stim 1.19.0 → 1.20.0

package/dist/{workspaces-Djb2gfi9.mjs → workspaces-D2xSHBDY.mjs}

@@ -1,56 +1,31 @@
 import { n as ownership_claim_exports, t as process_identity_exports } from "./process-identity-Biv3arCO.mjs";
-import { t as getExecutor } from "./exec-i8GDPwq9.mjs";
+import { t as getExecutor } from "./exec-B81Qodjn.mjs";
+import { D as withConfigLock$1, H as projectDeviceSlots, M as isOnMountedVolume, N as listMountedVolumes, P as measuredDirectorySize, _ as loadConfig$1, d as getConfigDir, g as isPathPrefix, j as formatBytes, k as acquireAvdClaim, p as getProject, z as deviceSlotPlatforms } from "./config-D0LhTY3S.mjs";
+import { Et as repoRoot, st as resolveTailscaleBinary } from "./settings-Bbztm4oV.mjs";
+import { h as listBuildLocks } from "./device-lease-DHOBXGgS.mjs";
+import { T as workspaceName, r as readWorkspaceState$1, s as workspaceLastUsed, x as workspaceDir, y as workspaceAgentDeviceDir } from "./workspace-state-CSIFuuDa.mjs";
 import { t as createLineReader } from "./process-output-Fpl8PYi8.mjs";
-import { a as formatElapsed, l as phaseLine } from "./command-output-Bt8ygHE7.mjs";
-import { D as withConfigLock$1, H as projectDeviceSlots, M as isOnMountedVolume, N as listMountedVolumes, P as measuredDirectorySize, _ as loadConfig$1, d as getConfigDir, g as isPathPrefix, j as formatBytes, k as acquireAvdClaim, p as getProject, z as deviceSlotPlatforms } from "./config-DC5jEtd1.mjs";
-import { S as workspaceName, g as workspaceAgentDeviceDir, r as readWorkspaceState$1, s as workspaceLastUsed, v as workspaceDir } from "./workspace-state-CR9X86xJ.mjs";
-import { Y as resolveTailscaleBinary, mt as repoRoot } from "./settings-CxgngUZk.mjs";
-import { d as signalProcessTree, s as pidExists } from "./metro-DI2AjPF_.mjs";
-import { _ as removeSingletonFiles, c as webClaimRoot, f as webProfileDir, g as liveProfileHolder, h as chromeProcessState, i as clearWebRecord, o as readWebRecord, t as CDP_PORT_LABEL, u as webFacts } from "./state-D2KtnALG.mjs";
-import { t as agentDeviceDaemon, u as readAgentDeviceRecords } from "./activity-BSw0x84R.mjs";
-import { h as listBuildLocks } from "./device-lease-Cu7PtQpZ.mjs";
+import { a as formatElapsed, l as phaseLine } from "./command-output-BjPN99ZB.mjs";
+import { B as ownedAvdSystemImage, I as ownedAvdDirectory, J as resolveOwnedAvdSerial, L as ownedAvdMatchesConfiguration, M as listOrphanedAvdDirectories, O as listAdbDevices, X as shutdownAndroidEmulator, Z as sleepSync, _ as avdStorageRoots, ct as eraseParkedAfter, et as waitForAndroidEmulatorShutdown, f as assertOwnedAvdStopped, ft as readParked, h as avdPathExists, nt as wipeAvdUserData, pt as removeParkedAfter, rt as isStimOwnedAvd, ut as parkSim, x as deleteAvd } from "./android-BsYNR81W.mjs";
+import { n as readCreatedDevices$1, r as recordCreatedDevice, t as forgetCreatedDevice } from "./created-devices-HU_DAb_Q.mjs";
+import { d as signalProcessTree, s as pidExists } from "./metro-D_j9sN-B.mjs";
 import { n as declareSpawnsOn, o as stopDeclaringSpawnsOn } from "./spawn-claims-Kqiifsk2.mjs";
-import { n as readCreatedDevices$1, r as recordCreatedDevice, t as forgetCreatedDevice } from "./created-devices-D0s26Hx5.mjs";
-import { B as ownedAvdSystemImage, I as ownedAvdDirectory, J as resolveOwnedAvdSerial, L as ownedAvdMatchesConfiguration, M as listOrphanedAvdDirectories, O as listAdbDevices, X as shutdownAndroidEmulator, Z as sleepSync, _ as avdStorageRoots, dt as parkSim, et as waitForAndroidEmulatorShutdown, f as assertOwnedAvdStopped, h as avdPathExists, it as isStimOwnedAvd, lt as eraseParkedAfter, mt as removeParkedAfter, nt as wipeAvdUserData, pt as readParked, x as deleteAvd } from "./android-BdQC6zs1.mjs";
-import { D as shutdownIosSim, T as resolveOwnedIosSim, _ as parkedSimName, c as eraseIosSim, o as deleteIosSim, p as listIosDeviceTypes, s as deleteParkedIosSim, v as parseRuntimeVersion, x as renameIosSim } from "./ios-BWbHFZVz.mjs";
-import { a as withWorkspaceProcessLock, o as workspaceProcessLockError, r as releaseBrowserPort, s as workspaceProcessLockPath } from "./named-ports-B4iWH4E-.mjs";
-import { a as macosRuntimeClaim, n as macosDir } from "./state-Tp4uImDS.mjs";
+import { a as withWorkspaceProcessLock, o as workspaceProcessLockError, r as releaseBrowserPort, s as workspaceProcessLockPath } from "./named-ports-C2lvoPsb.mjs";
+import { _ as removeSingletonFiles, c as webClaimRoot, f as webProfileDir, g as liveProfileHolder, h as chromeProcessState, i as clearWebRecord, o as readWebRecord, t as CDP_PORT_LABEL, u as webFacts } from "./state-DI84A-uu.mjs";
+import { t as agentDeviceDaemon, u as readAgentDeviceRecords } from "./activity-BrGh9EAI.mjs";
+import { E as resolveOwnedIosSim, O as shutdownIosSim, S as renameIosSim, c as eraseIosSim, o as deleteIosSim, p as listIosDeviceTypes, s as deleteParkedIosSim, v as parkedSimName, y as parseRuntimeVersion } from "./ios-CXLIUxXJ.mjs";
+import { a as macosRuntimeClaim, n as macosDir } from "./state-Boo0IMJq.mjs";
 import { closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { basename as basename$1, isAbsolute as isAbsolute$1, join as join$1, relative as relative$1, resolve as resolve$1 } from "path";
 import { buildSlotsDir, hostedNativeRecords, isJsonObject, macosAppState, parseHostedNativePlacement, readJsonFile, readMacosRecord, requireAutomaticMachine, tryAcquireBuildSlotClaim, unreadableHostedNative } from "@stim-cli/core/state";
+import { existsSync as existsSync$1, lstatSync as lstatSync$1, readdirSync as readdirSync$1, realpathSync as realpathSync$1, rmSync as rmSync$1, statSync as statSync$1 } from "fs";
+import { createHash, randomUUID } from "node:crypto";
 import { homedir } from "node:os";
 import chalk from "chalk";
 import { isDeepStrictEqual } from "node:util";
-import { existsSync as existsSync$1, lstatSync as lstatSync$1, readdirSync as readdirSync$1, realpathSync as realpathSync$1, rmSync as rmSync$1, statSync as statSync$1 } from "fs";
-import { createHash, randomUUID } from "node:crypto";
 import { resolve4 } from "node:dns/promises";
 import { request } from "node:https";
-//#region src/commands/gc/paths.ts
-function canonicalPath(p) {
-	try {
-		return realpathSync$1(p);
-	} catch {
-		return resolve$1(p);
-	}
-}
-//#endregion
-//#region src/commands/gc/results.ts
-const results = [];
-function recordGcResult(kind, status, label, { id = null, bytes = null, detail = null } = {}) {
-	results.push({
-		kind,
-		status,
-		label,
-		id,
-		bytes,
-		detail
-	});
-}
-function takeGcResults() {
-	return results.splice(0);
-}
-//#endregion
 //#region src/engine/build-slots.ts
 const SLOT_PREFIX = "slot-";
 const SLOT_POLL_MS = 1e3;
@@ -188,644 +163,731 @@ function listBuildSlots() {
 	return slots;
 }
 //#endregion
-//#region src/devices/agent-device-cleanup.ts
-function parseAgentDeviceSessions(output) {
-	const result = JSON.parse(output);
-	if (result?.success !== true || !Array.isArray(result.data?.sessions)) throw new Error("agent-device did not return a successful session list");
-	return result.data.sessions.flatMap((entry) => {
-		if (!entry || typeof entry !== "object") return [];
-		const row = entry;
-		const id = row.platform === "ios" ? row.device_udid : row.id;
-		if (row.platform !== "ios" && row.platform !== "android" || typeof row.name !== "string" || !row.name.trim() || typeof id !== "string" || !id || typeof row.createdAt !== "number" || !Number.isFinite(row.createdAt) || row.platform === "ios" && row.id !== void 0 && row.id !== id) return [];
-		return [{
-			name: typeof row.address === "string" && row.address.trim() ? row.address : row.name,
-			platform: row.platform,
-			id,
-			device: typeof row.device === "string" ? row.device : null,
-			createdAt: row.createdAt
-		}];
-	});
+//#region src/supervisor/ownership.ts
+function resolveSupervisorTarget({ state, record, reservedPort, isAlive = pidExists, inspectIdentity = process_identity_exports.inspectProcessIdentity } = {}) {
+	const statePid = numberOrNull(state?.pid);
+	const recordPid = numberOrNull(record?.pid);
+	const pid = statePid ?? recordPid;
+	if (!pid) return { status: "none" };
+	if (statePid && recordPid && statePid !== recordPid) return {
+		status: "unverified",
+		pid,
+		reason: `workspace state.json records supervisor pid ${statePid} but the registry records pid ${recordPid}`
+	};
+	if (!isAlive(pid)) return {
+		status: "stale",
+		pid
+	};
+	const port = numberOrNull(state?.port) ?? numberOrNull(record?.port);
+	if (reservedPort !== null && reservedPort !== void 0 && port !== null && port !== reservedPort) return {
+		status: "unverified",
+		pid,
+		reason: `supervisor pid ${pid} records port ${port}, but this project reserved port ${reservedPort}`
+	};
+	if (reservedPort !== null && reservedPort !== void 0 && port === null) return {
+		status: "unverified",
+		pid,
+		reason: `supervisor pid ${pid} has no recorded port, so it cannot be matched against reserved port ${reservedPort}`
+	};
+	const identityRecord = statePid ? state : record;
+	if (statePid && recordPid && state?.processToken !== record?.processToken) return {
+		status: "unverified",
+		pid,
+		reason: "workspace state and registry process identities disagree"
+	};
+	const identity = inspectIdentity(identityRecord);
+	if (identity === "gone" || identity === "different") return {
+		status: "stale",
+		pid
+	};
+	if (identity !== "same") return {
+		status: "unverified",
+		pid,
+		reason: "the recorded process identity could not be verified"
+	};
+	return {
+		status: "ours",
+		processToken: identityRecord.processToken,
+		pid,
+		port,
+		mode: state?.mode ?? record?.mode ?? null,
+		startedAt: state?.startedAt ?? record?.startedAt ?? null
+	};
 }
-function isOwnDeviceSession(session, device, owner) {
-	if (session.platform !== device.platform || device.id !== null && session.id !== device.id) return false;
-	if (device.platform === "android" && session.device !== device.avdName.replaceAll("_", " ")) return false;
-	if (!owner) return true;
-	return owner.claims.some((claim) => claim.deviceId === session.id && claim.session === session.name && claim.workspace !== null && (within(owner.workspace, claim.workspace) || claim.workspace === owner.repoRoot));
+function numberOrNull(v) {
+	return typeof v === "number" && Number.isSafeInteger(v) && v > 0 ? v : null;
 }
-function within(root, path) {
-	const rest = relative(root, path);
-	return rest === "" || !isAbsolute(rest) && rest.split(sep)[0] !== "..";
+//#endregion
+//#region src/engine/public-http-probe.ts
+const DNS_TIMEOUT_MS = 5e3;
+async function resolveAddresses(hostname, signal) {
+	if (signal.aborted) throw signal.reason;
+	let timer;
+	let onAbort;
+	const unavailable = new Promise((_resolve, reject) => {
+		onAbort = () => reject(signal.reason);
+		signal.addEventListener("abort", onAbort, { once: true });
+		if (signal.aborted) onAbort();
+		else timer = setTimeout(() => reject(/* @__PURE__ */ new Error("DNS lookup timed out")), DNS_TIMEOUT_MS);
+	});
+	try {
+		return await Promise.race([resolve4(hostname), unavailable]);
+	} finally {
+		clearTimeout(timer);
+		if (onAbort) signal.removeEventListener("abort", onAbort);
+	}
 }
-function canonical(path) {
+async function probePublicHttp(url, signal) {
 	try {
-		return realpathSync(path);
+		return (await fetch(url, {
+			signal,
+			redirect: "follow"
+		})).status;
+	} catch (error) {
+		const cause = error?.cause;
+		if (cause?.code !== "ENOTFOUND" && cause?.code !== "EAI_AGAIN") return null;
+	}
+	const hostname = new URL(url).hostname;
+	if (!hostname.endsWith(".trycloudflare.com")) return null;
+	let addresses;
+	try {
+		addresses = await resolveAddresses(hostname, signal);
 	} catch {
 		return null;
 	}
+	const firstAddress = addresses[0];
+	if (!firstAddress) return null;
+	return new Promise((resolve) => {
+		const request$1 = request(url, {
+			signal,
+			lookup: (_hostname, options, callback) => {
+				if (options.all) callback(null, addresses.map((address) => ({
+					address,
+					family: 4
+				})));
+				else callback(null, firstAddress, 4);
+			}
+		}, (response) => {
+			response.resume();
+			resolve(response.statusCode ?? null);
+		});
+		request$1.on("error", () => resolve(null));
+		request$1.end();
+	});
 }
-function deviceClaims(device) {
-	return readAgentDeviceRecords(homedir()).filter((record) => record.kind === "claim" && (device.id === null || record.deviceId === device.id)).map((record) => ({
-		deviceId: record.deviceId,
-		session: record.session,
-		workspace: record.workspace && canonical(record.workspace)
-	}));
+//#endregion
+//#region src/engine/tunnel.ts
+function tunnelArgv(provider, port, ngrokUrl, logFile, tailscaleBinary = "tailscale") {
+	if (provider === "tailscale") return {
+		bin: tailscaleBinary,
+		args: [
+			"serve",
+			`--https=${port}`,
+			`http://127.0.0.1:${port}`
+		]
+	};
+	if (provider === "cloudflared") return {
+		bin: "cloudflared",
+		args: [
+			"tunnel",
+			"--url",
+			`http://127.0.0.1:${port}`,
+			...logFile ? ["--logfile", logFile] : []
+		]
+	};
+	return {
+		bin: "ngrok",
+		args: [
+			"http",
+			String(port),
+			`--log=${logFile || "stdout"}`,
+			"--log-format=json",
+			...ngrokUrl ? ["--url", ngrokUrl] : []
+		]
+	};
 }
-function explainFailure(error) {
-	const stdout = error?.stdout;
-	let failure;
+const CLOUDFLARED_URL_RE = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/i;
+function parseCloudflaredLine(line) {
+	const match = line.match(CLOUDFLARED_URL_RE);
+	return match ? match[0] : null;
+}
+function parseNgrokLine(line) {
+	let data;
 	try {
-		failure = typeof stdout === "string" ? JSON.parse(stdout)?.error : void 0;
+		data = JSON.parse(line);
 	} catch {
-		failure = void 0;
+		return null;
 	}
-	if (typeof failure?.message !== "string" || !failure.message) return error;
-	const reason = typeof failure.details?.reason === "string" ? ` (${failure.details.reason})` : "";
-	return /* @__PURE__ */ new Error(`agent-device refused: ${failure.message}${reason}`);
+	if (typeof data !== "object" || data === null) return null;
+	const url = data.url;
+	return typeof url === "string" && /^https?:\/\//i.test(url) ? url : null;
 }
-function report(message) {
-	process.stderr.write(`${phaseLine("device", message)}\n`);
+function parseTailscaleLine(line) {
+	return /^https:\/\/[^\s/]+\.ts\.net(:\d+)?\/?$/.test(line) ? line : null;
 }
-function closeOwnedDeviceSessions(device, stillOwned, workspace, repoRoot) {
-	const exec = getExecutor();
-	try {
-		if (!exec.findExecutable("agent-device")) return;
-		const root = workspace === void 0 ? void 0 : canonical(workspace);
-		if (root === null) return;
-		const owner = root === void 0 ? void 0 : {
-			workspace: root,
-			repoRoot: repoRoot && (canonical(repoRoot) ?? void 0),
-			claims: deviceClaims(device)
-		};
-		const stateDir = root === void 0 ? void 0 : workspaceAgentDeviceDir(root);
-		const stateDirs = [void 0, ...stateDir && !["none", "dead"].includes(agentDeviceDaemon(stateDir)) ? [stateDir] : []];
-		for (const dir of stateDirs) {
-			const deadline = Date.now() + 15e3;
