stim 1.23.1 → 1.25.0

package/dist/{client-B4MMzfo_.mjs → client-BQsmyp_-.mjs}

@@ -1,27 +1,26 @@
-import { _ as reportSignal, b as debugLog, m as operationState, t as getExecutor } from "./exec-DEoAhcze.mjs";
-import { Q as openAuthenticated, _ as loadConfig$1, it as sayHello, rt as resolveEndpoint } from "./config-DlrsduwG.mjs";
-import { f as throwIfCancelled, o as git, s as gitAsync } from "./operation-exec-BW0em61G.mjs";
+import { C as reportSignal, E as debugLog, b as operationState, c as throwIfCancelled, t as getExecutor } from "./exec-VFRpu1iA.mjs";
+import { Q as openAuthenticated, _ as loadConfig$1, it as sayHello, rt as resolveEndpoint } from "./config-BZhXY15H.mjs";
+import { o as git, s as gitAsync } from "./operation-exec-CUZifp6Z.mjs";
 import { r as createNdjsonWriter } from "./ndjson-CgE_o3Dl.mjs";
-import { X as emptyCaches, br as discoverCaches, nt as planCacheEmptying } from "./budget-3ivAK99e.mjs";
+import { Cr as discoverCaches, Q as emptyCaches, it as planCacheEmptying } from "./budget-HyShrIpL.mjs";
 import { t as canonicalPath } from "./paths-BsJMoPP2.mjs";
-import { d as runCancellationSignal } from "./native-run-Dv88i0aU.mjs";
-import { n as CCACHE_UNAVAILABLE, t as CCACHE_NOT_RUN } from "./ccache-CH2EWGPB.mjs";
-import { n as COMPILATION_CACHE_UNAVAILABLE, t as COMPILATION_CACHE_NOT_RUN } from "./xcode-Rq744mBF.mjs";
+import { d as runCancellationSignal } from "./native-run-D5OJsGwA.mjs";
+import { n as CCACHE_UNAVAILABLE, t as CCACHE_NOT_RUN } from "./ccache-h1FKhZeg.mjs";
+import { n as COMPILATION_CACHE_UNAVAILABLE, t as COMPILATION_CACHE_NOT_RUN } from "./xcode-CiIIDnuD.mjs";
 import { t as resolveMaintenanceSettings } from "./settings-Djl-mpjX.mjs";
-import { a as iosToolchainAsync, d as toolchainMismatches, f as workerToolchain, g as readRubyVersion } from "./toolchain-B9hCFCQw.mjs";
-import { l as pairedMachines, r as namedBuildMachine, t as OffloadRefusal } from "./selection-DSMbWEX2.mjs";
-import { r as manifestDigest } from "./native-inputs-TRTTTRxt.mjs";
-import { a as sourceManifest, i as nativeTransferManifest, n as gitVisiblePaths, t as checkNativeTransferMembership } from "./native-source-Y0yLhFyQ.mjs";
-import { a as nativeGradleTransfer } from "./native-gradle-inputs-Dnh84Zbd.mjs";
+import { a as iosToolchainAsync, d as toolchainMismatches, f as workerToolchain, g as readRubyVersion } from "./toolchain-VzLJzZ7O.mjs";
+import { i as namedBuildMachine, t as OffloadRefusal, u as pairedMachines } from "./selection-D5cxEl3t.mjs";
+import { n as fingerprintNativeInputs, r as manifestDigest } from "./native-inputs-TRTTTRxt.mjs";
+import { a as sourceManifest, i as nativeTransferManifest, n as gitVisiblePaths, r as nativeFileDigest, t as checkNativeTransferMembership } from "./native-source-D-4Dh4JU.mjs";
 import { createHash, webcrypto } from "node:crypto";
 import { closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, rmSync, statSync, unlinkSync, writeSync } from "node:fs";
 import { isDeepStrictEqual } from "node:util";
-import { basename, dirname, isAbsolute, join, relative, sep } from "node:path";
-import { LOG_ROTATE_BYTES, ambientContext, reactNativeArtifactIdentity, reactNativeArtifactQuery, rotatedLogPath, swiftpmArtifactQuery, withDirLock } from "@stim-cli/core";
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { LOG_ROTATE_BYTES, ambientContext, dependencyLockfile, reactNativeArtifactIdentity, reactNativeArtifactQuery, rotatedLogPath, swiftpmArtifactQuery, withDirLock } from "@stim-cli/core";
 import { MAINTENANCE_LOG_NAME, OFFLOAD_MODES, automaticMachineEnabled, isJsonObject, maintenanceDir, maintenanceNdjsonFile, requireAutomaticMachine, runId, saturation, workspaceLogsDir } from "@stim-cli/core/state";
 import { WebSocket } from "ws";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-import { readFile, readlink } from "node:fs/promises";
+import { access, lstat, readFile, readlink, realpath } from "node:fs/promises";
 //#region src/maintenance/log.ts
 function maintenanceLogger(settings, pass, trigger) {
 	const file = maintenanceNdjsonFile();
@@ -158,6 +157,210 @@ function reportRemoteFailure(context, event, fields) {
 	} catch {}
 }
 //#endregion
+//#region src/integrations/native-gradle-inputs.ts
+function containedPath(path) {
+	return typeof path === "string" && path.length > 0 && !path.includes("\\") && !path.includes(":") && !path.includes("\0") && !path.split("/").some((part) => !part || part === "." || part === ".." || part.toLowerCase() === ".git");
+}
+function gradleOffloadInputs(value) {
+	const input = value;
+	if (!input || typeof input !== "object" || input.complete !== true || Object.keys(input).some((key) => ![
+		"complete",
+		"ignored",
+		"outputs"
+	].includes(key)) || !Array.isArray(input.ignored) || !input.ignored.every(containedPath) || !Array.isArray(input.outputs) || !input.outputs.every(containedPath)) throw new Error("Native Gradle offload requires android.offloadInputs with complete: true, ignored: [exact repository-relative files], and outputs: [generated repository-relative directories].");
