stim 1.20.2 → 1.21.0

package/dist/settings-write-HyVZ8eQ8.mjs

@@ -0,0 +1,359 @@
+import { A as writeConfigSettingAsync, O as withConfigLockAsync$1, _ as loadConfig$1, f as getConfigPath$1, h as getRepoSettings, m as getProjectSettings } from "./config-CYcBF478.mjs";
+import { Kt as gitPath, it as unknownSettingKeys, qt as killOnAbort, z as readCommittedSettings } from "./settings-CsJDEXgK.mjs";
+import { r as findCommandWorkspaceAsync, t as NO_PROJECT_REFUSAL } from "./project-BZNjmW_8.mjs";
+import { i as stimDesktopInstalledAsync, n as settingDefault, r as stimDesktopInstalled } from "./stim-desktop-C12we7lz.mjs";
+import { t as withWorkspaceProcessLock } from "./workspace-process-lock-1_1OoVW5.mjs";
+import { n as recordingLayers, t as deleteTurnedOffRecordings } from "./recordings-DYteQSu4.mjs";
+import { existsSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { configDir } from "@stim-cli/core";
+import { SETTINGS, SETTING_SCOPES, coerceSettingText, isJsonObject, isSensitiveReference, settingDefinition, settingValueError } from "@stim-cli/core/state";
+//#region src/workspace/settings-payload.ts
+const MASK = "********";
+const PRECEDENCE = [
+	"workspace",
+	"repo",
+	"committed",
+	"machine"
+];
+var SettingsRefusal = class extends Error {
+	code;
+	remedy;
+	constructor(code, message, remedy) {
+		super(message);
+		this.code = code;
+		this.remedy = remedy;
+	}
+};
+/** Reads layers using exactly `env`; `signal` kills Git children. `resolvedProject` pins a mutation's readback target. */
+async function readSettingsContext(cwd, env, note = () => {}, signal, resolvedProject) {
+	const repoRootOf = (dir) => gitPath(dir, ["--show-toplevel"], env, signal);
+	const projectPath = resolvedProject === void 0 ? await findCommandWorkspaceAsync(cwd, repoRootOf, note) : resolvedProject;
+	const start = projectPath ?? cwd;
+	const [common, root] = await Promise.all([gitPath(start, ["--path-format=absolute", "--git-common-dir"], env, signal), repoRootOf(start)]);
+	signal?.throwIfAborted();
+	const repoRoot = common ? root ?? projectPath : null;
+	const app = projectPath ?? repoRoot;
+	const repository = repoRoot ?? projectPath;
+	const committed = readCommittedSettings(app);
+	let installed;
+	return {
+		projectPath,
+		gitCommonDir: common,
+		repoRoot,
+		machine: loadConfig$1(),
+		workspace: projectPath ? getProjectSettings(projectPath) : {},
+		repo: common ? getRepoSettings(common) : {},
+		committed: {
+			app: committed,
+			repository: repository === app ? committed : readCommittedSettings(repository)
+		},
+		env,
+		desktopInstalled: () => installed ??= stimDesktopInstalled(process.platform, env)
+	};
+}
+function valueAt(settings, key) {
+	let node = settings;
+	for (const segment of key.split(".")) {
+		if (!isJsonObject(node)) return void 0;
+		node = node[segment];
+	}
+	return node;
+}
+function committedDirectory(context, setting) {
+	return setting?.committedAt === "repository" ? repositoryDirectory(context) : appDirectory(context);
+}
+function repositoryDirectory(context) {
+	return context.repoRoot ?? context.projectPath;
+}
+function appDirectory(context) {
+	return context.projectPath ?? context.repoRoot;
+}
+function layerFile(context, scope, setting) {
+	const machineFile = getConfigPath$1();
+	if (scope === "machine") return machineFile;
+	if (scope === "workspace") return context.projectPath ? `${machineFile} (projects["${context.projectPath}"].settings)` : null;
+	if (scope === "repo") return context.gitCommonDir ? `${machineFile} (repos["${context.gitCommonDir}"].settings)` : null;
+	const directory = committedDirectory(context, setting);
+	return directory ? join(directory, ".stim.json") : null;
+}
+function layerSettings(context, scope, setting) {
+	if (scope === "machine") return context.machine ?? {};
+	if (scope === "workspace") return context.workspace;
+	if (scope === "repo") return context.repo;
+	return setting?.committedAt === "repository" ? context.committed.repository : context.committed.app;
+}
+function masked(setting, value) {
+	return setting.sensitive && value !== void 0 && value !== null ? MASK : value;