-			const run = (args) => {
-				const remaining = deadline - Date.now();
-				if (remaining <= 0) throw new Error("agent-device cleanup timed out");
-				try {
-					return exec.runFile("agent-device", [
-						...args,
-						...dir ? ["--state-dir", dir] : [],
-						"--json",
-						"--daemon-transport",
-						"socket"
-					], {
-						timeoutMs: Math.min(5e3, remaining),
-						killSignal: "SIGKILL"
-					});
-				} catch (error) {
-					throw explainFailure(error);
-				}
-			};
-			const list = () => parseAgentDeviceSessions(run([
-				"session",
-				"list",
-				"--session",
-				"stim-teardown-inventory"
-			]));
-			try {
-				const sessions = list().filter((session) => isOwnDeviceSession(session, device, owner));
-				for (const session of sessions) try {
-					if (!list().some((current) => current.name === session.name && current.platform === session.platform && current.id === session.id && current.createdAt === session.createdAt)) continue;
-					if (!stillOwned(session.id)) continue;
-					if (JSON.parse(run([
-						"close",
-						"--session",
-						session.name,
-						"--session-lock",
-						"reject",
-						"--platform",
-						device.platform,
-						device.platform === "ios" ? "--udid" : "--serial",
-						session.id
-					]))?.success !== true) throw new Error("agent-device did not confirm session close");
-					report(`closed agent-device session ${session.name} on ${session.id}`);
-				} catch (error) {
-					report(`could not close agent-device session ${session.name} on ${session.id}: ${error.message}`);
-				}
-			} catch (error) {
-				report(`could not list agent-device sessions for ${device.platform === "ios" ? device.id : device.id ?? device.avdName}: ${error.message}`);
-			}
-		}
-	} catch (error) {
-		report(`could not list agent-device sessions for ${device.platform === "ios" ? device.id : device.id ?? device.avdName}: ${error.message}`);
+function parserFor(provider) {
+	if (provider === "tailscale") return parseTailscaleLine;
+	return provider === "cloudflared" ? parseCloudflaredLine : parseNgrokLine;
+}
+const URL_TIMEOUT_MS = 15e3;
+const REACHABLE_TIMEOUT_MS = 24e4;
+const REACHABLE_POLL_MS = 2e3;
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function withManagedTunnelLock(root, fn, options = {}) {
+	return withWorkspaceProcessLock(managedTunnelLockRoot(root), "metro-tunnel", fn, {
+		...options,
+		rejectOwnerPurposes: ["workspace removal"]
+	});
+}
+async function withManagedTunnelRemovalLock(root, fn, options = {}) {
+	return withWorkspaceProcessLock(managedTunnelLockRoot(root), "metro-tunnel", fn, {
+		...options,
+		ownerPurpose: "workspace removal"
+	});
+}
+async function withManagedRemoteWorktreeLock(worktreeRoot, fn, options = {}) {
+	return withWorkspaceProcessLock(managedRemoteWorktreeLockRoot(worktreeRoot), "managed-remote", fn, {
+		...options,
+		external: true,
+		rejectOwnerPurposes: ["worktree removal"]
+	});
+}
+async function withManagedRemoteWorktreeRemovalLock(worktreeRoot, fn, options = {}) {
+	return withWorkspaceProcessLock(managedRemoteWorktreeLockRoot(worktreeRoot), "managed-remote", fn, {
+		...options,
+		external: true,
+		ownerPurpose: "worktree removal"
+	});
+}
+function managedLockHolders(root) {
+	const locks = [{
+		label: "managed tunnel",
+		path: workspaceProcessLockPath(managedTunnelLockRoot(root), "metro-tunnel", false)
+	}, {
+		label: "managed remote",
+		path: workspaceProcessLockPath(managedRemoteWorktreeLockRoot(root), "managed-remote", true)
+	}];
+	const reasons = [];
+	for (const { label, path } of locks) {
+		const claims = (0, ownership_claim_exports.readClaimSet)(path);
+		const holder = claims.live[0];
+		if (holder) {
+			const purpose = typeof holder.details.purpose === "string" ? ` for ${holder.details.purpose}` : "";
+			reasons.push(`the ${label} lock is held${purpose}`);
+		} else if (claims.unresolved[0]) reasons.push(`the ${label} lock cannot be resolved: ${claims.unresolved[0].reason}`);
 	}
+	return reasons;
 }
-//#endregion
-//#region src/devices/teardown.ts
-function teardownParkedAvd(avdName) {
-	try {
-		return removeParkedAfter("android", avdName, () => {
-			const result = teardownOwnedAvd(avdName, {
-				del: true,
-				owner: { pool: true }
+function managedTunnelLockRoot(root) {
+	const key = createHash("sha256").update(resolve(root)).digest("hex");
+	return join(getConfigDir(), "process-locks", key);
+}
+function managedRemoteWorktreeLockRoot(worktreeRoot) {
+	const key = createHash("sha256").update(resolve(worktreeRoot)).digest("hex");
+	return join(getConfigDir(), "process-locks", "worktrees", key);
+}
+async function defaultProbeReachable(url, signal) {
+	const status = await probePublicHttp(url, signal);
+	return status !== null && status > 0;
+}
+function waitForUrl(child, parseLine, timeoutMs) {
+	return new Promise((resolve) => {
+		let settled = false;
+		let lastLine = null;
+		let timer;
+		let onOut;
+		let onErr;
+		let onError;
+		let onExit;
+		const finish = (url, exited = false) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			child.stdout?.removeListener("data", onOut);
+			child.stderr?.removeListener("data", onErr);
+			child.removeListener("error", onError);
+			child.removeListener("exit", onExit);
+			resolve({
+				url,
+				exited,
+				lastLine
 			});
-			if (result.status !== "torn-down" && result.status !== "missing") throw new Error(result.reason);
-		}) ? {
-			status: "torn-down",
-			label: avdName
-		} : {
-			status: "skipped",
-			kind: "not-parked",
-			reason: "emulator is no longer parked"
 		};
-	} catch (error) {
-		return {
-			status: "failed",
-			reason: String(error?.message || error)
+		const onLine = (line) => {
+			if (settled) return;
+			if (line.trim()) lastLine = line.trim();
+			const url = parseLine(line);
+			if (url) finish(url);
 		};
-	}
-}
-function teardownParkedIosSim(udid, { label, deleteSim = deleteParkedIosSim } = {}) {
-	try {
-		const removed = removeParkedAfter("ios", udid, () => {
-			closeOwnedDeviceSessions({
-				platform: "ios",
-				id: udid
-			}, () => Boolean(resolveOwnedIosSim(udid).sim));
-			deleteSim(udid);
-		});
-		if (!removed) return {
-			status: "skipped",
-			kind: "not-parked",
-			reason: "simulator is no longer parked"
+		const outReader = createLineReader(onLine);
+		const errReader = createLineReader(onLine);
+		onOut = (chunk) => outReader.push(chunk);
+		onErr = (chunk) => errReader.push(chunk);
+		onError = () => finish(null);
+		onExit = () => {
+			outReader.flush();
+			errReader.flush();
+			finish(null, true);
 		};
-		return {
-			status: "torn-down",
-			label: label ?? removed.name
+		child.stdout?.setEncoding?.("utf-8");
+		child.stderr?.setEncoding?.("utf-8");
+		child.stdout?.on("data", onOut);
+		child.stderr?.on("data", onErr);
+		child.on("error", onError);
+		child.on("exit", onExit);
+		timer = setTimeout(() => finish(null), timeoutMs);
+	});
+}
+function waitForFileUrl(child, logFile, parseLine, timeoutMs) {
+	return new Promise((resolve) => {
+		let settled = false;
+		const finish = (url, exited = false) => {
+			if (settled) return;
+			settled = true;
+			clearInterval(interval);
+			clearTimeout(timer);
+			child.removeListener("error", onError);
+			child.removeListener("exit", onExit);
+			resolve({
+				url,
+				exited
+			});
 		};
-	} catch (error) {
-		return {
-			status: "failed",
-			reason: String(error?.message || error)
+		const probe = () => {
+			try {
+				for (const line of readFileSync(logFile, "utf-8").split(/\r?\n/)) {
+					const url = parseLine(line);
+					if (url) return finish(url);
+				}
+			} catch {}
 		};
+		const onError = () => finish(null);
+		const onExit = () => finish(null, true);
+		child.on("error", onError);
+		child.on("exit", onExit);
+		const interval = setInterval(probe, 25);
+		const timer = setTimeout(() => finish(null), timeoutMs);
+		probe();
+	});
+}
+function createTunnelLogFile(provider) {
+	const dir = join(getConfigDir(), "tunnel-logs");
+	mkdirSync(dir, { recursive: true });
+	const path = join(dir, `${provider}-${randomUUID()}.log`);
+	closeSync(openSync(path, "wx", 384));
+	return path;
+}
+function removeTunnelLogFile(path) {
+	if (!path) return;
+	try {
+		unlinkSync(path);
+	} catch {}
+}
+function removeRecordedTunnelLogFile(path) {
+	if (!path) return;
+	const dir = resolve(join(getConfigDir(), "tunnel-logs"));
+	const resolved = resolve(path);
+	if (!resolved.startsWith(`${dir}${sep}`) || resolve(join(dir, basename(resolved))) !== resolved) return;
+	removeTunnelLogFile(resolved);
+}
+async function waitUntilReachable({ url, now, sleep, probe, timeoutMs }) {
+	const deadline = now() + timeoutMs;
+	for (;;) {
+		if (await probe(url, new AbortController().signal).catch(() => false)) return true;
+		if (now() >= deadline) return false;
+		await sleep(REACHABLE_POLL_MS);
 	}
 }
-function eraseParkedIosSim(udid, { label } = {}) {
+const CLEANUP_TIMEOUT_MS = 1e3;
+const CLEANUP_POLL_MS = 25;
+async function startTunnel({ provider, port, spawnFn = null, urlTimeoutMs = URL_TIMEOUT_MS, reachableTimeoutMs = REACHABLE_TIMEOUT_MS, probeReachable = defaultProbeReachable, now = Date.now, sleep = defaultSleep, ngrokUrl = null, requireReachable = true, cleanupTimeoutMs = CLEANUP_TIMEOUT_MS, isChildAlive = pidExists, readProcessToken = process_identity_exports.captureProcessToken, logFile = null }) {
+	const spawn = spawnFn || ((cmd, args, opts) => getExecutor().spawn(cmd, args, opts));
+	const outputFile = provider === "tailscale" ? null : logFile || (spawnFn ? null : createTunnelLogFile(provider));
+	let child;
 	try {
-		const erased = eraseParkedAfter("ios", udid, (_record, eraseStarted) => {
-			closeOwnedDeviceSessions({
-				platform: "ios",
-				id: udid
-			}, () => Boolean(resolveOwnedIosSim(udid).sim));
-			const resolved = resolveOwnedIosSim(udid);
-			if (resolved.missing) throw new Error(`simulator ${udid} is not on this machine`);
-			if (resolved.notOwned) throw new Error(`simulator ${udid} is now named ${JSON.stringify(resolved.notOwned)}`);
-			const state = resolved.sim.state;
-			if (state !== "Shutdown") throw new Error(`simulator ${udid} is ${state}, not Shutdown; it was kept`);
-			eraseStarted();
-			eraseIosSim(udid);
+		const binary = provider === "tailscale" ? resolveTailscaleBinary((bin) => getExecutor().findExecutable(bin)) : provider;
+		if (!binary) throw new Error("Install Tailscale and sign in to your tailnet.");
+		const { bin, args } = tunnelArgv(provider, port, ngrokUrl, outputFile, binary);
+		child = spawn(bin, args, {
+			stdio: outputFile ? [
+				"ignore",
+				"ignore",
+				"ignore"
+			] : [
+				"ignore",
+				"pipe",
+				"pipe"
+			],
+			detached: true
 		});
-		if (!erased) return {
-			status: "skipped",
-			kind: "not-parked",
-			reason: "simulator is no longer parked"
-		};
+	} catch (err) {
+		removeTunnelLogFile(outputFile);
 		return {
-			status: "torn-down",
-			label: label ?? erased.name
+			failed: true,
+			reason: `Could not start ${provider}: ${describe(err)}`
 		};
-	} catch (error) {
-		return {
+	}
+	let childExited = false;
+	child.once("exit", () => {
+		childExited = true;
+	});
+	const cleanup = async (alreadyExited = childExited) => {
+		const stopped = await terminateChild(child, {
+			alreadyExited,
+			timeoutMs: cleanupTimeoutMs,
+			now,
+			sleep,
+			isAlive: isChildAlive
+		});
+		if (stopped) removeTunnelLogFile(outputFile);
+		return stopped ? { status: "stopped" } : {
 			status: "failed",
-			reason: String(error?.message || error)
+			reason: `Sent SIGKILL but could not confirm that pid ${child.pid ?? "unknown"} exited.`
+		};
+	};
+	const failAfterCleanup = async (reason, alreadyExited = childExited) => {
+		const stopped = await cleanup(alreadyExited);
+		return stopped.status === "stopped" ? {
+			failed: true,
+			reason
+		} : {
+			failed: true,
+			reason: `${reason} ${stopped.reason}`,
+			cleanupFailed: true
 		};
+	};
+	const pid = child.pid;
+	if (!pid) return failAfterCleanup(`${provider} started but reported no pid.`);
+	const captureChildIdentity = () => {
+		try {
+			return readProcessToken(pid);
+		} catch {
+			return null;
+		}
+	};
+	const initialProcessToken = captureChildIdentity();
+	if (!initialProcessToken) return failAfterCleanup(`${provider} started but its process identity token could not be read.`);
+	const { url, exited, lastLine } = outputFile ? await waitForFileUrl(child, outputFile, parserFor(provider), urlTimeoutMs) : await waitForUrl(child, parserFor(provider), urlTimeoutMs);
+	if (!url) return failAfterCleanup(exited ? provider === "tailscale" && lastLine ? `${provider} exited before printing a tunnel URL: ${lastLine}` : `${provider} exited before printing a tunnel URL.` : `${provider} did not print a tunnel URL within ${urlTimeoutMs}ms.`, exited || childExited);
+	if (!outputFile) resumeChildPipes(child);
+	if (requireReachable) {
+		if (!await waitUntilReachable({
+			url,
+			now,
+			sleep,
+			probe: probeReachable,
+			timeoutMs: reachableTimeoutMs
+		})) return failAfterCleanup(`${url} did not become reachable within ${reachableTimeoutMs}ms; ${provider} may still be registering, or the network path is blocked.`);
 	}
+	const finalProcessToken = captureChildIdentity();
+	if (!finalProcessToken || finalProcessToken !== initialProcessToken) return failAfterCleanup(`${provider} process identity changed before its tunnel could be recorded.`);
+	if (!outputFile) unrefChildPipes(child);
+	child.unref?.();
+	if (childExited) return failAfterCleanup(`${provider} exited before its tunnel could be recorded.`, true);
+	return {
+		url,
+		pid,
+		processToken: initialProcessToken,
+		logFile: outputFile,
+		cleanup: () => cleanup()
+	};
 }
-function eraseParkedAvd(avdName) {
-	try {
-		return eraseParkedAfter("android", avdName, (_record, eraseStarted) => {
-			if (resolveOwnedAvdSerial(avdName).serial) throw new Error(`AVD ${avdName} is running; it was kept`);
-			const result = teardownOwnedAvd(avdName, {
-				wipe: true,
-				owner: { pool: true },
-				onWipeStart: eraseStarted
-			});
-			if (result.status !== "torn-down") throw new Error(result.reason ?? `AVD ${avdName} is ${result.status}`);
-		}) ? {
-			status: "torn-down",
-			label: avdName
-		} : {
-			status: "skipped",
-			kind: "not-parked",
-			reason: "emulator is no longer parked"
+async function startTunnelSequence({ providers, port, ngrokUrl = null, requireReachable = true, start = startTunnel }) {
+	const failures = [];
+	for (const provider of providers) {
+		const result = await start({
+			provider,
+			port,
+			ngrokUrl: provider === "ngrok" ? ngrokUrl : null,
+			requireReachable
+		});
+		if (!("failed" in result)) return {
+			provider,
+			...result
 		};
-	} catch (error) {
-		return {
-			status: "failed",
-			reason: String(error?.message || error)
+		failures.push(`${provider}: ${result.reason}`);
+		if (result.cleanupFailed) return {
+			failed: true,
+			reason: failures.join(" ")
 		};
 	}
+	return {
+		failed: true,
+		reason: failures.join(" ") || "No managed tunnel provider was selected."