+	const ignored = [...new Set(input.ignored)].toSorted();
+	const outputs = [...new Set(input.outputs)].toSorted();
+	if (ignored.some((path) => path.split("/").at(-1) === "local.properties")) throw new Error("local.properties is machine-local; remove it from android.offloadInputs.ignored.");
+	if (outputs.some((path) => path.split("/").some((part) => part === ".gradle" || part === ".kotlin"))) throw new Error("Gradle project state is worker-owned and cannot be declared as a generated output.");
+	for (const output of outputs) if (outputs.some((other) => other !== output && output.startsWith(`${other}/`))) throw new Error(`Generated output ${output} is nested inside another output declaration.`);
+	return {
+		complete: true,
+		ignored,
+		outputs
+	};
+}
+const below = (path, directory) => path === directory || path.startsWith(`${directory}/`);
+function gradleStateDirectories(project) {
+	return [".gradle", ".kotlin"].map((name) => project ? `${project}/${name}` : name);
+}
+async function statIfPresent(path) {
+	try {
+		return await lstat(path);
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return null;
+		throw error;
+	}
+}
+async function requireRealParents(repository, path, signal) {
+	const parts = path.split("/");
+	for (let index = 1; index < parts.length; index++) {
+		signal?.throwIfAborted();
+		const stat = await statIfPresent(join(repository, ...parts.slice(0, index)));
+		if (stat && !stat.isDirectory()) throw new Error(`Native input ${path} has a non-directory parent.`);
+	}
+}
+async function nativeGradleTransfer(root, value, signal) {
+	return nativeGradleInventory(root, value, [], signal, true);
+}
+async function nativeGradleLocalSourceDigest(root, value, localFiles, signal) {
+	const { project, digest } = await nativeGradleInventory(root, value, localFiles, signal, false);
+	return createHash("sha256").update(JSON.stringify({
+		project,
+		digest
+	})).digest("hex");
+}
+async function nativeGradleInventory(root, value, localFiles, signal, transfer) {
+	signal?.throwIfAborted();
+	const declaration = gradleOffloadInputs(value);
+	const repository = await realpath(await gitAsync(root, ["rev-parse", "--show-toplevel"], { signal }));
+	const realRoot = await realpath(root);
+	const project = relative(repository, realRoot).split(sep).join("/");
+	const local = localFiles.map((path) => resolve(realRoot, relative(root, path)));
+	if (project && !containedPath(project)) throw new Error("The native Gradle project leaves its repository.");
+	if (transfer && (await statIfPresent(join(repository, project, "buildSrc")))?.isDirectory()) throw new Error("Native Gradle offload does not support buildSrc: AGP does not report its build directories, so the worker cannot keep them.");
+	const state = gradleStateDirectories(project);
+	const files = new Map((await sourceManifest(repository, true, signal)).map((file) => [file.path, file]));
+	for (const path of declaration.ignored) {
+		await requireRealParents(repository, path, signal);
+		const absolute = join(repository, path);
+		const stat = await lstat(absolute);
+		if (!stat.isFile() && !stat.isSymbolicLink()) throw new Error(`Ignored native input ${path} must be an exact file or link, not a directory.`);
+		if (stat.isSymbolicLink()) {
+			const content = Buffer.from(await readlink(absolute));
+			files.set(path, {
+				path,
+				kind: "link",
+				size: content.length,
+				sha256: createHash("sha256").update(content).digest("hex")
+			});
+		} else files.set(path, {
+			path,
+			kind: stat.mode & 73 ? "exec" : "file",
+			...await nativeFileDigest(absolute, signal)
+		});
+	}
+	for (const file of files.values()) {
+		if (local.includes(resolve(repository, file.path))) {
+			files.delete(file.path);
+			continue;
+		}
+		if (!containedPath(file.path)) throw new Error(`Native input ${file.path} is not a contained relative path.`);
+		await requireRealParents(repository, file.path, signal);
+		if (state.some((path) => below(file.path, path))) throw new Error("Gradle project state cannot be transferred as source.");
+		if (declaration.outputs.some((output) => below(file.path, output) || below(output, file.path))) throw new Error(`Native input ${file.path} overlaps a declared generated output.`);
+		if (file.path.split("/").at(-1) === "local.properties") {
+			if (file.kind === "link") throw new Error(`Native input ${file.path} is a machine-local properties link.`);
+			if ((await readFile(join(repository, file.path), {
+				encoding: "utf8",
+				signal
+			})).split(/\r?\n/).some((line) => line.trim() && !/^\s*[#!]/.test(line) && !/^\s*sdk\.dir\s*[:=].*[^\\]$/.test(line))) throw new Error(`Native input ${file.path} contains unsupported machine-local properties.`);
+			files.delete(file.path);