+}
+function settingExample(setting) {
+	switch (setting.type.kind) {
+		case "boolean": return "false";
+		case "number": return String(setting.default ?? setting.type.minimum ?? 1);
+		case "strings": return `'["node_modules"]'`;
+		case "object": return `'{"key": "value"}'`;
+		case "choice": return setting.type.choices[0];
+		default: return "<value>";
+	}
+}
+function envSettingValue(setting, raw) {
+	const value = coerceSettingText(setting, raw);
+	const error = settingValueError(setting, value);
+	if (error) throw new SettingsRefusal("STIM_BAD_ARG", `Invalid ${setting.env} value ${JSON.stringify(raw)}. Expected ${error}.`, `Fix the environment variable, or unset it and run \`stim settings set ${setting.key} ${settingExample(setting)}\`.`);
+	return value;
+}
+function settingEntry(context, setting) {
+	const layers = {};
+	for (const scope of PRECEDENCE) {
+		if (!setting.scopes.includes(scope) || layerFile(context, scope, setting) === null) continue;
+		const value = valueAt(layerSettings(context, scope, setting), setting.key);
+		if (value !== void 0) layers[scope] = masked(setting, value);
+	}
+	const envValue = setting.env ? context.env[setting.env] : void 0;
+	const env = setting.env && envValue ? {
+		name: setting.env,
+		value: String(masked(setting, envValue))
+	} : void 0;
+	const scopedHome = !env && setting.scopedHomeValue !== void 0 && context.env.STIM_HOME;
+	const ci = !env && setting.ciValue !== void 0 && context.env.CI;
+	const winner = PRECEDENCE.find((scope) => scope in layers);
+	let value = null;
+	let origin = null;
+	let defaultReason = null;
+	if (env) {
+		value = masked(setting, envSettingValue(setting, envValue));
+		origin = "env";
+	} else if (scopedHome) {
+		value = setting.scopedHomeValue;
+		origin = "env";
+	} else if (ci) {
+		value = setting.ciValue;
+		origin = "env";
+	} else if (winner) {
+		value = layers[winner];
+		origin = winner;
+	} else if (setting.default !== void 0) {
+		const fallback = settingDefault(setting, context.desktopInstalled);
+		value = fallback.value;
+		origin = "default";
+		defaultReason = fallback.reason;
+	}
+	return {
+		key: setting.key,
+		value,
+		origin,
+		layers,
+		...env ? { env } : scopedHome ? { env: {
+			name: "STIM_HOME",
+			value: context.env.STIM_HOME
+		} } : ci ? { env: {
+			name: "CI",
+			value: context.env.CI
+		} } : {},
+		...setting.sensitive ? { sensitive: true } : {},
+		...defaultReason ? { defaultReason } : {}
+	};
+}
+function unknownEntries(context) {
+	const sources = [
+		{
+			scope: "machine",
+			file: layerFile(context, "machine", null),
+			settings: { optimizations: context.machine?.optimizations }
+		},
+		{
+			scope: "workspace",
+			file: layerFile(context, "workspace", null),
+			settings: layerSettings(context, "workspace", null)
+		},
+		{
+			scope: "repo",
+			file: layerFile(context, "repo", null),
+			settings: layerSettings(context, "repo", null)
+		},
+		{
+			scope: "committed",
+			file: layerFile(context, "committed", null),
+			settings: layerSettings(context, "committed", null)
+		}
+	];
+	const repository = repositoryDirectory(context);
+	if (repository && repository !== appDirectory(context)) sources.push({
+		scope: "committed",
+		file: join(repository, ".stim.json"),
+		settings: context.committed.repository
+	});
+	return sources.flatMap(({ scope, file, settings }) => file === null ? [] : unknownSettingKeys(settings).map((key) => ({
+		key,
+		scope,
+		file,
+		value: valueAt(settings, key)
+	})));
+}
+function settingsPayload(context) {
+	const files = {};
+	for (const scope of SETTING_SCOPES) {
+		const file = layerFile(context, scope, null);
+		if (file) files[scope] = file;
+	}
+	return {
+		project: context.projectPath,
+		files,
+		settings: SETTINGS.map((setting) => settingEntry(context, setting)),
+		unknown: unknownEntries(context)
+	};
+}
+/** Every setting with its effective value and layers; looks Stim Desktop up asynchronously, and only when a default depends on it. */
+async function readSettingsPayload(context, signal) {
+	let asked = false;
+	const payload = settingsPayload({