+	};
 }
-const IOS_SHUTDOWN_SETTLE_MS = 15e3;
-const ADB_RELEASE_WAIT_MS = 3e3;
-function repoRootAbove(workspace) {
-	if (workspace === void 0 || !getExecutor().findExecutable("agent-device")) return void 0;
-	const root = repoRoot(workspace);
+function closeChildPipes(child) {
+	child.stdout?.destroy?.();
+	child.stderr?.destroy?.();
+}
+function unrefChildPipes(child) {
+	resumeChildPipes(child);
+	for (const stream of [child.stdout, child.stderr]) stream?.unref?.();
+}
+function resumeChildPipes(child) {
+	child.stdout?.resume?.();
+	child.stderr?.resume?.();
+}
+async function signalAndWaitForExit(child, signal, { timeoutMs, now, sleep, isAlive, platform }) {
+	let exited = false;
+	const onExit = () => {
+		exited = true;
+	};
+	child.once("exit", onExit);
 	try {
-		return root && realpathSync(root) !== realpathSync(workspace) ? root : void 0;
-	} catch {
-		return;
+		if (platform === "win32" && child.pid) signalProcessTree(child.pid, signal, { platform });
+		child.kill(signal);
+	} catch (err) {
+		child.removeListener("exit", onExit);
+		return isEsrch(err);
 	}
+	const hasExited = () => exited;
+	const deadline = now() + timeoutMs;
+	while (!hasExited() && now() < deadline) await sleep(CLEANUP_POLL_MS);
+	if (!hasExited() && child.pid && !isAlive(child.pid)) exited = true;
+	child.removeListener("exit", onExit);
+	return hasExited();
 }
-const IOS_SHUTDOWN_POLL_MS = 250;
-const IOS_SHUTDOWN_ATTEMPTS = 2;
-function settleIosSimShutdown(udid, { now = Date.now, sleep = sleepSync }) {
-	let resolved = resolveOwnedIosSim(udid);
-	for (let attempt = 1;; attempt++) {
-		const deadline = now() + IOS_SHUTDOWN_SETTLE_MS;
-		while (resolved.sim && resolved.sim.state !== "Shutdown" && now() < deadline) {
-			sleep(IOS_SHUTDOWN_POLL_MS);
-			resolved = resolveOwnedIosSim(udid);
-		}
-		if (!resolved.sim || resolved.sim.state === "Shutdown" || attempt === IOS_SHUTDOWN_ATTEMPTS) return resolved;
-		shutdownIosSim(udid);
-		resolved = resolveOwnedIosSim(udid);
+async function terminateChild(child, { alreadyExited, timeoutMs, now, sleep, isAlive, platform = process.platform }) {
+	if (alreadyExited) {
+		closeChildPipes(child);
+		return true;
+	}
+	if (await signalAndWaitForExit(child, "SIGTERM", {
+		timeoutMs,
+		now,
+		sleep,
+		isAlive,
+		platform
+	})) {
+		closeChildPipes(child);
+		return true;
 	}
+	const killed = await signalAndWaitForExit(child, "SIGKILL", {
+		timeoutMs,
+		now,
+		sleep,
+		isAlive,
+		platform
+	});
+	closeChildPipes(child);
+	return killed;
 }
-function iosShutdownFailureReason(udid, state) {
-	return `simulator ${udid} is still ${state} after ${IOS_SHUTDOWN_ATTEMPTS} shutdown attempts and ${IOS_SHUTDOWN_ATTEMPTS * IOS_SHUTDOWN_SETTLE_MS / 1e3}s of waiting`;
+function describe(err) {
+	return err?.message || String(err);
 }
-function parkOwnedIosSim(settled, udid, park) {
-	if (settled.missing) throw new Error(`simulator ${udid} disappeared after shutdown`);
-	if (settled.notOwned) throw new Error(`simulator ${udid} is now named ${JSON.stringify(settled.notOwned)}`);
-	const sim = settled.sim;
-	if (sim.state !== "Shutdown") throw new Error(iosShutdownFailureReason(udid, sim.state));
-	const model = listIosDeviceTypes().find((d) => d.identifier === sim.deviceTypeIdentifier)?.name ?? null;
-	const runtime = parseRuntimeVersion(sim.runtime);
-	const name = parkedSimName(sim.udid, {
-		model,
-		runtime
-	});
-	renameIosSim(sim.udid, name);
-	const record = {
-		udid: sim.udid,
-		name,
-		deviceTypeIdentifier: sim.deviceTypeIdentifier,
-		runtimeIdentifier: sim.runtime,
-		parkedAt: (/* @__PURE__ */ new Date()).toISOString(),
-		simslimManaged: Boolean(park.simslimManaged),
-		...park.appId ? { bundleId: park.appId } : {},
-		...park.cacheKey ? { cacheKey: park.cacheKey } : {}
+const STOP_TIMEOUT_MS = 5e3;
+const STOP_POLL_MS = 100;
+function isEsrch(err) {
+	return err?.code === "ESRCH";
+}
+async function stopTunnel(record, { isAlive = pidExists, inspectIdentity = process_identity_exports.inspectProcessIdentity, platform = process.platform, kill = (pid) => signalProcessTree(pid, "SIGTERM", { platform }), now = Date.now, sleep = defaultSleep, timeoutMs = STOP_TIMEOUT_MS } = {}) {
+	const missing = () => {
+		removeRecordedTunnelLogFile(record?.logFile);
+		return { status: "missing" };
 	};
-	return {
-		record,
-		evicted: parkSim({
-			platform: "ios",
-			projectPath: park.projectPath,
-			slot: park.slot,
-			record,
-			max: park.max
-		})
+	const pid = record?.pid;
+	if (!pid || !isAlive(pid)) return missing();
+	if (!record.processToken) return {
+		status: "failed",
+		reason: `tunnel pid ${pid} has no process identity token, so Stim cannot verify ownership. Keep the record. Inspect the process, stop it with the provider tooling, remove the stale metroTunnel state, and retry.`
+	};
+	const identity = inspectIdentity(record);
+	if (identity === "gone" || identity === "different") return missing();
+	if (identity !== "same") return {
+		status: "failed",
+		reason: `could not verify the process identity for tunnel pid ${pid}; refusing to signal it.`
 	};
-}
-function teardownOwnedIosSim(udid, { del = false, label, park, workspace, shutdownClock = {} } = {}) {
-	let parkFallback;
 	try {
-		const resolved = resolveOwnedIosSim(udid);
-		if (resolved.notOwned) return {
-			status: "skipped",
-			kind: "not-owned",
-			reason: `sim "${resolved.notOwned}" is not Stim-owned: Stim has no record of creating it`
-		};
-		if (resolved.missing) return { status: "missing" };
-		closeOwnedDeviceSessions({
-			platform: "ios",
-			id: udid
-		}, () => Boolean(resolveOwnedIosSim(udid).sim), workspace);
-		const current = resolveOwnedIosSim(udid);
-		if (current.missing) return { status: "missing" };
-		if (current.notOwned) return {
-			status: "skipped",
-			kind: "not-owned",
-			reason: "simulator ownership changed before shutdown"
-		};
-		shutdownIosSim(udid);
-		const sim = resolved.sim;
-		if (del && park && park.max > 0) try {
-			const { record, evicted } = parkOwnedIosSim(settleIosSimShutdown(udid, shutdownClock), udid, park);
-			const removed = [];
-			const failures = [];
-			for (const entry of evicted) {
-				const result = teardownParkedIosSim(entry.udid, { label: entry.name });
-				if (result.status === "torn-down") removed.push({
-					udid: entry.udid,
-					name: entry.name
-				});
-				else if (result.status === "failed") failures.push(`could not delete evicted ${entry.name} (${entry.udid}): ${result.reason}`);
-			}
-			return {
-				status: "torn-down",
-				label: label ?? sim.name ?? udid,
-				parked: {
-					udid: record.udid,
-					name: record.name
-				},
-				evicted: removed,
-				...failures.length ? { evictionFailures: failures } : {}
-			};
-		} catch (e) {
-			parkFallback = String(e?.message || e);
-		}
-		if (del) {
-			deleteIosSim(udid);
-			return {
-				status: "torn-down",
-				label: label ?? sim.name ?? udid,
-				...parkFallback ? { parkFallback } : {}
-			};
-		}
-		const settled = settleIosSimShutdown(udid, shutdownClock);
-		if (settled.sim && settled.sim.state !== "Shutdown") return {
-			status: "failed",
-			label: label ?? sim.name ?? udid,
-			reason: iosShutdownFailureReason(udid, settled.sim.state)
-		};
-		const root = sim.state === "Shutdown" ? void 0 : repoRootAbove(workspace);
-		if (root && settled.sim) closeOwnedDeviceSessions({
-			platform: "ios",
-			id: udid
-		}, () => resolveOwnedIosSim(udid).sim?.state === "Shutdown", workspace, root);
-		return {
-			status: "torn-down",
-			label: label ?? sim.name ?? udid
-		};
-	} catch (e) {
-		return {
+		kill(pid);
+	} catch (err) {
+		return isEsrch(err) ? missing() : {
 			status: "failed",
-			reason: String(e?.message || e),
-			...parkFallback ? { parkFallback } : {}
+			reason: describe(err)
 		};
 	}
+	const deadline = now() + timeoutMs;
+	const exited = () => {
+		if (!isAlive(pid)) return true;
+		const current = inspectIdentity(record);
+		return current === "gone" || current === "different";
+	};
+	while (now() < deadline && !exited()) await sleep(STOP_POLL_MS);
+	if (!exited()) return {
+		status: "failed",
+		reason: `pid ${pid} did not exit within ${timeoutMs}ms.`
+	};
+	removeRecordedTunnelLogFile(record.logFile);
+	return { status: "stopped" };
 }
-function assertAvdReferences(avdName, owner) {
-	const config = loadConfig$1();
-	if (!config) throw new Error("Cannot verify AVD references without a Stim config; the data was kept.");
-	if (owner && "projectPath" in owner && owner.expectedRecord && !isDeepStrictEqual(deviceSlotPlatforms(config.projects[owner.projectPath], owner.slot)?.android, owner.expectedRecord)) throw new Error(`AVD ${avdName} has a changed workspace record; its data was kept.`);
-	for (const [projectPath, project] of Object.entries(config.projects)) for (const { slot, platforms } of projectDeviceSlots(project)) {
-		if (platforms.android?.avdName?.toLowerCase() !== avdName.toLowerCase()) continue;
-		if (!owner || !("projectPath" in owner) || owner.projectPath !== projectPath || (owner.slot ?? "default") !== slot || !platforms.android.owned) throw new Error(`AVD ${avdName} is referenced by ${projectPath} (${slot}); its data was kept.`);
+//#endregion
+//#region src/commands/gc/paths.ts
+function canonicalPath(p) {
+	try {
+		return realpathSync$1(p);
+	} catch {
+		return resolve$1(p);
 	}
-	if (readParked("android", { config }).some((entry) => entry.name.toLowerCase() === avdName.toLowerCase()) && !(owner && "pool" in owner)) throw new Error(`AVD ${avdName} is in the emulator pool; its data was kept.`);
 }
-function removeOrphanedAvdDirectory(candidate, owner) {
-	const surveyed = listOrphanedAvdDirectories(candidate.name).find((entry) => entry.directory === candidate.directory);
-	if (!surveyed || surveyed.name !== candidate.name || surveyed.dev !== candidate.dev || surveyed.ino !== candidate.ino) throw new Error(`AVD data at ${candidate.directory} changed or is registered; it was kept.`);
-	assertOwnedAvdStopped(candidate.name, { resolveDirectory: () => candidate.directory });
-	const detached = withConfigLock$1(() => {
-		const current = lstatSync(candidate.directory);
-		if (!current.isDirectory() || current.dev !== candidate.dev || current.ino !== candidate.ino) throw new Error(`AVD data at ${candidate.directory} changed or is registered; it was kept.`);
-		assertAvdReferences(candidate.name, owner);
-		const name = `stim-gc-${randomUUID()}`;
-		recordCreatedDevice("android", name);
-		const destination = join(dirname(candidate.directory), `${name}.avd`);
-		try {
-			renameSync(candidate.directory, destination);
-		} catch (error) {
-			forgetCreatedDevice("android", name);
-			throw error;
-		}
-		forgetCreatedDevice("android", candidate.name);
-		return destination;
+//#endregion
+//#region src/commands/gc/results.ts
+const results = [];
+function recordGcResult(kind, status, label, { id = null, bytes = null, detail = null } = {}) {
+	results.push({
+		kind,
+		status,
+		label,
+		id,
+		bytes,
+		detail
 	});
-	const current = lstatSync(detached);
-	if (!current.isDirectory() || current.dev !== candidate.dev || current.ino !== candidate.ino) throw new Error(`Detached AVD data changed at ${detached}; it was kept.`);
+}
+function takeGcResults() {
+	return results.splice(0);
+}
+//#endregion
+//#region src/devices/agent-device-cleanup.ts
+function parseAgentDeviceSessions(output) {
+	const result = JSON.parse(output);
+	if (result?.success !== true || !Array.isArray(result.data?.sessions)) throw new Error("agent-device did not return a successful session list");
+	return result.data.sessions.flatMap((entry) => {
+		if (!entry || typeof entry !== "object") return [];
+		const row = entry;
+		const id = row.platform === "ios" ? row.device_udid : row.id;
+		if (row.platform !== "ios" && row.platform !== "android" || typeof row.name !== "string" || !row.name.trim() || typeof id !== "string" || !id || typeof row.createdAt !== "number" || !Number.isFinite(row.createdAt) || row.platform === "ios" && row.id !== void 0 && row.id !== id) return [];
+		return [{
+			name: typeof row.address === "string" && row.address.trim() ? row.address : row.name,
+			platform: row.platform,
+			id,
+			device: typeof row.device === "string" ? row.device : null,
+			createdAt: row.createdAt
+		}];
+	});
+}
+function isOwnDeviceSession(session, device, owner) {
+	if (session.platform !== device.platform || device.id !== null && session.id !== device.id) return false;
+	if (device.platform === "android" && session.device !== device.avdName.replaceAll("_", " ")) return false;
+	if (!owner) return true;
+	return owner.claims.some((claim) => claim.deviceId === session.id && claim.session === session.name && claim.workspace !== null && (within(owner.workspace, claim.workspace) || claim.workspace === owner.repoRoot));
+}
+function within(root, path) {
+	const rest = relative(root, path);
+	return rest === "" || !isAbsolute(rest) && rest.split(sep)[0] !== "..";
+}
+function canonical(path) {
 	try {
-		rmSync(detached, { recursive: true });
-	} catch (error) {
-		throw new Error(`Could not remove AVD data at ${detached}; retry gc --delete: ${error.message}`, { cause: error });
+		return realpathSync(path);
+	} catch {
+		return null;
 	}
-	forgetCreatedDevice("android", basename(detached, ".avd"));
 }
-function teardownUnregisteredAvd(avdName, del, owner, surveyed) {
-	const candidates = surveyed ? [surveyed] : listOrphanedAvdDirectories(avdName);
-	if (candidates.length === 0) {
-		if (avdStorageRoots().some((root) => avdPathExists(join(root, `${avdName}.ini`)) || avdPathExists(join(root, `${avdName}.avd`)))) throw new Error(`AVD ${avdName} is not listed but its storage remains; it was kept.`);
-		return { status: "missing" };
-	}
-	if (!del) return {
-		status: "skipped",
-		reason: "AVD registration is missing; its data was kept."