+			continue;
+		}
+	}
+	for (const file of files.values()) if (file.kind === "link") {
+		const absolute = join(repository, file.path);
+		const target = await readlink(absolute);
+		const resolved = await realpath(resolve(dirname(absolute), target));
+		const destination = relative(repository, resolved).split(sep).join("/");
+		if (isAbsolute(target) || !containedPath(destination) || !files.has(destination)) throw new Error(`Native input ${file.path} links to a target outside the declared source inventory.`);
+	}
+	for (const output of declaration.outputs) {
+		await requireRealParents(repository, output, signal);
+		const stat = await statIfPresent(join(repository, output));
+		if (stat && !stat.isDirectory()) throw new Error(`Generated output ${output} is not a real directory.`);
+		if (state.some((path) => below(output, path) || below(path, output))) throw new Error(`Generated output ${output} overlaps Gradle project state.`);
+	}
+	const empty = createHash("sha256").update("").digest("hex");
+	for (const path of files.keys()) {
+		const parts = path.split("/");
+		for (let index = 1; index < parts.length; index++) {
+			const directory = parts.slice(0, index).join("/");
+			files.set(directory, {
+				path: directory,
+				kind: "directory",
+				size: 0,
+				sha256: empty
+			});
+		}
+	}
+	const selected = [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path));
+	return {
+		repository,
+		project,
+		declaration,
+		files: selected,
+		digest: manifestDigest(selected)
+	};
+}
+async function canonicalParent(path) {
+	const missing = [];
+	while (!await access(path).then(() => true, () => false) && dirname(path) !== path) {
+		missing.unshift(basename(path));
+		path = dirname(path);
+	}
+	return join(await realpath(path), ...missing);
+}
+async function nativeGradleOutputs(repository, declaration, reported, signal) {
+	signal?.throwIfAborted();
+	if (!Array.isArray(reported) || !reported.every((path) => typeof path === "string" && isAbsolute(path))) throw new Error("AGP did not report the configured native Gradle build directories.");
+	const real = await realpath(repository);
+	const reportedPaths = /* @__PURE__ */ new Set();
+	for (const absolute of reported) {
+		const resolved = resolve(absolute);
+		const canonical = join(await canonicalParent(dirname(resolved)), basename(resolved));
+		const path = relative(real, canonical).split(sep).join("/");
+		if (!containedPath(path)) throw new Error("A Gradle build directory leaves the transferred repository.");
+		await requireRealParents(repository, path, signal);
+		const stat = await statIfPresent(join(repository, path));
+		if (stat && !stat.isDirectory()) throw new Error(`Gradle build directory ${path} is not a real directory.`);
+		reportedPaths.add(path);
+	}
+	for (const output of declaration.outputs) if (!reportedPaths.has(output)) throw new Error(`Declared output ${output} was not reported by AGP.`);
+	for (const path of reportedPaths) if ((await statIfPresent(join(repository, path)))?.isDirectory() && !declaration.outputs.some((output) => below(path, output))) throw new Error(`Gradle build directory ${path} is not declared; add it to android.offloadInputs.outputs.`);
+	const outputs = [];
+	for (const path of declaration.outputs) {
+		signal?.throwIfAborted();
+		if ((await statIfPresent(join(repository, path)))?.isDirectory()) outputs.push(path);
+	}
+	return outputs;
+}
+function validateGradleManifest(project, declaration, files) {
+	gradleOffloadInputs(declaration);
+	if (project && !containedPath(project)) throw new Error("The native Gradle project leaves its repository.");
+	const excluded = [...declaration.outputs, ...gradleStateDirectories(project)];
+	for (const file of files) if (!containedPath(file.path) || excluded.some((path) => below(file.path, path) || file.kind !== "directory" && below(path, file.path))) throw new Error(`Native source ${file.path} overlaps worker outputs or leaves the repository.`);
+	for (const path of declaration.ignored) if (!files.some((file) => file.path === path && file.kind !== "directory")) throw new Error(`Declared ignored input ${path} is missing from the transfer.`);
+}
+async function verifyGradleTransfer(repository, project, declaration, files, digest, signal) {
+	signal?.throwIfAborted();
+	validateGradleManifest(project, declaration, files);
+	const excluded = [...declaration.outputs, ...gradleStateDirectories(project)];
+	for (const path of excluded) {
+		await requireRealParents(repository, path, signal);
+		const stat = await statIfPresent(join(repository, path));
+		if (stat && !stat.isDirectory()) throw new Error(`Worker output ${path} is not a real directory.`);
+	}
+	const markers = excluded.flatMap((path) => path.split("/").slice(0, -1).map((_, index) => join(repository, ...path.split("/").slice(0, index + 1))));
+	const snapshot = await fingerprintNativeInputs([{
+		name: "repository",