+		...context,
+		desktopInstalled: () => {
+			asked = true;
+			return false;
+		}
+	});
+	if (!asked) return payload;
+	const installed = await stimDesktopInstalledAsync(process.platform, context.env, killOnAbort(signal));
+	signal?.throwIfAborted();
+	return settingsPayload({
+		...context,
+		desktopInstalled: () => installed
+	});
+}
+//#endregion
+//#region src/workspace/settings-write.ts
+function requireSetting(key) {
+	const setting = settingDefinition(key);
+	if (setting) return setting;
+	throw new SettingsRefusal("STIM_BAD_ARG", `${JSON.stringify(key)} is not a Stim setting.`, "Run `stim settings` to list every setting, or `stim guide settings` for what each one does.");
+}
+function readScope(raw, setting) {
+	if (raw === void 0) {
+		if (setting.scopes.length === 1) return setting.scopes[0];
+		throw new SettingsRefusal("STIM_BAD_ARG", `${setting.key} can live in more than one layer, so the command needs --scope.`, `Pass --scope ${setting.scopes.join("|")}.`);
+	}
+	if (!SETTING_SCOPES.includes(raw)) throw new SettingsRefusal("STIM_BAD_ARG", `--scope takes ${SETTING_SCOPES.join(", ")}, not ${JSON.stringify(raw)}.`, null);
+	const scope = raw;
+	if (!setting.scopes.includes(scope)) throw new SettingsRefusal("STIM_BAD_ARG", `${setting.key} is not read from the ${scope} layer.`, `Pass --scope ${setting.scopes.join("|")}.`);
+	return scope;
+}
+function requireLayer(context, scope, setting) {
+	const file = layerFile(context, scope, setting);
+	if (file) return file;
+	if (scope === "repo") throw new SettingsRefusal("STIM_BAD_ARG", "The repo layer is keyed by a Git repository, and this directory is not inside one.", "Run this from inside the repository, or pick another --scope.");
+	throw new SettingsRefusal(NO_PROJECT_REFUSAL.code, NO_PROJECT_REFUSAL.message, NO_PROJECT_REFUSAL.remedy);
+}
+function parseSettingValue(setting, raw) {
+	const invalid = (expected) => new SettingsRefusal("STIM_BAD_ARG", `Invalid ${setting.key} value ${JSON.stringify(raw)}. Expected ${expected}.`, `For example: stim settings set ${setting.key} ${settingExample(setting)}${setting.scopes.length > 1 ? ` --scope ${setting.scopes[0]}` : ""}`);
+	const kind = setting.type.kind;
+	const value = coerceSettingText(setting, raw);
+	const error = settingValueError(setting, value);
+	if (error) throw invalid(kind === "strings" || kind === "object" ? `${error}, written as JSON` : error);
+	return value;
+}
+function committedTarget(context, setting) {
+	const directory = committedDirectory(context, setting);
+	if (!directory) throw new SettingsRefusal(NO_PROJECT_REFUSAL.code, NO_PROJECT_REFUSAL.message, NO_PROJECT_REFUSAL.remedy);
+	return join(directory, ".stim.json");
+}
+function writeCommitted(file, key, value, signal) {
+	return withConfigLockAsync$1(() => {
+		const exists = existsSync(file);
+		const text = exists ? readFileSync(file, "utf-8") : "";
+		let parsed = {};
+		if (exists && text.trim() !== "") try {
+			parsed = JSON.parse(text);
+		} catch (error) {
+			throw new SettingsRefusal("STIM_BAD_ARG", `${file} is not valid JSON: ${error.message}`, `Repair ${file}, then run the command again.`);
+		}
+		if (!isJsonObject(parsed)) throw new SettingsRefusal("STIM_BAD_ARG", `${file} is not a JSON object.`, `Repair ${file}, then run the command again.`);
+		const parts = key.split(".");
+		const chain = [parsed];
+		for (const part of parts.slice(0, -1)) {
+			const node = chain.at(-1);
+			if (!isJsonObject(node[part])) {
+				if (value === void 0) return false;
+				node[part] = {};
+			}
+			chain.push(node[part]);
+		}
+		const leaf = parts.at(-1);
+		const parent = chain.at(-1);
+		if (value === void 0) {
+			if (!(leaf in parent)) return false;
+			delete parent[leaf];
+			for (let index = chain.length - 1; index > 0; index--) {
+				if (Object.keys(chain[index]).length > 0) break;
+				delete chain[index - 1][parts[index - 1]];
+			}
+		} else parent[leaf] = value;
+		const indent = /\n([ \t]+)"/.exec(text)?.[1] ?? 2;
+		const tmp = `${file}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