-	};
-	for (const candidate of candidates) {
-		if (candidate.name !== avdName) throw new Error(`AVD data does not match ${avdName}; it was kept.`);
-		removeOrphanedAvdDirectory(candidate, owner);
-	}
-	return {
-		status: "torn-down",
-		label: avdName
-	};
+function deviceClaims(device) {
+	return readAgentDeviceRecords(homedir()).filter((record) => record.kind === "claim" && (device.id === null || record.deviceId === device.id)).map((record) => ({
+		deviceId: record.deviceId,
+		session: record.session,
+		workspace: record.workspace && canonical(record.workspace)
+	}));
 }
-function teardownOwnedAvd(avdName, options = {}) {
-	let claim;
+function explainFailure(error) {
+	const stdout = error?.stdout;
+	let failure;
 	try {
-		if (!isStimOwnedAvd(avdName)) return {
-			status: "skipped",
-			kind: "not-owned",
-			reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
-		};
-		claim = acquireAvdClaim(avdName);
-		const result = teardownClaimedAvd(avdName, claim, options);
-		if (result.status === "torn-down" || result.status === "missing") options.onRemoved?.();
-		return result;
-	} catch (error) {
-		return {
-			status: "failed",
-			reason: String(error?.message || error)
-		};
-	} finally {
-		(0, ownership_claim_exports.releaseClaim)(claim);
+		failure = typeof stdout === "string" ? JSON.parse(stdout)?.error : void 0;
+	} catch {
+		failure = void 0;
 	}
+	if (typeof failure?.message !== "string" || !failure.message) return error;
+	const reason = typeof failure.details?.reason === "string" ? ` (${failure.details.reason})` : "";
+	return /* @__PURE__ */ new Error(`agent-device refused: ${failure.message}${reason}`);
 }
-function serialFree(serial) {
-	const adb = listAdbDevices();
-	return ![
-		...adb.emulators,
-		...adb.physical,
-		...adb.unhealthy
-	].some((entry) => entry.serial === serial);
+function report(message) {
+	process.stderr.write(`${phaseLine("device", message)}\n`);
 }
-function teardownClaimedAvd(avdName, claim, { del = false, wipe = false, park, owner, workspace, orphanedDirectory, onlyIfMissing = false, onWipeStart, waitForShutdown = waitForAndroidEmulatorShutdown, assertStopped = assertOwnedAvdStopped, resolveAvd = resolveOwnedAvdSerial }) {
-	let parkFallback;
+function closeOwnedDeviceSessions(device, stillOwned, workspace, repoRoot) {
+	const exec = getExecutor();
 	try {
-		if (del || wipe) withConfigLock$1(() => assertAvdReferences(avdName, owner));
-		const resolved = resolveAvd(avdName);
-		if (resolved.notOwned) return {
-			status: "skipped",
-			kind: "not-owned",
-			reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
-		};
-		if (resolved.missing) {
-			if (wipe) throw new Error(`AVD ${avdName} is not registered; its data was kept.`);
-			return teardownUnregisteredAvd(avdName, del, owner, orphanedDirectory);
-		}
-		if (onlyIfMissing) return {
-			status: "skipped",
-			reason: "AVD registration appeared; its record was kept."
-		};
-		if (orphanedDirectory) return {
-			status: "skipped",
-			reason: "AVD registration appeared; its data was kept."
-		};
-		const serial = resolved.serial;
-		const stillStopped = (sessionSerial) => {
-			const current = resolveAvd(avdName);
-			return !current.notOwned && !current.missing && !current.serial && serialFree(sessionSerial);
+		if (!exec.findExecutable("agent-device")) return;
+		const root = workspace === void 0 ? void 0 : canonical(workspace);
+		if (root === null) return;
+		const owner = root === void 0 ? void 0 : {
+			workspace: root,
+			repoRoot: repoRoot && (canonical(repoRoot) ?? void 0),
+			claims: deviceClaims(device)
 		};
-		if (serial) {
-			const stillOwned = () => {
-				const current = resolveAvd(avdName);
-				return !current.notOwned && !current.missing && current.serial === serial;
-			};
-			closeOwnedDeviceSessions({
-				platform: "android",
-				id: serial,
-				avdName
-			}, stillOwned, workspace);
-			if (!stillOwned()) throw new Error(`Owned AVD ${avdName} changed before shutdown; it was kept.`);
-			waitForShutdown(avdName, (timeoutMs) => {
-				(0, ownership_claim_exports.markClaimChildPending)(claim);
+		const stateDir = root === void 0 ? void 0 : workspaceAgentDeviceDir(root);
+		const stateDirs = [void 0, ...stateDir && !["none", "dead"].includes(agentDeviceDaemon(stateDir)) ? [stateDir] : []];
+		for (const dir of stateDirs) {
+			const deadline = Date.now() + 15e3;
+			const run = (args) => {
+				const remaining = deadline - Date.now();
+				if (remaining <= 0) throw new Error("agent-device cleanup timed out");
 				try {
-					shutdownAndroidEmulator(serial, timeoutMs);
-				} finally {
-					(0, ownership_claim_exports.clearClaimChild)(claim);
+					return exec.runFile("agent-device", [
+						...args,
+						...dir ? ["--state-dir", dir] : [],
+						"--json",
+						"--daemon-transport",
+						"socket"
+					], {
+						timeoutMs: Math.min(5e3, remaining),
+						killSignal: "SIGKILL"
+					});
+				} catch (error) {
+					throw explainFailure(error);
 				}
-			});
-			const root = repoRootAbove(workspace);
-			if (root) {
-				const deadline = Date.now() + ADB_RELEASE_WAIT_MS;
-				while (!serialFree(serial) && Date.now() < deadline) sleepSync(250);
-				closeOwnedDeviceSessions({
-					platform: "android",
-					id: serial,
-					avdName
-				}, stillStopped, workspace, root);
-			}
-		} else {
-			closeOwnedDeviceSessions({
-				platform: "android",
-				id: null,
-				avdName
-			}, stillStopped, workspace);
-			waitForShutdown(avdName, null);
-		}
-		if (wipe && !del) {
-			const current = resolveAvd(avdName);
-			if (current.notOwned || current.missing) throw new Error(`AVD ${avdName} changed before its data was wiped.`);
-			if (current.serial) throw new Error(`Owned AVD ${avdName} started again before its data was wiped.`);
-			assertStopped(avdName);
-			withConfigLock$1(() => assertAvdReferences(avdName, owner));
-			const directory = ownedAvdDirectory(avdName);
-			if (!directory) throw new Error(`The data directory of AVD ${avdName} could not be resolved.`);
-			onWipeStart?.();
-			wipeAvdUserData(directory);
-		}
-		if (del) {
-			const current = resolveAvd(avdName);
-			if (current.notOwned) return {
-				status: "skipped",
-				kind: "not-owned",
-				reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
 			};
-			if (current.missing) return teardownUnregisteredAvd(avdName, del, owner);
-			if (current.serial) throw new Error(`Owned AVD ${avdName} started again before deletion.`);
-			assertStopped(avdName);
-			withConfigLock$1(() => assertAvdReferences(avdName, owner));
-			if (park && park.max > 0) try {
-				const systemImage = ownedAvdSystemImage(avdName);
-				if (!systemImage || !park.configuration || !ownedAvdMatchesConfiguration(avdName, park.configuration)) throw new Error("the AVD has no verified creation configuration");
-				const evicted = parkSim({
-					platform: "android",
-					projectPath: park.projectPath,
-					slot: park.slot,
-					max: park.max,
-					record: {
-						udid: avdName,
-						name: avdName,
-						systemImage,
-						configuration: park.configuration,
-						parkedAt: (/* @__PURE__ */ new Date()).toISOString(),
-						...park.appId ? { packageName: park.appId } : {},
-						...park.cacheKey ? { cacheKey: park.cacheKey } : {}
-					}
-				});
-				const removed = [];
-				const failures = [];
-				for (const entry of evicted) {
-					const result = teardownParkedAvd(entry.name);
-					if (result.status === "torn-down") removed.push({
-						udid: entry.name,
-						name: entry.name,
-						platform: "android"
-					});
-					else if (result.status === "failed") failures.push(`could not delete evicted ${entry.name}: ${result.reason}`);
+			const list = () => parseAgentDeviceSessions(run([
+				"session",
+				"list",
+				"--session",
+				"stim-teardown-inventory"
+			]));
+			try {
+				const sessions = list().filter((session) => isOwnDeviceSession(session, device, owner));
+				for (const session of sessions) try {
+					if (!list().some((current) => current.name === session.name && current.platform === session.platform && current.id === session.id && current.createdAt === session.createdAt)) continue;
+					if (!stillOwned(session.id)) continue;
+					if (JSON.parse(run([
+						"close",
+						"--session",
+						session.name,
+						"--session-lock",
+						"reject",
+						"--platform",
+						device.platform,
+						device.platform === "ios" ? "--udid" : "--serial",
+						session.id
+					]))?.success !== true) throw new Error("agent-device did not confirm session close");
+					report(`closed agent-device session ${session.name} on ${session.id}`);
+				} catch (error) {
+					report(`could not close agent-device session ${session.name} on ${session.id}: ${error.message}`);
 				}
-				return {
-					status: "torn-down",
-					label: avdName,
-					parked: {
-						udid: avdName,
-						name: avdName,
-						platform: "android"
-					},
-					evicted: removed,
-					...failures.length ? { evictionFailures: failures } : {}
-				};
 			} catch (error) {
-				parkFallback = String(error?.message || error);
-			}
-			const directory = ownedAvdDirectory(avdName);
-			const paths = avdStorageRoots().map((root) => join(root, `${avdName}.ini`));
-			if (directory) paths.push(directory);
-			(0, ownership_claim_exports.markClaimChildPending)(claim);
-			try {
-				deleteAvd(avdName);
-			} finally {
-				(0, ownership_claim_exports.clearClaimChild)(claim);
+				report(`could not list agent-device sessions for ${device.platform === "ios" ? device.id : device.id ?? device.avdName}: ${error.message}`);
 			}
-			const remaining = paths.filter(avdPathExists);
-			if (remaining.length) throw new Error(`AVD ${avdName} was only partially deleted; data remains at ${remaining.join(", ")}.`);
 		}
-		return {
-			status: "torn-down",
-			label: avdName,
-			serial: resolved.serial ?? null,
-			...parkFallback ? { parkFallback } : {}
-		};
-	} catch (e) {
-		return {
-			status: "failed",
-			reason: String(e?.message || e)
-		};
-	}
-}
-const BROWSER_EXIT_WAIT_MS = 15e3;
-const CHROME_KILL_WAIT_MS = 5e3;
-async function stopOwnedChrome(record) {
-	for (const signal of ["SIGTERM", "SIGKILL"]) {
-		const state = chromeProcessState(record);
-		if (state === "gone") return true;
-		if (state === "unknown") return false;
-		try {
-			signalProcessTree(record.pid, signal, { group: true });
-		} catch {}
-		const deadline = Date.now() + CHROME_KILL_WAIT_MS;
-		while (chromeProcessState(record) !== "gone" && Date.now() < deadline) await sleepAsync(50);
+	} catch (error) {
+		report(`could not list agent-device sessions for ${device.platform === "ios" ? device.id : device.id ?? device.avdName}: ${error.message}`);
 	}
-	return chromeProcessState(record) === "gone";
 }
-const sleepAsync = (ms) => new Promise((done) => setTimeout(done, ms));
-/**
-* Closes the workspace's Stim-owned Chrome and its supervisor, after verifying both process identities. With
-* `deleteProfile`, it also deletes the profile directory, only when the created-devices ledger lists it.