+		path: repository
+	}], {
+		excluded: [join(repository, ".git"), ...excluded.map((path) => join(repository, path))],
+		ignoredDirectoryMarkers: markers.filter((path) => !files.some((file) => join(repository, file.path) === path)),
+		parameters: null,
+		signal
+	});
+	const known = new Set(files.map((file) => file.path));
+	for (const entry of snapshot.entries) {
+		if (!entry.path.startsWith("repository/") || entry.path.includes("/@target")) continue;
+		const parts = entry.path.slice(11).split("/");
+		const index = parts.findIndex((_, depth) => !known.has(parts.slice(0, depth + 1).join("/")));
+		if (index >= 0 && (index < parts.length - 1 || entry.kind === "directory")) throw new Error(`Native Gradle directory ${parts.slice(0, index + 1).join("/")} is outside the source transfer and not a declared output reported by AGP; such directories, for example, included builds or externalNativeBuild staging, are not supported for remote builds.`);
+	}
+	return manifestDigest(await nativeTransferManifest(repository, snapshot, files, signal)) === digest;
+}
+//#endregion
 //#region src/offload/react-native-artifact.ts
 function reactNativeBuildQuery(build, fingerprint, project, toolchain) {
 	if (build.native) return null;
@@ -176,17 +379,18 @@ function reactNativeBuildQuery(build, fingerprint, project, toolchain) {
 		} } : { android: build.android }
 	});
 }
-async function reactNativeArtifactToolchain(platform, root) {
+async function reactNativeArtifactToolchain(platform, root, iosDirectory) {
 	if (platform === "ios") {
-		const tools = await iosToolchainAsync(root);
+		const tools = await iosToolchainAsync(root, iosDirectory);
 		return tools.stimBuild && tools.xcode && tools.simulatorSdk && tools.cocoapods ? {
 			...tools,
 			os: process.platform
 		} : null;
 	}
-	const { stimBuild, os, arch, jdk, androidSdk } = workerToolchain(null, "gradle");
-	return stimBuild && jdk && androidSdk ? {
+	const { stimBuild, compat, os, arch, jdk, androidSdk } = workerToolchain(null, "gradle");
+	return stimBuild && compat !== void 0 && jdk && androidSdk ? {
 		stimBuild,
+		compat,
 		os,
 		arch,
 		jdk,
@@ -697,16 +901,13 @@ function repoIdentity(projectRoot) {
 function repositoryIdentity(projectRoot, repoRoot, common) {
 	const digest = createHash("sha256").update(common).digest("hex").slice(0, 12);
 	const name = (basename(dirname(common)) || "repo").replace(/[^A-Za-z0-9._-]/g, "_").replace(/^[^A-Za-z0-9]+/, "");
-	const lock = [
-		"pnpm-lock.yaml",
-		"yarn.lock",
-		"package-lock.json"
-	].find((file) => existsSync(join(repoRoot, file)));
+	const project = relative(repoRoot, realpathSync(projectRoot));
+	const lock = dependencyLockfile(repoRoot, project);
 	return {
 		repoRoot,
-		project: relative(repoRoot, realpathSync(projectRoot)),
+		project,
 		repo: `${name.slice(0, 60) || "repo"}-${digest}`,
-		lockfile: lock ? createHash("sha256").update(readFileSync(join(repoRoot, lock))).digest("hex") : null
+		lockfile: lock ? createHash("sha256").update(readFileSync(join(repoRoot, lock.dir, lock.file))).digest("hex") : null
 	};
 }
 function dependencySelection(identity, target) {
@@ -770,8 +971,8 @@ async function probeMachine(credential, identity, { connectMs = CONNECT_TIMEOUT_
 		...identity.dependencies && connection.supports("build-dependency-cache") ? { dependencies: identity.dependencies } : {},
 		...native ? { native } : identity.rubyVersion ? { rubyVersion: identity.rubyVersion } : {},
 		...native === "xcode" && identity.artifact && connection.supports("build-artifact-cache") ? { artifact: identity.artifact } : {},
-		...identity.swiftpmArtifact && connection.supports("swiftpm-peer-cache") ? { swiftpmArtifact: identity.swiftpmArtifact } : {},
-		...identity.reactNativeArtifact && connection.supports("react-native-peer-cache") ? { reactNativeArtifact: identity.reactNativeArtifact } : {},
+		...identity.swiftpmArtifact && queriesPeerCache(connection, "swiftpm-peer-cache") ? { swiftpmArtifact: identity.swiftpmArtifact } : {},
+		...identity.reactNativeArtifact && queriesPeerCache(connection, "react-native-peer-cache") ? { reactNativeArtifact: identity.reactNativeArtifact } : {},
 		...native === "gradle" && identity.gradleArtifact && connection.supports("native-gradle-peer-cache") ? { gradleArtifact: identity.gradleArtifact } : {}
 	}, offerMs);
 	const failure = replyError(reply);
@@ -793,7 +994,7 @@ async function probeMachine(credential, identity, { connectMs = CONNECT_TIMEOUT_
 	return {
 		credential,
 		connection,
-		offer: identity.swiftpmArtifact && !connection.supports("swiftpm-peer-cache") || identity.reactNativeArtifact && !connection.supports("react-native-peer-cache") || native === "gradle" && (!identity.gradleArtifact || !connection.supports("native-gradle-peer-cache")) ? {