+		writeFileSync(tmp, `${JSON.stringify(parsed, null, indent)}\n`);
+		try {
+			renameSync(tmp, file);
+		} catch (error) {
+			try {
+				unlinkSync(tmp);
+			} catch {}
+			throw error;
+		}
+		return true;
+	}, signal);
+}
+function writeSetting(context, setting, scope, value, signal) {
+	if (scope === "committed") return writeCommitted(committedTarget(context, setting), setting.key, value, signal);
+	if (scope === "machine") return writeConfigSettingAsync({ scope }, setting.key, value, signal);
+	if (scope === "workspace") return writeConfigSettingAsync({
+		scope,
+		projectPath: context.projectPath
+	}, setting.key, value, signal);
+	return writeConfigSettingAsync({
+		scope,
+		gitCommonDir: context.gitCommonDir
+	}, setting.key, value, signal);
+}
+/** Shares CLI set/unset validation and side effects; after commit, recording cleanup finishes despite cancellation. */
+async function mutateSetting(request, { cwd, env, note = () => {}, signal, beforeWrite }) {
+	signal?.throwIfAborted();
+	const { key } = request;
+	const setting = requireSetting(key);
+	const scope = readScope(request.scope, setting);
+	const value = request.action === "set" ? parseSettingValue(setting, request.value) : void 0;
+	if (setting.sensitive && scope === "committed" && value !== void 0 && !isSensitiveReference(value)) throw new SettingsRefusal("STIM_BAD_ARG", `${key} is sensitive, so a committed .stim.json takes only an env: or file: reference, never the secret.`, `Set the secret with --scope workspace or --scope repo, which store it in ${getConfigPath$1()}, readable only by you, or commit a reference such as env:MY_KEYSTORE_PASSWORD.`);
+	const context = await readSettingsContext(cwd, env, note, signal);
+	const file = requireLayer(context, scope, setting);
+	beforeWrite?.(context.projectPath);
+	const apply = async () => {
+		const recording = setting.key === "recording.enabled" ? recordingLayers() : null;
+		const changed = await writeSetting(context, setting, scope, value, signal);
+		const updated = await readSettingsContext(cwd, env, void 0, void 0, context.projectPath);
+		const recordingsDeleted = recording ? await deleteTurnedOffRecordings(recording) : void 0;
+		let entry = settingEntry({
+			...updated,
+			desktopInstalled: () => false
+		}, setting);
+		if (entry.origin === "default" && setting.desktopDefault !== void 0) {
+			const installed = await stimDesktopInstalledAsync(process.platform, env);
+			entry = settingEntry({
+				...updated,
+				desktopInstalled: () => installed
+			}, setting);
+		}
+		return {
+			key,
+			scope,
+			file,
+			changed,
+			setting: entry,
+			...recordingsDeleted ? { recordingsDeleted } : {}
+		};
+	};
+	return key === "recording.enabled" ? withWorkspaceProcessLock(configDir(), "recording-settings", apply, {
+		external: true,
+		signal
+	}) : apply();
+}
+//#endregion
+export { layerFile as a, settingEntry as c, SettingsRefusal as i, readScope as n, readSettingsContext as o, requireSetting as r, readSettingsPayload as s, mutateSetting as t };

package/dist/settings.schema.json

@@ -287,7 +287,7 @@
           }
         },
         "remote": {
-          "description": "Default iOS remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this Mac is full or busy; local runs here, overriding a lower layer",
+          "description": "Default iOS remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this machine is full or busy; local runs here, overriding a lower layer",
           "type": "string",
           "pattern": "^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$",
           "x-stim": {
@@ -490,6 +490,19 @@
             ]
           }
         },
+        "artifactInputs": {
+          "description": "Complete repeatable native Gradle inputs for local APK caching, including declared local files and environment names",
+          "type": "object",
+          "x-stim": {
+            "key": "android.artifactInputs",
+            "kind": "object",
+            "scopes": [
+              "workspace",
+              "repo",
+              "committed"
+            ]
+          }
+        },
         "offloadInputs": {