-*/
-async function teardownOwnedBrowser(root, options = {}) {
+//#endregion
+//#region src/devices/teardown.ts
+function teardownParkedAvd(avdName) {
 	try {
-		return await withWorkspaceProcessLock(workspaceDir(root), "web", () => teardownBrowserHeld(root, options), {
-			external: true,
-			ownerPurpose: "browser teardown"
-		});
+		return removeParkedAfter("android", avdName, () => {
+			const result = teardownOwnedAvd(avdName, {
+				del: true,
+				owner: { pool: true }
+			});
+			if (result.status !== "torn-down" && result.status !== "missing") throw new Error(result.reason);
+		}) ? {
+			status: "torn-down",
+			label: avdName
+		} : {
+			status: "skipped",
+			kind: "not-parked",
+			reason: "emulator is no longer parked"
+		};
 	} catch (error) {
 		return {
 			status: "failed",
@@ -833,76 +895,24 @@ async function teardownOwnedBrowser(root, options = {}) {
 		};
 	}
 }
-/** {@link teardownOwnedBrowser} for a caller that already holds the {@link BROWSER_LOCK} lock. */
-async function teardownBrowserHeld(root, { deleteProfile = false } = {}) {
+function teardownParkedIosSim(udid, { label, deleteSim = deleteParkedIosSim } = {}) {
 	try {
-		const record = readWebRecord(root);
-		const profile = record?.profile ?? webProfileDir(root);
-		if (record) {
-			const supervisor = (0, process_identity_exports.inspectProcessIdentity)(record);
-			const chrome = record.chromeProcess ? (0, process_identity_exports.inspectProcessIdentity)(record.chromeProcess) : "gone";
-			if (supervisor === "unknown" || chrome === "unknown") return {
-				status: "skipped",
-				kind: "not-verified",
-				reason: `the browser supervisor (pid ${record.pid}) or its Chrome could not be verified; its record was kept`
-			};
-			if (supervisor === "same") {
-				try {
-					process.kill(record.pid, "SIGTERM");
-				} catch {}
-				if (!await (0, process_identity_exports.waitForProcessExit)(record, BROWSER_EXIT_WAIT_MS)) return {
-					status: "failed",
-					reason: `browser supervisor pid ${record.pid} did not exit`
-				};
-			}
-			if (record.chromeProcess && !await stopOwnedChrome(record.chromeProcess)) return {
-				status: "failed",
-				reason: `Chrome pid ${record.chromeProcess.pid} did not exit`
-			};
-			const holder = liveProfileHolder(profile);
-			if (holder !== null) return {
-				status: "skipped",
-				kind: "not-verified",
-				reason: `pid ${holder} still holds ${profile}, and the browser record does not name it; it was left running`
-			};
-			const claims = (0, ownership_claim_exports.clearFreeClaimSet)({
-				root: webClaimRoot(root),
-				label: "browser supervisor"
-			});
-			if (claims.status !== "cleared") return {
-				status: "skipped",
-				kind: "not-verified",
-				reason: claims.status === "held" ? `the browser supervisor claim is still held${claims.holder ? ` by pid ${claims.holder.owner.pid}` : ""}` : `the browser supervisor claim could not be cleared (${claims.reason}); remove it with ${(0, ownership_claim_exports.claimRemoveCommand)(webClaimRoot(root))}`
-			};
-			clearWebRecord(root, record);
-			await releaseBrowserPort(root, record.cdpPort);
-		} else {
-			const holder = liveProfileHolder(profile);
-			if (holder !== null) return {
-				status: "skipped",
-				kind: "not-verified",
-				reason: `pid ${holder} holds ${profile} but no browser supervisor is recorded; it was left running`
-			};
-			const port = getProject(root)?.ports?.[CDP_PORT_LABEL];
-			if (typeof port === "number") await releaseBrowserPort(root, port);
-		}
-		if (existsSync(profile)) removeSingletonFiles(profile);
-		if (deleteProfile && existsSync(profile)) {
-			if (!readCreatedDevices$1().web.has(profile)) return {
-				status: "skipped",
-				kind: "not-owned",
-				reason: `${profile} is not in Stim's ledger; it was kept`
-			};
-			rmSync(profile, {
-				recursive: true,
-				force: true
-			});
-			forgetCreatedDevice("web", profile);
-		}
-		return record ? {
+		const removed = removeParkedAfter("ios", udid, () => {
+			closeOwnedDeviceSessions({
+				platform: "ios",
+				id: udid
+			}, () => Boolean(resolveOwnedIosSim(udid).sim));
+			deleteSim(udid);
+		});
+		if (!removed) return {
+			status: "skipped",
+			kind: "not-parked",
+			reason: "simulator is no longer parked"
+		};
+		return {
 			status: "torn-down",
-			label: `Chrome (${profile})`
-		} : { status: "missing" };
+			label: label ?? removed.name
+		};
 	} catch (error) {
 		return {
 			status: "failed",
@@ -910,640 +920,632 @@ async function teardownBrowserHeld(root, { deleteProfile = false } = {}) {
 		};
 	}
 }
-//#endregion
-//#region src/macos/instances.ts
-const BUNDLE_EXECUTABLE = /^[^/]+\.app\/Contents\/MacOS\/[^/]+$/;
-function bundleDirs(root) {
-	const dir = macosDir(root);
-	if (process.platform !== "darwin" || !existsSync(dir)) return [];
-	return [.../* @__PURE__ */ new Set([dir, realpathSync(dir)])];
-}
-function isBundleExecutable(path, dirs) {
-	return dirs.some((dir) => path.startsWith(`${dir}/`) && BUNDLE_EXECUTABLE.test(path.slice(dir.length + 1)));
-}
-/** Pids from `ps -axww -o pid=,comm=` output whose command names a bundle executable inside `dirs`. */
-function bundleCandidates(psOutput, dirs) {
-	const pids = [];
-	for (const line of psOutput.split("\n")) {
-		const match = /^\s*(\d+)\s+(.+)$/.exec(line);
-		if (match && isBundleExecutable(match[2], dirs)) pids.push(Number(match[1]));
-	}
-	return pids;
-}
-/** Whether `lsof -Fn -d txt` output for one process names a bundle executable inside `dirs`. */
-function lsofNamesBundleExecutable(lsofOutput, dirs) {
-	return lsofOutput.split("\n").some((line) => line.startsWith("n") && isBundleExecutable(line.slice(1), dirs));
-}
-function candidatePids(dirs) {
-	if (!dirs.length) return [];
-	return bundleCandidates(getExecutor().runFile("ps", [
-		"-axww",
-		"-o",
-		"pid=,comm="
-	], { timeoutMs: 1e4 }), dirs).filter((pid) => pid !== process.pid);
-}
-/** Pids that claim to run an app bundle from the workspace's macOS directory. `ps` reports argv[0], so this is a lead. */
-function bundleInstancePids(root) {
-	return candidatePids(bundleDirs(root));
-}
-function unverified(pid, why) {
-	return Object.assign(/* @__PURE__ */ new Error(`Cannot verify macOS app pid ${pid}: ${why}; no signal was sent.`), { code: "STIM_MACOS_OWNER_UNVERIFIED" });
-}
-/**
-* Every running process whose executable is an app bundle Stim built in the workspace's macOS directory, however it
-* was launched. Each identity is captured before its executable is confirmed with lsof.
-*/
-function runningBundleInstances(root) {
-	const dirs = bundleDirs(root);
-	const instances = [];
-	for (const pid of candidatePids(dirs)) {
-		const processToken = (0, process_identity_exports.captureProcessToken)(pid);
-		const start = (0, process_identity_exports.processStartMicros)(pid);
-		if (!processToken || start.status !== "running") {
-			if (start.status === "gone") continue;
-			throw unverified(pid, "its identity cannot be captured");
-		}
-		const record = {
-			pid,
-			processToken,
-			startedAtMicros: start.startedAtMicros
-		};
-		let open;
-		try {
-			open = getExecutor().runFile("lsof", [
-				"-a",
-				"-p",
-				String(pid),
-				"-d",
-				"txt",
-				"-Fn"
-			], { timeoutMs: 1e4 });
-		} catch (error) {
-			if (["gone", "different"].includes((0, process_identity_exports.inspectProcessIdentity)(record))) continue;
-			open = String(error.stdout ?? "");
-			if (!open.trim()) throw unverified(pid, `lsof failed (${error.message.split("\n")[0]})`);
-		}
-		if (lsofNamesBundleExecutable(open, dirs)) instances.push(record);
-	}
-	return instances;
-}
-//#endregion
-//#region src/engine/public-http-probe.ts
-const DNS_TIMEOUT_MS = 5e3;
-async function resolveAddresses(hostname, signal) {
-	if (signal.aborted) throw signal.reason;
-	let timer;
-	let onAbort;
-	const unavailable = new Promise((_resolve, reject) => {
-		onAbort = () => reject(signal.reason);
-		signal.addEventListener("abort", onAbort, { once: true });
-		if (signal.aborted) onAbort();
-		else timer = setTimeout(() => reject(/* @__PURE__ */ new Error("DNS lookup timed out")), DNS_TIMEOUT_MS);
-	});
+function eraseParkedIosSim(udid, { label } = {}) {
 	try {
-		return await Promise.race([resolve4(hostname), unavailable]);
-	} finally {
-		clearTimeout(timer);
-		if (onAbort) signal.removeEventListener("abort", onAbort);
+		const erased = eraseParkedAfter("ios", udid, (_record, eraseStarted) => {
+			closeOwnedDeviceSessions({
+				platform: "ios",
+				id: udid
+			}, () => Boolean(resolveOwnedIosSim(udid).sim));
+			const resolved = resolveOwnedIosSim(udid);
+			if (resolved.missing) throw new Error(`simulator ${udid} is not on this machine`);
+			if (resolved.notOwned) throw new Error(`simulator ${udid} is now named ${JSON.stringify(resolved.notOwned)}`);
+			const state = resolved.sim.state;
+			if (state !== "Shutdown") throw new Error(`simulator ${udid} is ${state}, not Shutdown; it was kept`);
+			eraseStarted();
+			eraseIosSim(udid);
+		});
+		if (!erased) return {
+			status: "skipped",
+			kind: "not-parked",
+			reason: "simulator is no longer parked"
+		};
+		return {
+			status: "torn-down",
+			label: label ?? erased.name
+		};
+	} catch (error) {
+		return {
+			status: "failed",
+			reason: String(error?.message || error)
+		};
 	}
 }
-async function probePublicHttp(url, signal) {
+function eraseParkedAvd(avdName) {
 	try {
-		return (await fetch(url, {
-			signal,
-			redirect: "follow"
-		})).status;
+		return eraseParkedAfter("android", avdName, (_record, eraseStarted) => {
+			if (resolveOwnedAvdSerial(avdName, { timeoutMs: AVD_INVENTORY_TIMEOUT_MS }).serial) throw new Error(`AVD ${avdName} is running; it was kept`);
+			const result = teardownOwnedAvd(avdName, {
+				wipe: true,
+				owner: { pool: true },
+				onWipeStart: eraseStarted
+			});
+			if (result.status !== "torn-down") throw new Error(result.reason ?? `AVD ${avdName} is ${result.status}`);
+		}) ? {
+			status: "torn-down",
+			label: avdName
+		} : {
+			status: "skipped",
+			kind: "not-parked",
+			reason: "emulator is no longer parked"
+		};
 	} catch (error) {
-		const cause = error?.cause;
-		if (cause?.code !== "ENOTFOUND" && cause?.code !== "EAI_AGAIN") return null;
+		return {
+			status: "failed",
+			reason: String(error?.message || error)
+		};
 	}
-	const hostname = new URL(url).hostname;
-	if (!hostname.endsWith(".trycloudflare.com")) return null;
-	let addresses;
+}
+const IOS_SHUTDOWN_SETTLE_MS = 15e3;
+const ADB_RELEASE_WAIT_MS = 3e3;
+const AVD_INVENTORY_TIMEOUT_MS = 15e3;
+function repoRootAbove(workspace) {
+	if (workspace === void 0 || !getExecutor().findExecutable("agent-device")) return void 0;
+	const root = repoRoot(workspace);
 	try {
-		addresses = await resolveAddresses(hostname, signal);
+		return root && realpathSync(root) !== realpathSync(workspace) ? root : void 0;
 	} catch {
-		return null;
+		return;
 	}
-	const firstAddress = addresses[0];
-	if (!firstAddress) return null;
-	return new Promise((resolve) => {
-		const request$1 = request(url, {
-			signal,
-			lookup: (_hostname, options, callback) => {
-				if (options.all) callback(null, addresses.map((address) => ({
-					address,
-					family: 4
-				})));
-				else callback(null, firstAddress, 4);
-			}
-		}, (response) => {
-			response.resume();
-			resolve(response.statusCode ?? null);
-		});
-		request$1.on("error", () => resolve(null));
-		request$1.end();
-	});
 }
-//#endregion
-//#region src/engine/tunnel.ts
-function tunnelArgv(provider, port, ngrokUrl, logFile, tailscaleBinary = "tailscale") {
-	if (provider === "tailscale") return {
-		bin: tailscaleBinary,
-		args: [
-			"serve",
-			`--https=${port}`,
-			`http://127.0.0.1:${port}`
-		]
-	};
-	if (provider === "cloudflared") return {
-		bin: "cloudflared",
-		args: [
-			"tunnel",
-			"--url",
-			`http://127.0.0.1:${port}`,
-			...logFile ? ["--logfile", logFile] : []
-		]
+const IOS_SHUTDOWN_POLL_MS = 250;
+const IOS_SHUTDOWN_ATTEMPTS = 2;
+function settleIosSimShutdown(udid, { now = Date.now, sleep = sleepSync }) {
+	let resolved = resolveOwnedIosSim(udid);
+	for (let attempt = 1;; attempt++) {
+		const deadline = now() + IOS_SHUTDOWN_SETTLE_MS;
+		while (resolved.sim && resolved.sim.state !== "Shutdown" && now() < deadline) {
+			sleep(IOS_SHUTDOWN_POLL_MS);
+			resolved = resolveOwnedIosSim(udid);
+		}
+		if (!resolved.sim || resolved.sim.state === "Shutdown" || attempt === IOS_SHUTDOWN_ATTEMPTS) return resolved;
+		shutdownIosSim(udid);
+		resolved = resolveOwnedIosSim(udid);
+	}
+}
+function iosShutdownFailureReason(udid, state) {
+	return `simulator ${udid} is still ${state} after ${IOS_SHUTDOWN_ATTEMPTS} shutdown attempts and ${IOS_SHUTDOWN_ATTEMPTS * IOS_SHUTDOWN_SETTLE_MS / 1e3}s of waiting`;
+}
+function parkOwnedIosSim(settled, udid, park) {
+	if (settled.missing) throw new Error(`simulator ${udid} disappeared after shutdown`);
+	if (settled.notOwned) throw new Error(`simulator ${udid} is now named ${JSON.stringify(settled.notOwned)}`);