+		offer: identity.swiftpmArtifact && !queriesPeerCache(connection, "swiftpm-peer-cache") || identity.reactNativeArtifact && !queriesPeerCache(connection, "react-native-peer-cache") || native === "gradle" && (!identity.gradleArtifact || !connection.supports("native-gradle-peer-cache")) ? {
 			...offer,
 			artifact: null
 		} : offer
@@ -822,7 +1023,7 @@ async function chooseBuildMachine({ projectRoot, target, mode, here, note, machi
 	const swiftpmQuery = swiftpmArtifact?.artifactInputs ? swiftpmArtifactQuery({
 		project: identity.project,
 		sourceDigest: manifestDigest(await sourceManifest(identity.repoRoot, true, runCancellationSignal(ambientContext()) ?? ambientContext()?.signal)),
-		stimBuild: target.local.stimBuild,
+		compat: target.local.compat,
 		inputs: swiftpmArtifact.artifactInputs,
 		build: {
 			product: swiftpmArtifact.product,
@@ -885,6 +1086,13 @@ async function chooseBuildMachine({ projectRoot, target, mode, here, note, machi
 		...swiftpmQuery ? { swiftpmArtifact: swiftpmQuery } : {}
 	};
 }
+function startCompat(choice) {
+	return choice.connection.supports("build-compat") ? { compat: choice.target.local.compat } : {};
+}
+/** Peer artifact queries carry `compat`, which a stim-server without `build-compat` refuses. */
+function queriesPeerCache(connection, feature) {
+	return connection.supports(feature) && connection.supports("build-compat");
+}
 function macosBuildParameters(request, peerCache) {
 	return {
 		...request.cacheArtifact === true && peerCache ? { cacheArtifact: true } : {},
@@ -920,13 +1128,13 @@ async function peerArtifact(choice, request, fingerprint) {
 				assetCatalog: request.assetCatalog ?? null
 			}
 		}))) throw new Error("The SwiftPM artifact query does not match the build request.");
-		if (!choice.connection.supports("swiftpm-peer-cache") || manifestDigest(await sourceManifest(choice.identity.repoRoot, true, runCancellationSignal(ambientContext()) ?? ambientContext()?.signal)) !== swiftpm.sourceDigest) return null;
+		if (!queriesPeerCache(choice.connection, "swiftpm-peer-cache") || manifestDigest(await sourceManifest(choice.identity.repoRoot, true, runCancellationSignal(ambientContext()) ?? ambientContext()?.signal)) !== swiftpm.sourceDigest) return null;
 		return matchingArtifact(choice.offer, "swiftpm");
 	}
 	const reactNative = choice.reactNativeArtifact;
 	if (reactNative) {
 		if (typeof fingerprint !== "string" || !isDeepStrictEqual(reactNative, reactNativeBuildQuery(request, fingerprint, choice.identity.project, choice.target.local))) throw new Error("The React Native artifact query does not match the build request.");
-		return choice.connection.supports("react-native-peer-cache") ? matchingArtifact(choice.offer, `react-native-${reactNative.platform}`) : null;
+		return queriesPeerCache(choice.connection, "react-native-peer-cache") ? matchingArtifact(choice.offer, `react-native-${reactNative.platform}`) : null;
 	}
 	const query = choice.gradleArtifact;
 	if (query) {
@@ -998,10 +1206,15 @@ async function resumeJob(credential, job, abandoned, signal, native) {
 	return `no connection to it within ${RESUME_WINDOW_MS / 6e4} min (${last})`;
 }
 /** Mirrors the checkout on the machine: the manifest in pages, then every blob it lacks. */
-async function syncSource(connection, identity, onEnter, native, signal) {
+async function syncSource(connection, identity, onEnter, native, signal, ignored = []) {
 	onEnter("sync");
 	const syncStarted = Date.now();
-	const manifest = native && "declaration" in native ? (await nativeGradleTransfer(join(identity.repoRoot, identity.project), native.declaration, signal)).files : native ? await nativeTransferManifest(identity.repoRoot, native, await sourceManifest(identity.repoRoot, false, signal), signal) : await sourceManifest(identity.repoRoot, false, signal);
+	const ignoredPaths = [];
+	for (const path of ignored) {
+		const inRepo = relative(identity.repoRoot, join(await realpath(dirname(path)), basename(path)));
+		if (inRepo && !isAbsolute(inRepo) && inRepo !== ".." && !inRepo.startsWith(`..${sep}`)) ignoredPaths.push(inRepo.split(sep).join("/"));
+	}
+	const manifest = native && "declaration" in native ? (await nativeGradleTransfer(join(identity.repoRoot, identity.project), native.declaration, signal)).files : native ? await nativeTransferManifest(identity.repoRoot, native, await sourceManifest(identity.repoRoot, false, signal), signal) : await sourceManifest(identity.repoRoot, false, signal, ignoredPaths);
 	if (native && "declaration" in native && manifestDigest(manifest) !== native.digest) return { failure: "The native Gradle source changed before upload." };
 	const bySha = new Map(manifest.map((file) => [file.sha256, file]));
 	const missing = [];
@@ -1132,6 +1345,21 @@ async function fetchArtifact({ connection, method, params, artifact, request, st
 		declared
 	};
 }
+function fingerprintSourcesParam(inputs, connection) {
+	if (!inputs || !connection.supports("fingerprint-sources")) return {};
+	return { fingerprintSources: inputs.sources.map((source) => ({