           "description": "Native Gradle source sufficiency, exact ignored inputs and generated output directories for build workers",
           "type": "object",
@@ -532,7 +545,7 @@
           }
         },
         "remote": {
-          "description": "Default Android remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this Mac is full or busy; local runs here, overriding a lower layer",
+          "description": "Default Android remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this machine is full or busy; local runs here, overriding a lower layer",
           "type": "string",
           "pattern": "^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$",
           "x-stim": {
@@ -941,7 +954,7 @@
       "type": "object",
       "properties": {
         "keep": {
-          "description": "Pin this workspace: automatic maintenance never clears its build outputs or removes its worktree",
+          "description": "Pin this workspace: automatic maintenance never clears its build outputs, deletes its owned devices or removes its worktree",
           "type": "boolean",
           "default": false,
           "x-stim": {
@@ -961,7 +974,7 @@
       "type": "object",
       "properties": {
         "easFallback": {
-          "description": "When ios.remote or android.remote is auto, this Mac is at its concurrency.maxDevices cap and no Mac in remote.machines takes the run, run the simulator or emulator on a billed EAS Simulator instead of waiting or refusing, when eas-cli can",
+          "description": "When ios.remote or android.remote is auto, this machine is at its concurrency.maxDevices cap and no remote.machines entry takes the run, run the simulator or emulator on a billed EAS Simulator instead of waiting or refusing, when eas-cli can",
           "type": "boolean",
           "default": false,
           "x-stim": {
@@ -1243,7 +1256,7 @@
               }
             },
             "remote": {
-              "description": "Default iOS remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this Mac is full or busy; local runs here, overriding a lower layer",
+              "description": "Default iOS remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this machine is full or busy; local runs here, overriding a lower layer",
               "type": "string",
               "pattern": "^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$",
               "x-stim": {
@@ -1256,6 +1269,46 @@
                   "committed"
                 ]
               }
+            },
+            "appStoreConnectKeyPath": {
+              "description": "App Store Connect API key (.p8) that `stim device provision ios` authenticates with",
+              "type": "string",
+              "x-stim": {
+                "key": "ios.appStoreConnectKeyPath",
+                "kind": "path",
+                "scopes": [
+                  "machine"
+                ],
+                "absolute": true,
+                "env": "STIM_ASC_KEY_PATH",
+                "sensitive": true
+              }
+            },
+            "appStoreConnectKeyId": {
+              "description": "Key ID of ios.appStoreConnectKeyPath",
+              "type": "string",
+              "pattern": "^[A-Za-z0-9]+$",
+              "x-stim": {
+                "key": "ios.appStoreConnectKeyId",
+                "kind": "string",
+                "scopes": [
+                  "machine"
+                ],
+                "env": "STIM_ASC_KEY_ID"
+              }
+            },
+            "appStoreConnectIssuerId": {
+              "description": "Issuer ID of ios.appStoreConnectKeyPath",
+              "type": "string",
+              "pattern": "^[A-Za-z0-9-]+$",
+              "x-stim": {
+                "key": "ios.appStoreConnectIssuerId",
+                "kind": "string",
+                "scopes": [
+                  "machine"
+                ],
+                "env": "STIM_ASC_ISSUER_ID"
+              }
             }
           },
           "additionalProperties": false
@@ -1294,7 +1347,7 @@
               }
             },