+	const sim = settled.sim;
+	if (sim.state !== "Shutdown") throw new Error(iosShutdownFailureReason(udid, sim.state));
+	const model = listIosDeviceTypes().find((d) => d.identifier === sim.deviceTypeIdentifier)?.name ?? null;
+	const runtime = parseRuntimeVersion(sim.runtime);
+	const name = parkedSimName(sim.udid, {
+		model,
+		runtime
+	});
+	renameIosSim(sim.udid, name);
+	const record = {
+		udid: sim.udid,
+		name,
+		deviceTypeIdentifier: sim.deviceTypeIdentifier,
+		runtimeIdentifier: sim.runtime,
+		parkedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		simslimManaged: Boolean(park.simslimManaged),
+		...park.appId ? { bundleId: park.appId } : {},
+		...park.cacheKey ? { cacheKey: park.cacheKey } : {}
 	};
 	return {
-		bin: "ngrok",
-		args: [
-			"http",
-			String(port),
-			`--log=${logFile || "stdout"}`,
-			"--log-format=json",
-			...ngrokUrl ? ["--url", ngrokUrl] : []
-		]
+		record,
+		evicted: parkSim({
+			platform: "ios",
+			projectPath: park.projectPath,
+			slot: park.slot,
+			record,
+			max: park.max
+		})
 	};
 }
-const CLOUDFLARED_URL_RE = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/i;
-function parseCloudflaredLine(line) {
-	const match = line.match(CLOUDFLARED_URL_RE);
-	return match ? match[0] : null;
-}
-function parseNgrokLine(line) {
-	let data;
+function teardownOwnedIosSim(udid, { del = false, label, park, workspace, shutdownClock = {} } = {}) {
+	let parkFallback;
 	try {
-		data = JSON.parse(line);
-	} catch {
-		return null;
+		const resolved = resolveOwnedIosSim(udid);
+		if (resolved.notOwned) return {
+			status: "skipped",
+			kind: "not-owned",
+			reason: `sim "${resolved.notOwned}" is not Stim-owned: Stim has no record of creating it`
+		};
+		if (resolved.missing) return { status: "missing" };
+		closeOwnedDeviceSessions({
+			platform: "ios",
+			id: udid
+		}, () => Boolean(resolveOwnedIosSim(udid).sim), workspace);
+		const current = resolveOwnedIosSim(udid);
+		if (current.missing) return { status: "missing" };
+		if (current.notOwned) return {
+			status: "skipped",
+			kind: "not-owned",
+			reason: "simulator ownership changed before shutdown"
+		};
+		shutdownIosSim(udid);
+		const sim = resolved.sim;
+		if (del && park && park.max > 0) try {
+			const { record, evicted } = parkOwnedIosSim(settleIosSimShutdown(udid, shutdownClock), udid, park);
+			const removed = [];
+			const failures = [];
+			for (const entry of evicted) {
+				const result = teardownParkedIosSim(entry.udid, { label: entry.name });
+				if (result.status === "torn-down") removed.push({
+					udid: entry.udid,
+					name: entry.name
+				});
+				else if (result.status === "failed") failures.push(`could not delete evicted ${entry.name} (${entry.udid}): ${result.reason}`);
+			}
+			return {
+				status: "torn-down",
+				label: label ?? sim.name ?? udid,
+				parked: {
+					udid: record.udid,
+					name: record.name
+				},
+				evicted: removed,
+				...failures.length ? { evictionFailures: failures } : {}
+			};
+		} catch (e) {
+			parkFallback = String(e?.message || e);
+		}
+		if (del) {
+			deleteIosSim(udid);
+			return {
+				status: "torn-down",
+				label: label ?? sim.name ?? udid,
+				...parkFallback ? { parkFallback } : {}
+			};
+		}
+		const settled = settleIosSimShutdown(udid, shutdownClock);
+		if (settled.sim && settled.sim.state !== "Shutdown") return {
+			status: "failed",
+			label: label ?? sim.name ?? udid,
+			reason: iosShutdownFailureReason(udid, settled.sim.state)
+		};
+		const root = sim.state === "Shutdown" ? void 0 : repoRootAbove(workspace);
+		if (root && settled.sim) closeOwnedDeviceSessions({
+			platform: "ios",
+			id: udid
+		}, () => resolveOwnedIosSim(udid).sim?.state === "Shutdown", workspace, root);
+		return {
+			status: "torn-down",
+			label: label ?? sim.name ?? udid
+		};
+	} catch (e) {
+		return {
+			status: "failed",
+			reason: String(e?.message || e),
+			...parkFallback ? { parkFallback } : {}
+		};
 	}
-	if (typeof data !== "object" || data === null) return null;
-	const url = data.url;
-	return typeof url === "string" && /^https?:\/\//i.test(url) ? url : null;
-}
-function parseTailscaleLine(line) {
-	return /^https:\/\/[^\s/]+\.ts\.net(:\d+)?\/?$/.test(line) ? line : null;
-}
-function parserFor(provider) {
-	if (provider === "tailscale") return parseTailscaleLine;
-	return provider === "cloudflared" ? parseCloudflaredLine : parseNgrokLine;
-}
-const URL_TIMEOUT_MS = 15e3;
-const REACHABLE_TIMEOUT_MS = 24e4;
-const REACHABLE_POLL_MS = 2e3;
-const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
-async function withManagedTunnelLock(root, fn, options = {}) {
-	return withWorkspaceProcessLock(managedTunnelLockRoot(root), "metro-tunnel", fn, {
-		...options,
-		rejectOwnerPurposes: ["workspace removal"]
-	});
-}
-async function withManagedTunnelRemovalLock(root, fn, options = {}) {
-	return withWorkspaceProcessLock(managedTunnelLockRoot(root), "metro-tunnel", fn, {
-		...options,
-		ownerPurpose: "workspace removal"
-	});
 }
-async function withManagedRemoteWorktreeLock(worktreeRoot, fn, options = {}) {
-	return withWorkspaceProcessLock(managedRemoteWorktreeLockRoot(worktreeRoot), "managed-remote", fn, {
-		...options,
-		external: true,
-		rejectOwnerPurposes: ["worktree removal"]
-	});
+function assertAvdReferences(avdName, owner) {
+	const config = loadConfig$1();
+	if (!config) throw new Error("Cannot verify AVD references without a Stim config; the data was kept.");
+	if (owner && "projectPath" in owner && owner.expectedRecord && !isDeepStrictEqual(deviceSlotPlatforms(config.projects[owner.projectPath], owner.slot)?.android, owner.expectedRecord)) throw new Error(`AVD ${avdName} has a changed workspace record; its data was kept.`);
+	for (const [projectPath, project] of Object.entries(config.projects)) for (const { slot, platforms } of projectDeviceSlots(project)) {
+		if (platforms.android?.avdName?.toLowerCase() !== avdName.toLowerCase()) continue;
+		if (!owner || !("projectPath" in owner) || owner.projectPath !== projectPath || (owner.slot ?? "default") !== slot || !platforms.android.owned) throw new Error(`AVD ${avdName} is referenced by ${projectPath} (${slot}); its data was kept.`);
+	}
+	if (readParked("android", { config }).some((entry) => entry.name.toLowerCase() === avdName.toLowerCase()) && !(owner && "pool" in owner)) throw new Error(`AVD ${avdName} is in the emulator pool; its data was kept.`);
 }
-async function withManagedRemoteWorktreeRemovalLock(worktreeRoot, fn, options = {}) {
-	return withWorkspaceProcessLock(managedRemoteWorktreeLockRoot(worktreeRoot), "managed-remote", fn, {
-		...options,
-		external: true,
-		ownerPurpose: "worktree removal"
+function removeOrphanedAvdDirectory(candidate, owner) {
+	const surveyed = listOrphanedAvdDirectories(candidate.name).find((entry) => entry.directory === candidate.directory);
+	if (!surveyed || surveyed.name !== candidate.name || surveyed.dev !== candidate.dev || surveyed.ino !== candidate.ino) throw new Error(`AVD data at ${candidate.directory} changed or is registered; it was kept.`);
+	assertOwnedAvdStopped(candidate.name, { resolveDirectory: () => candidate.directory });
+	const detached = withConfigLock$1(() => {
+		const current = lstatSync(candidate.directory);
+		if (!current.isDirectory() || current.dev !== candidate.dev || current.ino !== candidate.ino) throw new Error(`AVD data at ${candidate.directory} changed or is registered; it was kept.`);
+		assertAvdReferences(candidate.name, owner);
+		const name = `stim-gc-${randomUUID()}`;
+		recordCreatedDevice("android", name);
+		const destination = join(dirname(candidate.directory), `${name}.avd`);
+		try {
+			renameSync(candidate.directory, destination);
+		} catch (error) {
+			forgetCreatedDevice("android", name);
+			throw error;
+		}
+		forgetCreatedDevice("android", candidate.name);
+		return destination;
 	});
-}
-function managedLockHolders(root) {
-	const locks = [{
-		label: "managed tunnel",
-		path: workspaceProcessLockPath(managedTunnelLockRoot(root), "metro-tunnel", false)
-	}, {
-		label: "managed remote",
-		path: workspaceProcessLockPath(managedRemoteWorktreeLockRoot(root), "managed-remote", true)
-	}];
-	const reasons = [];
-	for (const { label, path } of locks) {
-		const claims = (0, ownership_claim_exports.readClaimSet)(path);
-		const holder = claims.live[0];
-		if (holder) {
-			const purpose = typeof holder.details.purpose === "string" ? ` for ${holder.details.purpose}` : "";
-			reasons.push(`the ${label} lock is held${purpose}`);
-		} else if (claims.unresolved[0]) reasons.push(`the ${label} lock cannot be resolved: ${claims.unresolved[0].reason}`);
+	const current = lstatSync(detached);
+	if (!current.isDirectory() || current.dev !== candidate.dev || current.ino !== candidate.ino) throw new Error(`Detached AVD data changed at ${detached}; it was kept.`);
+	try {
+		rmSync(detached, { recursive: true });
+	} catch (error) {
+		throw new Error(`Could not remove AVD data at ${detached}; retry gc --delete: ${error.message}`, { cause: error });
 	}
-	return reasons;
+	forgetCreatedDevice("android", basename(detached, ".avd"));
 }
-function managedTunnelLockRoot(root) {
-	const key = createHash("sha256").update(resolve(root)).digest("hex");
-	return join(getConfigDir(), "process-locks", key);
+function teardownUnregisteredAvd(avdName, del, owner, surveyed) {
+	const candidates = surveyed ? [surveyed] : listOrphanedAvdDirectories(avdName);
+	if (candidates.length === 0) {
+		if (avdStorageRoots().some((root) => avdPathExists(join(root, `${avdName}.ini`)) || avdPathExists(join(root, `${avdName}.avd`)))) throw new Error(`AVD ${avdName} is not listed but its storage remains; it was kept.`);
+		return { status: "missing" };
+	}
+	if (!del) return {
+		status: "skipped",
+		reason: "AVD registration is missing; its data was kept."
+	};
+	for (const candidate of candidates) {
+		if (candidate.name !== avdName) throw new Error(`AVD data does not match ${avdName}; it was kept.`);
+		removeOrphanedAvdDirectory(candidate, owner);
+	}
+	return {
+		status: "torn-down",
+		label: avdName
+	};
 }
-function managedRemoteWorktreeLockRoot(worktreeRoot) {
-	const key = createHash("sha256").update(resolve(worktreeRoot)).digest("hex");
-	return join(getConfigDir(), "process-locks", "worktrees", key);
+function teardownOwnedAvd(avdName, options = {}) {
+	let claim;
+	try {
+		if (!isStimOwnedAvd(avdName)) return {
+			status: "skipped",
+			kind: "not-owned",
+			reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
+		};
+		claim = acquireAvdClaim(avdName);
+		const result = teardownClaimedAvd(avdName, claim, options);
+		if (result.status === "torn-down" || result.status === "missing") options.onRemoved?.();
+		return result;
+	} catch (error) {
+		return {
+			status: "failed",
+			reason: String(error?.message || error)
+		};
+	} finally {
+		(0, ownership_claim_exports.releaseClaim)(claim);
+	}
 }
-async function defaultProbeReachable(url, signal) {
-	const status = await probePublicHttp(url, signal);
-	return status !== null && status > 0;
+function serialFree(serial, timeoutMs = AVD_INVENTORY_TIMEOUT_MS) {
+	const adb = listAdbDevices({ timeoutMs });
+	return ![
+		...adb.emulators,
+		...adb.physical,
+		...adb.unhealthy
+	].some((entry) => entry.serial === serial);
 }
-function waitForUrl(child, parseLine, timeoutMs) {
-	return new Promise((resolve) => {
-		let settled = false;
-		let lastLine = null;
-		let timer;
-		let onOut;
-		let onErr;
-		let onError;
-		let onExit;
-		const finish = (url, exited = false) => {
-			if (settled) return;
-			settled = true;
-			clearTimeout(timer);
-			child.stdout?.removeListener("data", onOut);
-			child.stderr?.removeListener("data", onErr);
-			child.removeListener("error", onError);
-			child.removeListener("exit", onExit);
-			resolve({
-				url,
-				exited,
-				lastLine
-			});
+function teardownClaimedAvd(avdName, claim, { del = false, wipe = false, park, owner, workspace, orphanedDirectory, onlyIfMissing = false, onWipeStart, waitForShutdown = waitForAndroidEmulatorShutdown, assertStopped = assertOwnedAvdStopped, resolveAvd = (name) => resolveOwnedAvdSerial(name, { timeoutMs: AVD_INVENTORY_TIMEOUT_MS }) }) {
+	let parkFallback;
+	try {
+		if (del || wipe) withConfigLock$1(() => assertAvdReferences(avdName, owner));
+		const resolved = resolveAvd(avdName);
+		if (resolved.notOwned) return {
+			status: "skipped",
+			kind: "not-owned",
+			reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
 		};
-		const onLine = (line) => {
-			if (settled) return;
-			if (line.trim()) lastLine = line.trim();
-			const url = parseLine(line);
-			if (url) finish(url);
+		if (resolved.missing) {
+			if (wipe) throw new Error(`AVD ${avdName} is not registered; its data was kept.`);
+			return teardownUnregisteredAvd(avdName, del, owner, orphanedDirectory);
+		}
+		if (onlyIfMissing) return {
+			status: "skipped",
+			reason: "AVD registration appeared; its record was kept."