+		id: source.type === "contents" ? source.id : source.filePath,
+		hash: source.hash
+	})) };
+}
+function fingerprintIgnoredParam(inputs, connection) {
+	if (!inputs?.ignoredPaths?.length || !connection.supports("fingerprint-ignored")) return {};
+	return { fingerprintIgnored: [...inputs.ignoredPaths] };
+}
+function fingerprintTrackedParam(inputs, connection) {
+	if (!inputs?.trackedPaths?.length || !connection.supports("fingerprint-tracked")) return {};
+	return { fingerprintTracked: [...inputs.trackedPaths] };
+}
 function keepCorruptCacheMessage(failed, result) {
 	return result.code === "STIM_COMPILATION_CACHE_CORRUPT" ? {
 		...failed,
@@ -1262,6 +1490,8 @@ async function offloadBuild(input) {
 		let syncMs = 0;
 		let uploadedBytes = 0;
 		let workerStarted = 0;
+		let fingerprintInputs;
+		const readFingerprintInputs = () => fingerprintInputs ??= !native && request.platform !== "macos" && input.fingerprintInputs ? input.fingerprintInputs() : Promise.resolve(null);
 		const moveOn = (why) => {
 			const next = choice.runnersUp.shift();
 			if (!next) return false;
@@ -1293,7 +1523,8 @@ async function offloadBuild(input) {
 				break;
 			}
 			if (choice.cacheOnly) return fail("The exact artifact is no longer available.");
-			const synced = await syncSource(choice.connection, identity, onEnter, nativeTransferInput(native), signal);
+			const inputs = await readFingerprintInputs();
+			const synced = await syncSource(choice.connection, identity, onEnter, nativeTransferInput(native), signal, inputs?.ignored);
 			checkCancelled();
 			if ("failure" in synced) {
 				if (moveOn(synced.failure)) continue;
@@ -1312,6 +1543,9 @@ async function offloadBuild(input) {
 				project: identity.project,
 				platform: request.platform,
 				fingerprint: request.platform === "macos" ? synced.digest : expectedFingerprint,
+				...fingerprintSourcesParam(inputs, choice.connection),
+				...fingerprintIgnoredParam(inputs, choice.connection),
+				...fingerprintTrackedParam(inputs, choice.connection),
 				...native ? { native: {
 					provider: native.provider,
 					sourceDigest: synced.digest,
@@ -1324,18 +1558,19 @@ async function offloadBuild(input) {
 						...choice.connection.supports("native-gradle-artifact-cache") ? { cache: native.cache } : {}
 					}
 				} } : {},
-				...request.platform === "macos" ? macosBuildParameters(request, choice.connection.supports("swiftpm-peer-cache")) : {
+				...request.platform === "macos" ? macosBuildParameters(request, queriesPeerCache(choice.connection, "swiftpm-peer-cache")) : {
 					configuration: request.platform === "ios" ? request.configuration : null,
 					scheme: request.platform === "ios" ? request.scheme : null,
 					iosProjectPath: request.platform === "ios" ? request.iosProjectPath ?? null : null,
 					runtime: request.platform === "ios" ? request.runtime : null,
 					packageName: packageName(join(identity.repoRoot, identity.project)),
 					isExpo: request.isExpo,
-					...!native && request.cacheArtifact === true && choice.connection.supports("react-native-peer-cache") ? { cacheArtifact: true } : {},
+					...!native && request.cacheArtifact === true && queriesPeerCache(choice.connection, "react-native-peer-cache") ? { cacheArtifact: true } : {},
 					optimizations: request.platform === "ios" && isJsonObject(request.optimizations) ? request.optimizations : null,
 					...request.platform === "android" ? { android: request.android } : {}
 				},
-				stimBuild: choice.target.local.stimBuild
+				stimBuild: choice.target.local.stimBuild,
+				...startCompat(choice)
 			});
 			checkCancelled();
 			if ("result" in reply) {
@@ -1574,4 +1809,4 @@ function offloadCheck(projectRoot, targets) {
 	};
 }
 //#endregion
-export { clearCorruptCompilationCache as _, nativeTransferRefusal as a, offloadPlacement as c, simulatorRuntime as d, reactNativeArtifactReceipt as f, COMPILATION_CACHE_CORRUPT as g, setRemoteLogSink as h, closeOffload as i, placementLoad as l, reactNativeBuildQuery as m, buildPlacementCandidates as n, offloadBuild as o, reactNativeArtifactToolchain as p, chooseBuildMachine as r, offloadCheck as s, BuildConnection as t, remotePhaseText as u, maintenanceLogger as v };
+export { COMPILATION_CACHE_CORRUPT as C, setRemoteLogSink as S, maintenanceLogger as T, nativeGradleLocalSourceDigest as _, nativeTransferRefusal as a, validateGradleManifest as b, offloadPlacement as c, simulatorRuntime as d, reactNativeArtifactReceipt as f, gradleStateDirectories as g, gradleOffloadInputs as h, closeOffload as i, placementLoad as l, reactNativeBuildQuery as m, buildPlacementCandidates as n, offloadBuild as o, reactNativeArtifactToolchain as p, chooseBuildMachine as r, offloadCheck as s, BuildConnection as t, remotePhaseText as u, nativeGradleOutputs as v, clearCorruptCompilationCache as w, verifyGradleTransfer as x, nativeGradleTransfer as y };