             "remote": {
-              "description": "Default Android remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this Mac is full or busy; local runs here, overriding a lower layer",
+              "description": "Default Android remote target: eas, proxy, or an approved Mac in remote.machines; auto places on an approved Mac when this machine is full or busy; local runs here, overriding a lower layer",
               "type": "string",
               "pattern": "^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$",
               "x-stim": {
@@ -1855,6 +1908,20 @@
                 "env": "STIM_MAINTENANCE_OLDER_THAN_DAYS"
               }
             },
+            "deviceIdleDays": {
+              "description": "Days a workspace stays idle before the age sweep deletes its owned simulators and emulators; 0 turns that off",
+              "type": "integer",
+              "minimum": 0,
+              "default": 3,
+              "x-stim": {
+                "key": "maintenance.deviceIdleDays",
+                "kind": "number",
+                "scopes": [
+                  "machine"
+                ],
+                "env": "STIM_MAINTENANCE_DEVICE_IDLE_DAYS"
+              }
+            },
             "protectRecentHours": {
               "description": "Cache entries used within this many hours are never evicted",
               "type": "integer",
@@ -1869,8 +1936,64 @@
                 "env": "STIM_MAINTENANCE_PROTECT_RECENT_HOURS"
               }
             },
+            "urgentFreeDiskGb": {
+              "description": "Free disk, in GB, below which automatic maintenance reports disk pressure level 2; 0 turns that threshold off",
+              "type": "number",
+              "minimum": 0,
+              "default": 12,
+              "x-stim": {
+                "key": "maintenance.urgentFreeDiskGb",
+                "kind": "number",
+                "scopes": [
+                  "machine"
+                ],
+                "env": "STIM_MAINTENANCE_URGENT_FREE_DISK_GB"
+              }
+            },
+            "criticalFreeDiskGb": {
+              "description": "Free disk, in GB, below which automatic maintenance enters disk pressure level 3, also at or below budget.hardFloorDiskGb; 0 leaves only the hard floor",
+              "type": "number",
+              "minimum": 0,
+              "default": 6,
+              "x-stim": {
+                "key": "maintenance.criticalFreeDiskGb",
+                "kind": "number",
+                "scopes": [
+                  "machine"
+                ],
+                "env": "STIM_MAINTENANCE_CRITICAL_FREE_DISK_GB"
+              }
+            },
+            "pressureProtectMinutes": {
+              "description": "Protection window, in minutes, that replaces maintenance.protectRecentHours at disk pressure levels 2 and 3",
+              "type": "integer",
+              "minimum": 0,
+              "default": 10,
+              "x-stim": {
+                "key": "maintenance.pressureProtectMinutes",
+                "kind": "number",
+                "scopes": [
+                  "machine"
+                ],
+                "env": "STIM_MAINTENANCE_PRESSURE_PROTECT_MINUTES"
+              }
+            },
+            "gradleVersionIdleDays": {
+              "description": "At disk pressure level 3, stop idle Gradle and Kotlin daemons, then delete the Gradle version caches and wrapper distributions no registered project pins once their directories are unmodified this many days; 0 turns this off",
+              "type": "integer",
+              "minimum": 0,
+              "default": 7,
+              "x-stim": {
+                "key": "maintenance.gradleVersionIdleDays",
+                "kind": "number",
+                "scopes": [
+                  "machine"
+                ],
+                "env": "STIM_MAINTENANCE_GRADLE_VERSION_IDLE_DAYS"
+              }
+            },
             "removeFinishedWorktrees": {
-              "description": "Remove clean linked worktrees whose branch or pull request finished, under gc.worktreeGraceMinutes",