 		};
-		const outReader = createLineReader(onLine);
-		const errReader = createLineReader(onLine);
-		onOut = (chunk) => outReader.push(chunk);
-		onErr = (chunk) => errReader.push(chunk);
-		onError = () => finish(null);
-		onExit = () => {
-			outReader.flush();
-			errReader.flush();
-			finish(null, true);
+		if (orphanedDirectory) return {
+			status: "skipped",
+			reason: "AVD registration appeared; its data was kept."
 		};
-		child.stdout?.setEncoding?.("utf-8");
-		child.stderr?.setEncoding?.("utf-8");
-		child.stdout?.on("data", onOut);
-		child.stderr?.on("data", onErr);
-		child.on("error", onError);
-		child.on("exit", onExit);
-		timer = setTimeout(() => finish(null), timeoutMs);
-	});
-}
-function waitForFileUrl(child, logFile, parseLine, timeoutMs) {
-	return new Promise((resolve) => {
-		let settled = false;
-		const finish = (url, exited = false) => {
-			if (settled) return;
-			settled = true;
-			clearInterval(interval);
-			clearTimeout(timer);
-			child.removeListener("error", onError);
-			child.removeListener("exit", onExit);
-			resolve({
-				url,
-				exited
-			});
+		const serial = resolved.serial;
+		const stillStopped = (sessionSerial) => {
+			const current = resolveAvd(avdName);
+			return !current.notOwned && !current.missing && !current.serial && serialFree(sessionSerial);
 		};
-		const probe = () => {
-			try {
-				for (const line of readFileSync(logFile, "utf-8").split(/\r?\n/)) {
-					const url = parseLine(line);
-					if (url) return finish(url);
+		if (serial) {
+			const stillOwned = () => {
+				const current = resolveAvd(avdName);
+				return !current.notOwned && !current.missing && current.serial === serial;
+			};
+			closeOwnedDeviceSessions({
+				platform: "android",
+				id: serial,
+				avdName
+			}, stillOwned, workspace);
+			if (!stillOwned()) throw new Error(`Owned AVD ${avdName} changed before shutdown; it was kept.`);
+			waitForShutdown(avdName, (timeoutMs) => {
+				(0, ownership_claim_exports.markClaimChildPending)(claim);
+				try {
+					shutdownAndroidEmulator(serial, timeoutMs);
+				} finally {
+					(0, ownership_claim_exports.clearClaimChild)(claim);
+				}
+			});
+			const root = repoRootAbove(workspace);
+			if (root) {
+				const deadline = Date.now() + ADB_RELEASE_WAIT_MS;
+				while (!serialFree(serial, Math.max(1, deadline - Date.now())) && Date.now() < deadline) sleepSync(250);
+				closeOwnedDeviceSessions({
+					platform: "android",
+					id: serial,
+					avdName
+				}, stillStopped, workspace, root);
+			}
+		} else {
+			closeOwnedDeviceSessions({
+				platform: "android",
+				id: null,
+				avdName
+			}, stillStopped, workspace);
+			waitForShutdown(avdName, null);
+		}
+		if (wipe && !del) {
+			const current = resolveAvd(avdName);
+			if (current.notOwned || current.missing) throw new Error(`AVD ${avdName} changed before its data was wiped.`);
+			if (current.serial) throw new Error(`Owned AVD ${avdName} started again before its data was wiped.`);
+			assertStopped(avdName);
+			withConfigLock$1(() => assertAvdReferences(avdName, owner));
+			const directory = ownedAvdDirectory(avdName);
+			if (!directory) throw new Error(`The data directory of AVD ${avdName} could not be resolved.`);
+			onWipeStart?.();
+			wipeAvdUserData(directory);
+		}
+		if (del) {
+			const current = resolveAvd(avdName);
+			if (current.notOwned) return {
+				status: "skipped",
+				kind: "not-owned",
+				reason: `AVD ${avdName} is not Stim-owned: Stim has no record of creating it`
+			};
+			if (current.missing) return teardownUnregisteredAvd(avdName, del, owner);
+			if (current.serial) throw new Error(`Owned AVD ${avdName} started again before deletion.`);
+			assertStopped(avdName);
+			withConfigLock$1(() => assertAvdReferences(avdName, owner));
+			if (park && park.max > 0) try {
+				const systemImage = ownedAvdSystemImage(avdName);
+				if (!systemImage || !park.configuration || !ownedAvdMatchesConfiguration(avdName, park.configuration)) throw new Error("the AVD has no verified creation configuration");
+				const evicted = parkSim({
+					platform: "android",
+					projectPath: park.projectPath,
+					slot: park.slot,
+					max: park.max,
+					record: {
+						udid: avdName,
+						name: avdName,
+						systemImage,
+						configuration: park.configuration,
+						parkedAt: (/* @__PURE__ */ new Date()).toISOString(),
+						...park.appId ? { packageName: park.appId } : {},
+						...park.cacheKey ? { cacheKey: park.cacheKey } : {}
+					}
+				});
+				const removed = [];
+				const failures = [];
+				for (const entry of evicted) {
+					const result = teardownParkedAvd(entry.name);
+					if (result.status === "torn-down") removed.push({
+						udid: entry.name,
+						name: entry.name,
+						platform: "android"
+					});
+					else if (result.status === "failed") failures.push(`could not delete evicted ${entry.name}: ${result.reason}`);
 				}
-			} catch {}
+				return {
+					status: "torn-down",
+					label: avdName,
+					parked: {
+						udid: avdName,
+						name: avdName,
+						platform: "android"
+					},
+					evicted: removed,
+					...failures.length ? { evictionFailures: failures } : {}
+				};
+			} catch (error) {
+				parkFallback = String(error?.message || error);
+			}
+			const directory = ownedAvdDirectory(avdName);
+			const paths = avdStorageRoots().map((root) => join(root, `${avdName}.ini`));
+			if (directory) paths.push(directory);
+			(0, ownership_claim_exports.markClaimChildPending)(claim);
+			try {
+				deleteAvd(avdName);
+			} finally {
+				(0, ownership_claim_exports.clearClaimChild)(claim);
+			}
+			const remaining = paths.filter(avdPathExists);
+			if (remaining.length) throw new Error(`AVD ${avdName} was only partially deleted; data remains at ${remaining.join(", ")}.`);
+		}
+		return {
+			status: "torn-down",
+			label: avdName,
+			serial: resolved.serial ?? null,
+			...parkFallback ? { parkFallback } : {}
 		};
-		const onError = () => finish(null);
-		const onExit = () => finish(null, true);
-		child.on("error", onError);
-		child.on("exit", onExit);
-		const interval = setInterval(probe, 25);
-		const timer = setTimeout(() => finish(null), timeoutMs);
-		probe();
-	});
-}
-function createTunnelLogFile(provider) {
-	const dir = join(getConfigDir(), "tunnel-logs");
-	mkdirSync(dir, { recursive: true });
-	const path = join(dir, `${provider}-${randomUUID()}.log`);
-	closeSync(openSync(path, "wx", 384));
-	return path;
-}
-function removeTunnelLogFile(path) {
-	if (!path) return;
-	try {
-		unlinkSync(path);
-	} catch {}
-}
-function removeRecordedTunnelLogFile(path) {
-	if (!path) return;
-	const dir = resolve(join(getConfigDir(), "tunnel-logs"));
-	const resolved = resolve(path);
-	if (!resolved.startsWith(`${dir}${sep}`) || resolve(join(dir, basename(resolved))) !== resolved) return;
-	removeTunnelLogFile(resolved);
+	} catch (e) {
+		return {
+			status: "failed",
+			reason: String(e?.message || e)
+		};
+	}
 }
-async function waitUntilReachable({ url, now, sleep, probe, timeoutMs }) {
-	const deadline = now() + timeoutMs;
-	for (;;) {
-		if (await probe(url, new AbortController().signal).catch(() => false)) return true;
-		if (now() >= deadline) return false;
-		await sleep(REACHABLE_POLL_MS);
+const BROWSER_EXIT_WAIT_MS = 15e3;
+const CHROME_KILL_WAIT_MS = 5e3;
+async function stopOwnedChrome(record, profile) {
+	for (const signal of ["SIGTERM", "SIGKILL"]) {
+		const state = chromeProcessState(record, profile);
+		if (state === "gone") return true;
+		if (state === "unknown") return false;
+		try {
+			signalProcessTree(record.pid, signal, { group: true });
+		} catch {}
+		const deadline = Date.now() + CHROME_KILL_WAIT_MS;
+		while (chromeProcessState(record, profile) !== "gone" && Date.now() < deadline) await sleepAsync(50);
 	}
+	return chromeProcessState(record, profile) === "gone";
 }
-const CLEANUP_TIMEOUT_MS = 1e3;
-const CLEANUP_POLL_MS = 25;
-async function startTunnel({ provider, port, spawnFn = null, urlTimeoutMs = URL_TIMEOUT_MS, reachableTimeoutMs = REACHABLE_TIMEOUT_MS, probeReachable = defaultProbeReachable, now = Date.now, sleep = defaultSleep, ngrokUrl = null, requireReachable = true, cleanupTimeoutMs = CLEANUP_TIMEOUT_MS, isChildAlive = pidExists, readProcessToken = process_identity_exports.captureProcessToken, logFile = null }) {
-	const spawn = spawnFn || ((cmd, args, opts) => getExecutor().spawn(cmd, args, opts));
-	const outputFile = provider === "tailscale" ? null : logFile || (spawnFn ? null : createTunnelLogFile(provider));
-	let child;
+const sleepAsync = (ms) => new Promise((done) => setTimeout(done, ms));
+/**
+* Closes the workspace's Stim-owned Chrome and its supervisor, after verifying both process identities. With
+* `deleteProfile`, it also deletes the profile directory, only when the created-devices ledger lists it.
+*/
+async function teardownOwnedBrowser(root, options = {}) {
 	try {
-		const binary = provider === "tailscale" ? resolveTailscaleBinary((bin) => getExecutor().findExecutable(bin)) : provider;
-		if (!binary) throw new Error("Install Tailscale and sign in to your tailnet.");
-		const { bin, args } = tunnelArgv(provider, port, ngrokUrl, outputFile, binary);
-		child = spawn(bin, args, {
-			stdio: outputFile ? [
-				"ignore",
-				"ignore",
-				"ignore"
-			] : [
-				"ignore",
-				"pipe",
-				"pipe"
-			],
-			detached: true
+		return await withWorkspaceProcessLock(workspaceDir(root), "web", () => teardownBrowserHeld(root, options), {
+			external: true,
+			ownerPurpose: "browser teardown"
 		});
-	} catch (err) {
-		removeTunnelLogFile(outputFile);
+	} catch (error) {
 		return {
-			failed: true,
-			reason: `Could not start ${provider}: ${describe(err)}`
-		};
-	}
-	let childExited = false;
-	child.once("exit", () => {
-		childExited = true;
-	});
-	const cleanup = async (alreadyExited = childExited) => {
-		const stopped = await terminateChild(child, {
-			alreadyExited,
-			timeoutMs: cleanupTimeoutMs,
-			now,
-			sleep,
-			isAlive: isChildAlive
-		});
-		if (stopped) removeTunnelLogFile(outputFile);
-		return stopped ? { status: "stopped" } : {
 			status: "failed",
-			reason: `Sent SIGKILL but could not confirm that pid ${child.pid ?? "unknown"} exited.`
-		};
-	};
-	const failAfterCleanup = async (reason, alreadyExited = childExited) => {
-		const stopped = await cleanup(alreadyExited);
-		return stopped.status === "stopped" ? {
-			failed: true,
-			reason
-		} : {
-			failed: true,
-			reason: `${reason} ${stopped.reason}`,
-			cleanupFailed: true
+			reason: String(error?.message || error)
 		};
-	};
-	const pid = child.pid;
-	if (!pid) return failAfterCleanup(`${provider} started but reported no pid.`);
-	const captureChildIdentity = () => {
-		try {
-			return readProcessToken(pid);
-		} catch {
-			return null;
-		}
-	};
-	const initialProcessToken = captureChildIdentity();
-	if (!initialProcessToken) return failAfterCleanup(`${provider} started but its process identity token could not be read.`);
-	const { url, exited, lastLine } = outputFile ? await waitForFileUrl(child, outputFile, parserFor(provider), urlTimeoutMs) : await waitForUrl(child, parserFor(provider), urlTimeoutMs);
-	if (!url) return failAfterCleanup(exited ? provider === "tailscale" && lastLine ? `${provider} exited before printing a tunnel URL: ${lastLine}` : `${provider} exited before printing a tunnel URL.` : `${provider} did not print a tunnel URL within ${urlTimeoutMs}ms.`, exited || childExited);
-	if (!outputFile) resumeChildPipes(child);
-	if (requireReachable) {
-		if (!await waitUntilReachable({
-			url,
-			now,
-			sleep,
-			probe: probeReachable,
-			timeoutMs: reachableTimeoutMs
-		})) return failAfterCleanup(`${url} did not become reachable within ${reachableTimeoutMs}ms; ${provider} may still be registering, or the network path is blocked.`);
 	}
-	const finalProcessToken = captureChildIdentity();
-	if (!finalProcessToken || finalProcessToken !== initialProcessToken) return failAfterCleanup(`${provider} process identity changed before its tunnel could be recorded.`);
-	if (!outputFile) unrefChildPipes(child);
-	child.unref?.();
-	if (childExited) return failAfterCleanup(`${provider} exited before its tunnel could be recorded.`, true);
-	return {
-		url,
-		pid,
-		processToken: initialProcessToken,
-		logFile: outputFile,
-		cleanup: () => cleanup()
-	};
 }
-async function startTunnelSequence({ providers, port, ngrokUrl = null, requireReachable = true, start = startTunnel }) {
-	const failures = [];
-	for (const provider of providers) {
-		const result = await start({
-			provider,
-			port,
-			ngrokUrl: provider === "ngrok" ? ngrokUrl : null,
-			requireReachable
-		});
-		if (!("failed" in result)) return {
-			provider,
-			...result
-		};
-		failures.push(`${provider}: ${result.reason}`);
-		if (result.cleanupFailed) return {
-			failed: true,
-			reason: failures.join(" ")
+/** {@link teardownOwnedBrowser} for a caller that already holds the {@link BROWSER_LOCK} lock. */
+async function teardownBrowserHeld(root, { deleteProfile = false } = {}) {
+	try {
+		const record = readWebRecord(root);
+		const profile = record?.profile ?? webProfileDir(root);
+		if (record) {
+			const supervisor = (0, process_identity_exports.inspectProcessIdentity)(record);
+			const chrome = record.chromeProcess ? (0, process_identity_exports.inspectProcessIdentity)(record.chromeProcess) : "gone";
+			if (supervisor === "unknown" || chrome === "unknown") return {
+				status: "skipped",
+				kind: "not-verified",
+				reason: `the browser supervisor (pid ${record.pid}) or its Chrome could not be verified; its record was kept`
+			};
+			if (supervisor === "same") {
+				try {
+					process.kill(record.pid, "SIGTERM");
+				} catch {}
+				if (!await (0, process_identity_exports.waitForProcessExit)(record, BROWSER_EXIT_WAIT_MS)) return {
+					status: "failed",
+					reason: `browser supervisor pid ${record.pid} did not exit`
+				};
+			}
+			if (record.chromeProcess && !await stopOwnedChrome(record.chromeProcess, profile)) return {
+				status: "failed",
+				reason: `Chrome pid ${record.chromeProcess.pid} did not exit`
+			};
+			const exited = record.chromeProcess;
+			const holder = liveProfileHolder(profile, { alive: (pid) => pidExists(pid) && !(pid === exited?.pid && (0, process_identity_exports.inspectProcessIdentity)(exited) === "gone") });
+			if (holder !== null) return {
+				status: "skipped",
+				kind: "not-verified",
+				reason: `pid ${holder} still holds ${profile}, and the browser record does not name it; it was left running`
+			};
+			const claims = (0, ownership_claim_exports.clearFreeClaimSet)({
+				root: webClaimRoot(root),
+				label: "browser supervisor"
+			});
+			if (claims.status !== "cleared") return {
+				status: "skipped",
+				kind: "not-verified",
+				reason: claims.status === "held" ? `the browser supervisor claim is still held${claims.holder ? ` by pid ${claims.holder.owner.pid}` : ""}` : `the browser supervisor claim could not be cleared (${claims.reason}); remove it with ${(0, ownership_claim_exports.claimRemoveCommand)(webClaimRoot(root))}`
+			};
+			clearWebRecord(root, record);
+			await releaseBrowserPort(root, record.cdpPort);
+		} else {
+			const holder = liveProfileHolder(profile);
+			if (holder !== null) return {
+				status: "skipped",
+				kind: "not-verified",
+				reason: `pid ${holder} holds ${profile} but no browser supervisor is recorded; it was left running`
+			};
+			const port = getProject(root)?.ports?.[CDP_PORT_LABEL];
+			if (typeof port === "number") await releaseBrowserPort(root, port);
+		}
+		if (existsSync(profile)) removeSingletonFiles(profile);
+		if (deleteProfile && existsSync(profile)) {
+			if (!readCreatedDevices$1().web.has(profile)) return {
+				status: "skipped",
+				kind: "not-owned",
+				reason: `${profile} is not in Stim's ledger; it was kept`
+			};
+			rmSync(profile, {
+				recursive: true,
+				force: true
+			});
+			forgetCreatedDevice("web", profile);
+		}
+		return record ? {
+			status: "torn-down",
+			label: `Chrome (${profile})`
+		} : { status: "missing" };
+	} catch (error) {
+		return {
+			status: "failed",
+			reason: String(error?.message || error)
 		};
 	}
-	return {
-		failed: true,
-		reason: failures.join(" ") || "No managed tunnel provider was selected."