package/dist/collector-run.mjs

@@ -1,12 +1,12 @@
-import { g as process_identity_exports } from "./exec-DEoAhcze.mjs";
+import { S as process_identity_exports } from "./exec-VFRpu1iA.mjs";
 import { m as workspaceLogsDir } from "./paths-DQtTgsBf.mjs";
-import { V as deviceSlotKey, q as validateDeviceSlot } from "./config-DlrsduwG.mjs";
+import { V as deviceSlotKey, q as validateDeviceSlot } from "./config-BZhXY15H.mjs";
 import { t as createLineReader } from "./process-output-Fpl8PYi8.mjs";
+import { c as watchAppPid, i as parseLogcatLine, o as startAndroidLogcat, s as waitForAppPid, t as androidClockOffset } from "./android-saBeB4lr.mjs";
 import { r as createNdjsonWriter } from "./ndjson-CgE_o3Dl.mjs";
-import { a as startIosDeviceConsole, i as parseDeviceConsoleLine } from "./ios-device-BXZ0c7Kb.mjs";
-import { a as unregisterCollector, i as registerCollector, r as readCollectors, t as collectorProcessTitle } from "./ownership-C5fo5Edb.mjs";
-import { a as waitForAppPid, i as startAndroidLogcat, n as parseLogcatLine, o as watchAppPid, t as androidClockOffset } from "./android-DR5lZ2Az.mjs";
-import { n as parseLogStreamLine, r as startIosLogStream, t as appNameFromBundleId } from "./ios-xtlRHaeB.mjs";
+import { a as startIosDeviceConsole, i as parseDeviceConsoleLine } from "./ios-device-B6HK951C.mjs";
+import { a as unregisterCollector, i as registerCollector, r as readCollectors, t as collectorProcessTitle } from "./ownership-jxxz-19m.mjs";
+import { n as parseLogStreamLine, r as startIosLogStream, t as appNameFromBundleId } from "./ios-ENC4sRPA.mjs";
 import { existsSync } from "node:fs";
 import { isAbsolute, join, resolve } from "node:path";
 import { LOG_ROTATE_BYTES } from "@stim-cli/core";

package/dist/{command-output-YKGWivpG.mjs → command-output-BBvS1H6v.mjs}

@@ -1,8 +1,9 @@
 import { n as stripAnsi } from "./process-output-Fpl8PYi8.mjs";
-import { t as NO_PROJECT_REFUSAL } from "./project-DhCtQWWU.mjs";
+import { t as NO_PROJECT_REFUSAL } from "./project-BiC68mIp.mjs";
 import { quotedPath as quotedPath$1 } from "@stim-cli/core";
 import chalk from "chalk";
 //#region src/diagnostics/launch-error-preview.ts
+const MAX_FRAME_LINE_LENGTH = 2048;
 function framePriority(frame, root) {
 	const normalized = frame.replaceAll("\\", "/");
 	if (/^\s*at (?:android\.|java\.|com\.android\.|dalvik\.)/.test(normalized)) return 2;
@@ -145,7 +146,7 @@ function launchErrorPreview(records, root, { full = false } = {}) {
 		if (header) {
 			flush();
 			kind = /^component/i.test(header[1]) ? "Component" : "Error";
-		} else if (/^\s*at\s+\S/.test(line) || /^\s*\S[^\n]*@\S+:\d+:\d+\s*$/.test(line) || /^\s+\S[^\n]*\([^()]+:\d+:\d+\)\s*$/.test(line)) {
+		} else if (line.length <= MAX_FRAME_LINE_LENGTH && (/^\s*at\s+\S/.test(line) || /^\s*\S[^\n]*@\S+:\d+:\d+\s*$/.test(line) || /^\s+\S[^\n]*\([^()]+:\d+:\d+\)\s*$/.test(line))) {
 			if (!full && /\(https?:\/\/[^\s)]*$/.test(line)) return;
 			frames.push(line);
 		} else if (line.trim()) {