+              "description": "Remove clean linked worktrees whose branch or pull request finished, under gc.worktreeGraceMinutes, and at disk pressure level 3 clean, pushed ones with no commits of their own",
               "type": "boolean",
               "default": true,
               "x-stim": {
@@ -2045,7 +2168,7 @@
           "type": "object",
           "properties": {
             "logs": {
-              "description": "Debug-level logging. While on, the CLI records its commands, child processes and requests to other Macs, and stim-server records every request with its timings, under STIM_HOME/logs/debug/ with rotation. Nothing is sent anywhere, and records never carry arguments, tokens or tickets",
+              "description": "Debug-level logging. While on, the CLI records its commands, child processes and requests to other machines, and stim-server records every request with its timings, under STIM_HOME/logs/debug/ with rotation. Nothing is sent anywhere, and records never carry arguments, tokens or tickets",
               "type": "boolean",
               "default": false,
               "x-stim": {
@@ -2085,8 +2208,32 @@
         "server": {
           "type": "object",
           "properties": {
+            "buildsPaused": {
+              "description": "Temporarily refuse new incoming builds without interrupting running builds, serving cached artifacts, or changing client approvals; local CLI builds remain available",
+              "type": "boolean",
+              "default": false,
+              "x-stim": {
+                "key": "server.buildsPaused",
+                "kind": "boolean",
+                "scopes": [
+                  "machine"
+                ]
+              }
+            },
+            "devicesPaused": {
+              "description": "Temporarily refuse new hosted iOS, Android and macOS sessions without interrupting existing sessions or changing client approvals; local CLI devices remain available",
+              "type": "boolean",
+              "default": false,
+              "x-stim": {
+                "key": "server.devicesPaused",
+                "kind": "boolean",
+                "scopes": [
+                  "machine"
+                ]
+              }
+            },
             "acceptClientBuilds": {
-              "description": "Whether a Mac approved for builds or device hosting here may update this Mac's stim-server service to that Mac's own stim-server build; releases from npm need no setting",
+              "description": "Whether a machine approved for builds or device hosting here may update this machine's stim-server service to that machine's own stim-server build; releases from npm need no setting",
               "type": "boolean",
               "default": false,
               "x-stim": {
@@ -2098,7 +2245,7 @@
               }
             },
             "maxLoadPerCore": {
-              "description": "Load per core (5-minute load average divided by the CPU count) at which this Mac counts as saturated: it declines builds other Macs send it, automatic build placement stops preferring it, and automatic iOS and Android device placement treats it as busy",
+              "description": "Load per core (5-minute load average divided by the CPU count) at which this machine counts as saturated: it declines builds other machines send it, automatic build placement stops preferring it, and automatic iOS and Android device placement treats it as busy",
               "type": "number",
               "minimum": 0.1,
               "default": 2,
@@ -2111,7 +2258,7 @@
               }
             },
             "workerRoot": {
-              "description": "Directory where stim-server keeps the checkouts, dependencies and build state of the Macs that build here; default $STIM_HOME/build-worker",
+              "description": "Directory where stim-server keeps the checkouts, dependencies and build state of the machines that build here; default $STIM_HOME/build-worker",
               "type": "string",
               "x-stim": {