-	};
 }
-function closeChildPipes(child) {
-	child.stdout?.destroy?.();
-	child.stderr?.destroy?.();
-}
-function unrefChildPipes(child) {
-	resumeChildPipes(child);
-	for (const stream of [child.stdout, child.stderr]) stream?.unref?.();
+//#endregion
+//#region src/macos/instances.ts
+const BUNDLE_EXECUTABLE = /^[^/]+\.app\/Contents\/MacOS\/[^/]+$/;
+function bundleDirs(root) {
+	const dir = macosDir(root);
+	if (process.platform !== "darwin" || !existsSync(dir)) return [];
+	return [.../* @__PURE__ */ new Set([dir, realpathSync(dir)])];
 }
-function resumeChildPipes(child) {
-	child.stdout?.resume?.();
-	child.stderr?.resume?.();
+function isBundleExecutable(path, dirs) {
+	return dirs.some((dir) => path.startsWith(`${dir}/`) && BUNDLE_EXECUTABLE.test(path.slice(dir.length + 1)));
 }
-async function signalAndWaitForExit(child, signal, { timeoutMs, now, sleep, isAlive, platform }) {
-	let exited = false;
-	const onExit = () => {
-		exited = true;
-	};
-	child.once("exit", onExit);
-	try {
-		if (platform === "win32" && child.pid) signalProcessTree(child.pid, signal, { platform });
-		child.kill(signal);
-	} catch (err) {
-		child.removeListener("exit", onExit);
-		return isEsrch(err);
+/** Pids from `ps -axww -o pid=,comm=` output whose command names a bundle executable inside `dirs`. */
+function bundleCandidates(psOutput, dirs) {
+	const pids = [];
+	for (const line of psOutput.split("\n")) {
+		const match = /^\s*(\d+)\s+(.+)$/.exec(line);
+		if (match && isBundleExecutable(match[2], dirs)) pids.push(Number(match[1]));
 	}
-	const hasExited = () => exited;
-	const deadline = now() + timeoutMs;
-	while (!hasExited() && now() < deadline) await sleep(CLEANUP_POLL_MS);
-	if (!hasExited() && child.pid && !isAlive(child.pid)) exited = true;
-	child.removeListener("exit", onExit);
-	return hasExited();
+	return pids;
 }
-async function terminateChild(child, { alreadyExited, timeoutMs, now, sleep, isAlive, platform = process.platform }) {
-	if (alreadyExited) {
-		closeChildPipes(child);
-		return true;
-	}
-	if (await signalAndWaitForExit(child, "SIGTERM", {
-		timeoutMs,
-		now,
-		sleep,
-		isAlive,
-		platform
-	})) {
-		closeChildPipes(child);
-		return true;
-	}
-	const killed = await signalAndWaitForExit(child, "SIGKILL", {
-		timeoutMs,
-		now,
-		sleep,
-		isAlive,
-		platform
-	});
-	closeChildPipes(child);
-	return killed;
+/** Whether `lsof -Fn -d txt` output for one process names a bundle executable inside `dirs`. */
+function lsofNamesBundleExecutable(lsofOutput, dirs) {
+	return lsofOutput.split("\n").some((line) => line.startsWith("n") && isBundleExecutable(line.slice(1), dirs));
 }
-function describe(err) {
-	return err?.message || String(err);
+function candidatePids(dirs) {
+	if (!dirs.length) return [];
+	return bundleCandidates(getExecutor().runFile("ps", [
+		"-axww",
+		"-o",
+		"pid=,comm="
+	], { timeoutMs: 1e4 }), dirs).filter((pid) => pid !== process.pid);
 }
-const STOP_TIMEOUT_MS = 5e3;
-const STOP_POLL_MS = 100;
-function isEsrch(err) {
-	return err?.code === "ESRCH";
+/** Pids that claim to run an app bundle from the workspace's macOS directory. `ps` reports argv[0], so this is a lead. */
+function bundleInstancePids(root) {
+	return candidatePids(bundleDirs(root));
 }
-async function stopTunnel(record, { isAlive = pidExists, inspectIdentity = process_identity_exports.inspectProcessIdentity, platform = process.platform, kill = (pid) => signalProcessTree(pid, "SIGTERM", { platform }), now = Date.now, sleep = defaultSleep, timeoutMs = STOP_TIMEOUT_MS } = {}) {
-	const missing = () => {
-		removeRecordedTunnelLogFile(record?.logFile);
-		return { status: "missing" };
-	};
-	const pid = record?.pid;
-	if (!pid || !isAlive(pid)) return missing();
-	if (!record.processToken) return {
-		status: "failed",
-		reason: `tunnel pid ${pid} has no process identity token, so Stim cannot verify ownership. Keep the record. Inspect the process, stop it with the provider tooling, remove the stale metroTunnel state, and retry.`
-	};
-	const identity = inspectIdentity(record);
-	if (identity === "gone" || identity === "different") return missing();
-	if (identity !== "same") return {
-		status: "failed",
-		reason: `could not verify the process identity for tunnel pid ${pid}; refusing to signal it.`
-	};
-	try {
-		kill(pid);
-	} catch (err) {
-		return isEsrch(err) ? missing() : {
-			status: "failed",
-			reason: describe(err)
+function unverified(pid, why) {
+	return Object.assign(/* @__PURE__ */ new Error(`Cannot verify macOS app pid ${pid}: ${why}; no signal was sent.`), { code: "STIM_MACOS_OWNER_UNVERIFIED" });
+}
+/**
+* Every running process whose executable is an app bundle Stim built in the workspace's macOS directory, however it
+* was launched. Each identity is captured before its executable is confirmed with lsof.
+*/
+function runningBundleInstances(root) {
+	const dirs = bundleDirs(root);
+	const instances = [];
+	for (const pid of candidatePids(dirs)) {
+		const processToken = (0, process_identity_exports.captureProcessToken)(pid);
+		const start = (0, process_identity_exports.processStartMicros)(pid);
+		if (!processToken || start.status !== "running") {
+			if (start.status === "gone") continue;
+			throw unverified(pid, "its identity cannot be captured");
+		}
+		const record = {
+			pid,
+			processToken,
+			startedAtMicros: start.startedAtMicros
 		};
+		let open;
+		try {
+			open = getExecutor().runFile("lsof", [
+				"-a",
+				"-p",
+				String(pid),
+				"-d",
+				"txt",
+				"-Fn"
+			], { timeoutMs: 1e4 });
+		} catch (error) {
+			if (["gone", "different"].includes((0, process_identity_exports.inspectProcessIdentity)(record))) continue;
+			open = String(error.stdout ?? "");
+			if (!open.trim()) throw unverified(pid, `lsof failed (${error.message.split("\n")[0]})`);
+		}
+		if (lsofNamesBundleExecutable(open, dirs)) instances.push(record);
 	}
-	const deadline = now() + timeoutMs;
-	const exited = () => {
-		if (!isAlive(pid)) return true;
-		const current = inspectIdentity(record);
-		return current === "gone" || current === "different";
-	};
-	while (now() < deadline && !exited()) await sleep(STOP_POLL_MS);
-	if (!exited()) return {
-		status: "failed",
-		reason: `pid ${pid} did not exit within ${timeoutMs}ms.`
-	};
-	removeRecordedTunnelLogFile(record.logFile);
-	return { status: "stopped" };
-}
-//#endregion
-//#region src/supervisor/ownership.ts
-function resolveSupervisorTarget({ state, record, reservedPort, isAlive = pidExists, inspectIdentity = process_identity_exports.inspectProcessIdentity } = {}) {
-	const statePid = numberOrNull(state?.pid);
-	const recordPid = numberOrNull(record?.pid);
-	const pid = statePid ?? recordPid;
-	if (!pid) return { status: "none" };
-	if (statePid && recordPid && statePid !== recordPid) return {
-		status: "unverified",
-		pid,
-		reason: `workspace state.json records supervisor pid ${statePid} but the registry records pid ${recordPid}`
-	};
-	if (!isAlive(pid)) return {
-		status: "stale",
-		pid
-	};
-	const port = numberOrNull(state?.port) ?? numberOrNull(record?.port);
-	if (reservedPort !== null && reservedPort !== void 0 && port !== null && port !== reservedPort) return {
-		status: "unverified",
-		pid,
-		reason: `supervisor pid ${pid} records port ${port}, but this project reserved port ${reservedPort}`
-	};
-	if (reservedPort !== null && reservedPort !== void 0 && port === null) return {
-		status: "unverified",
-		pid,
-		reason: `supervisor pid ${pid} has no recorded port, so it cannot be matched against reserved port ${reservedPort}`
-	};
-	const identityRecord = statePid ? state : record;
-	if (statePid && recordPid && state?.processToken !== record?.processToken) return {
-		status: "unverified",
-		pid,
-		reason: "workspace state and registry process identities disagree"
-	};
-	const identity = inspectIdentity(identityRecord);
-	if (identity === "gone" || identity === "different") return {
-		status: "stale",
-		pid
-	};
-	if (identity !== "same") return {
-		status: "unverified",
-		pid,
-		reason: "the recorded process identity could not be verified"
-	};
-	return {
-		status: "ours",
-		processToken: identityRecord.processToken,
-		pid,
-		port,
-		mode: state?.mode ?? record?.mode ?? null,
-		startedAt: state?.startedAt ?? record?.startedAt ?? null
-	};
-}
-function numberOrNull(v) {
-	return typeof v === "number" && Number.isSafeInteger(v) && v > 0 ? v : null;
+	return instances;
 }
 //#endregion
 //#region src/workspace/in-use.ts
@@ -1939,4 +1941,4 @@ function sizeText(bytes) {
 	return bytes === null ? "size unknown" : formatBytes(bytes);
 }
 //#endregion
-export { teardownParkedAvd as A, runningBundleInstances as C, teardownOwnedAvd as D, teardownBrowserHeld as E, recordGcResult as F, takeGcResults as I, canonicalPath as L, acquireBuildSlot as M, listBuildSlots as N, teardownOwnedBrowser as O, releaseBuildSlot as P, probePublicHttp as S, eraseParkedIosSim as T, terminateChild as _, collectWorkspaceOutputs as a, withManagedTunnelLock as b, listWorkspaceDirs as c, emptyWorkspaceDir as d, withIdleWorkspace as f, stopTunnel as g, startTunnelSequence as h, collectOrphanedWorkspaces as i, teardownParkedIosSim as j, teardownOwnedIosSim as k, rootPresence as l, resolveSupervisorTarget as m, WORKSPACE_OUTPUT_DIRS as n, deleteOrphanedWorkspaces as o, workspaceInUse as p, clearWorkspaceOutputs as r, isInsideWorkspaces as s, REBUILD_COST as t, sizeText as u, withManagedRemoteWorktreeLock as v, eraseParkedAvd as w, withManagedTunnelRemovalLock as x, withManagedRemoteWorktreeRemovalLock as y };
+export { withManagedRemoteWorktreeRemovalLock as A, recordGcResult as C, stopTunnel as D, startTunnelSequence as E, acquireBuildSlot as F, listBuildSlots as I, releaseBuildSlot as L, withManagedTunnelRemovalLock as M, probePublicHttp as N, terminateChild as O, resolveSupervisorTarget as P, teardownParkedIosSim as S, canonicalPath as T, teardownBrowserHeld as _, collectWorkspaceOutputs as a, teardownOwnedIosSim as b, listWorkspaceDirs as c, emptyWorkspaceDir as d, withIdleWorkspace as f, eraseParkedIosSim as g, eraseParkedAvd as h, collectOrphanedWorkspaces as i, withManagedTunnelLock as j, withManagedRemoteWorktreeLock as k, rootPresence as l, runningBundleInstances as m, WORKSPACE_OUTPUT_DIRS as n, deleteOrphanedWorkspaces as o, workspaceInUse as p, clearWorkspaceOutputs as r, isInsideWorkspaces as s, REBUILD_COST as t, sizeText as u, teardownOwnedAvd as v, takeGcResults as w, teardownParkedAvd as x, teardownOwnedBrowser as y };