((entry) => entry.checkout));
-		for (const entry of nestedWorktrees) findings.push(nestedWorktreeFinding(entry, watched.has(entry.checkout)));
-		const checksIos = opts.platform !== "android" && host === "darwin";
-		const checksAndroid = opts.platform === "android" || opts.platform === void 0 && (existsSync(join(root, "android")) || detectIsExpo(root));
-		const checksMacos = host === "darwin" && opts.platform === void 0 && existsSync(join(root, "Package.swift"));
-		const offloadTargets = () => [
-			...checksIos ? [{
-				platform: "ios",
-				local: iosToolchain(root),
-				runtime: iosTargetRuntime(root),
-				cocoapodsPinned: bundlerPin(root) !== null
-			}] : [],
-			...checksAndroid ? [{
-				platform: "android",
-				local: androidToolchain(),
-				requires: androidRequirements(root)
-			}] : [],
-			...checksMacos ? [{
-				platform: "macos",
-				local: macosToolchain()
-			}] : []
-		];
-		const remoteMachines = await inspectBuildMachines({
-			fix: opts.fix === true,
-			check: checksIos || checksAndroid || checksMacos ? offloadCheck(root, offloadTargets) : null
-		});
-		findings.push(...remoteMachines.findings);
-		const deviceHosts = await inspectDeviceHostMachines({ fix: opts.fix === true });
-		const reported = new Set(remoteMachines.findings.map((each) => each.title));
-		findings.push(...deviceHosts.findings.filter((each) => !reported.has(each.title)));
-		const agentDriver = inspectHostedAgentDriver();
-		if (agentDriver) findings.push(agentDriver);
-		const maintenance = maintenanceStatus();
-		const maintenanceLines = [
-			phaseLine("maintenance.mode", maintenance.mode),
-			phaseLine("maintenance log", maintenanceNdjsonFile()),
-			phaseLine("last pass", maintenanceLine(maintenance, false) ?? "no pass has run yet")
-		];
-		if (opts.json) {
-			console.log(JSON.stringify({
-				project: root,
-				platform: opts.platform ?? null,
-				stim,
-				budget: budget.report,
-				maintenance: {
-					...maintenance,
-					logPath: maintenanceNdjsonFile()
-				},
-				remoteMachines: remoteMachines.machines,
-				deviceHosts: deviceHosts.machines,
-				findings
-			}));
-			recordDoctorRun(root, opts.platform, version);
-			return;
-		}
-		if (findings.length === 0) {
-			const lines = [...doctorSuccessLines(opts.platform, stim, budget.report), ...maintenanceLines];
-			for (const [index, line] of lines.entries()) if (index === 1) console.log(chalk.green(line));
-			else if (line && !line.startsWith("  ")) console.log(chalk.bold(line));
-			else console.log(chalk.dim(line));
-			recordDoctorRun(root, opts.platform, version);
-			return;
-		}
-		const ordered = findings.toSorted((a, b) => a.level === b.level ? 0 : a.level === "cost" ? -1 : 1);
-		console.log(chalk.bold(`Doctor (${doctorTarget(opts.platform)})`));
-		for (const line of [
-			...stimVersionLines(stim),
-			...budgetLines(budget.report),
-			...maintenanceLines
-		]) console.log(chalk.dim(line));
-		for (const f of ordered) {
-			const tag = f.level === "cost" ? chalk.yellow("costs time") : chalk.dim("note");
-			console.log(`\n${tag}  ${chalk.bold(f.title)}`);
-			console.log(`  ${f.detail}`);
-			if (f.fix) console.log(chalk.dim(`  -> ${f.fix}`));
-		}
-		console.log(chalk.dim(`\n${findings.length} finding(s). Fix relevant "costs time" findings before copying the source checkout into a native worktree.`));
-		recordDoctorRun(root, opts.platform, version);
-	});
-}
-//#endregion
-export { applySandboxFix, doctorCommand as default, doctorSuccessLines, parseDoctorPlatform, shadowedStimFinding };
+export { repairCxxLauncherState as a, runDoctor as i, detectLinkedLibraryGitMetadata as n, readMachineSettings as o, reactNativeDoctorFindings as r, detectFingerprintParity as t };