                 "key": "server.workerRoot",
@@ -2123,7 +2270,7 @@
               }
             },
             "gradleDaemonIdleMinutes": {
-              "description": "Minutes the Gradle daemon of an Android build another Mac sent here stays warm after the build; 0 stops it when the build ends",
+              "description": "Minutes the Gradle daemon of an Android build another machine sent here stays warm after the build; 0 stops it when the build ends",
               "type": "integer",
               "minimum": 0,
               "maximum": 35791,
@@ -2143,7 +2290,7 @@
           "type": "object",
           "properties": {
             "machines": {
-              "description": "Tailscale names of the remote Macs this Mac may build on and host owned simulators on, each optionally with :<port> of its tailscale serve route (default 7443); what each is used for follows the build and device-host approvals it grants, which doctor --fix asks for separately",
+              "description": "Tailscale names of the remote machines this machine may build on and host owned simulators on, each optionally with :<port> of its tailscale serve route (default 7443); what each is used for follows the build and device-host approvals it grants, which doctor --fix asks for separately",
               "type": "array",
               "items": {
                 "type": "string"
@@ -2187,7 +2334,7 @@
               }
             },
             "easFallback": {
-              "description": "When ios.remote or android.remote is auto, this Mac is at its concurrency.maxDevices cap and no Mac in remote.machines takes the run, run the simulator or emulator on a billed EAS Simulator instead of waiting or refusing, when eas-cli can",
+              "description": "When ios.remote or android.remote is auto, this machine is at its concurrency.maxDevices cap and no remote.machines entry takes the run, run the simulator or emulator on a billed EAS Simulator instead of waiting or refusing, when eas-cli can",
               "type": "boolean",
               "default": false,
               "x-stim": {
@@ -2202,7 +2349,7 @@
               }
             },
             "build": {
-              "description": "Build placement: auto follows remote.buildMode within enabled automatic pool members; local always builds here; a name in remote.machines requires that remote Mac without fallback. The ios, android and macos --remote-build flag overrides this setting and its environment override",
+              "description": "Build placement: auto follows remote.buildMode within enabled automatic pool members; local always builds here; a name in remote.machines requires that remote machine without fallback. The ios, android and macos --remote-build flag overrides this setting and its environment override",
               "type": "string",
               "pattern": "^[A-Za-z0-9][A-Za-z0-9.-]*(?::(?!0+$)(?:[0-5]?[0-9]{1,4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5]))?$",
               "default": "auto",
@@ -2216,7 +2363,7 @@
               }
             },
             "buildMode": {
-              "description": "When remote.build is auto, where iOS simulator Debug, Android emulator debug and macOS SwiftPM Debug builds run: auto builds here while this Mac has a free concurrency.maxBuilds slot and its load is under server.maxLoadPerCore, and otherwise builds on a less loaded Mac in remote.machines; force builds on an enabled remote Mac whenever one can take the build; off builds here when local is enabled in remote.buildPoolDisabled",
+              "description": "When remote.build is auto, where iOS simulator Debug, Android emulator debug and macOS SwiftPM Debug builds run: auto builds here while this machine has a free concurrency.maxBuilds slot and its load is under server.maxLoadPerCore, and otherwise builds on a less loaded machine in remote.machines; force builds on an enabled remote machine whenever one can take the build; off builds here when local is enabled in remote.buildPoolDisabled",
               "type": "string",
               "enum": [
                 "auto",