package/dist/{config-DlrsduwG.mjs → config-BZhXY15H.mjs}

@@ -1,5 +1,5 @@
-import { _ as reportSignal, g as process_identity_exports, r as WorkspaceProcessCleanupError, t as getExecutor, x as ownership_claim_exports, y as trackReportResource } from "./exec-DEoAhcze.mjs";
-import { t as runOperationFile } from "./operation-exec-BW0em61G.mjs";
+import { C as reportSignal, D as ownership_claim_exports, S as process_identity_exports, T as trackReportResource, l as WorkspaceProcessCleanupError, t as getExecutor } from "./exec-VFRpu1iA.mjs";
+import { t as runOperationFile } from "./operation-exec-CUZifp6Z.mjs";
 import { join } from "node:path";
 import { ambientEnv, configDir, ensurePrivateDir } from "@stim-cli/core";
 import { allMetroPorts, cannotHost, clientIdentity, configCorruptRepair, endpoint, findEnclosingWorktreeRoot, findPeer as findPeer$1, getConcurrencyLimits, getConfigPath, getConfigPath as getConfigPath$1, getProject, getProjectSettings, getRepoSettings, isJsonObject, isPathPrefix, loadConfig, loadConfig as loadConfig$1, machineEndpoint, parseMachine, parseMachine as parseMachine$1, validateAutomaticPool, withConfigLock, withConfigLock as withConfigLock$1, withConfigLockAsync, withConfigLockAsync as withConfigLockAsync$1 } from "@stim-cli/core/state";
@@ -783,7 +783,7 @@ function releaseAndroidConsolePort(projectPath, consolePort, slot = "default") {
 	});
 }
 function recordIosSchemeApprovals(projectPath, deviceUdid, schemeApprovals, slot = "default") {
-	withConfigLock(() => {
+	return withConfigLockAsync(() => {
 		const cfg = loadConfig();
 		const ios = deviceSlotPlatforms(cfg?.projects?.[projectPath], slot)?.ios;
 		if (!cfg || !ios?.owned || ios.deviceUdid !== deviceUdid) return;

package/dist/{created-devices-x9rN6bhs.mjs → created-devices-D2Aca-xu.mjs}

@@ -1,5 +1,5 @@
 import { v as withDirLock$1, y as withDirLockAsync$1 } from "./paths-DQtTgsBf.mjs";
-import { d as getConfigDir } from "./config-DlrsduwG.mjs";
+import { d as getConfigDir } from "./config-BZhXY15H.mjs";
 import { renameSync, rmSync, writeFileSync } from "node:fs";
 import { ensurePrivateDir } from "@stim-cli/core";
 import { createdDevicesFile, createdDevicesLock, readCreatedDevices, readCreatedDevices as readCreatedDevices$1 } from "@stim-cli/core/state";
@@ -34,6 +34,10 @@ function recordCreatedDevice(platform, id) {
 function forgetCreatedDevice(platform, id) {
 	update(platform, (entries) => entries.delete(id));
 }
+/** Waits asynchronously for the ledger lock, then records the device. */
+function recordCreatedDeviceAsync(platform, id) {
+	return withDirLockAsync$1(createdDevicesLock(), () => recordCreatedDevice(platform, id), { ensureParent: () => ensurePrivateDir(getConfigDir()) });
+}
 /** Waits asynchronously for the ledger lock, then atomically forgets the device. The synchronous transaction decides whether to commit the removal; cancellation stops admission. */
 function forgetCreatedDeviceAsync(platform, id, signal, transaction = (forget) => {
 	forget();
@@ -45,4 +49,4 @@ function forgetCreatedDeviceAsync(platform, id, signal, transaction = (forget) =
 	});
 }
 //#endregion
-export { recordCreatedDevice as i, forgetCreatedDeviceAsync as n, readCreatedDevices$1 as r, forgetCreatedDevice as t };
+export { recordCreatedDeviceAsync as a, recordCreatedDevice as i, forgetCreatedDeviceAsync as n, readCreatedDevices$1 as r, forgetCreatedDevice as t };

package/dist/{dependency-state-1I9KZT1Y.mjs → dependency-state-BwNCYG5Q.mjs}

@@ -1,5 +1,5 @@
-import { t as getExecutor } from "./exec-DEoAhcze.mjs";
-import { Mt as repoRoot } from "./settings-C7O8A6ZI.mjs";
+import { t as getExecutor } from "./exec-VFRpu1iA.mjs";
+import { Nt as repoRoot } from "./settings-B5tCoq9N.mjs";
 import { existsSync } from "node:fs";
 import { dirname, join, relative } from "node:path";
 //#region src/dependency-state.ts

package/dist/{detached-entry-BwNEtIrP.mjs → detached-entry-KmieOKgN.mjs}

@@ -1,4 +1,4 @@
-import { t as getExecutor } from "./exec-DEoAhcze.mjs";
+import { t as getExecutor } from "./exec-VFRpu1iA.mjs";
 import { openSync } from "node:fs";
 //#region src/detached-entry.ts
 const LOG_FILE_FLAG = "--log-file";

package/dist/{dev-client-BFxiDpkf.mjs → dev-client-CHoXXZeg.mjs}

@@ -1,5 +1,5 @@
-import { C as resolvePackageJson, b as isPackageResolvable } from "./project-DhCtQWWU.mjs";
-import { An as readBundleSchemes, kn as pickDevClientScheme } from "./budget-3ivAK99e.mjs";
+import { C as resolvePackageJson, b as isPackageResolvable } from "./project-BiC68mIp.mjs";
+import { Mn as pickDevClientScheme, Nn as readBundleSchemes } from "./budget-HyShrIpL.mjs";
 import { dirname, join } from "node:path";
 import { isJsonObject, readJsonObject } from "@stim-cli/core/state";
 //#region src/commands/dev-client.ts
@@ -40,4 +40,4 @@ function installedDevLauncherVersion(root) {
 	return typeof version === "string" ? version : null;
 }
 //#endregion
-export { devClientTakesDevMenuParams as n, devClientScheme as t };
+export { devClientTakesDevMenuParams as n, hasDevClient as r, devClientScheme as t };