stim 1.34.0 → 1.36.0

package/dist/{guide-BFW-cB7R.mjs → guide-CuvHRP53.mjs}

@@ -1,8 +1,8 @@
-import { t as ANDROID_AVD_CONFIG_HELP } from "./settings-B5IBDfTx.mjs";
-import { i as findProjectRoot$1 } from "./project-DU3jjnBE.mjs";
-import { h as RECENT_LAUNCH_MS } from "./eas-session-ledger-CXwagcQ7.mjs";
-import { o as guideStatus, t as WATCHMAN_NESTED_WORKTREES } from "./doctor-watchman-r7M9UPi0.mjs";
-import "./status-watch-D63R5nSI.mjs";
+import { t as ANDROID_AVD_CONFIG_HELP } from "./settings-Bap-qjnp.mjs";
+import { i as findProjectRoot$1 } from "./project-Clk1JAWL.mjs";
+import { h as RECENT_LAUNCH_MS } from "./eas-session-ledger-CXZ4aix0.mjs";
+import { o as guideStatus, t as WATCHMAN_NESTED_WORKTREES } from "./doctor-watchman-TZxYt_98.mjs";
+import "./status-watch--rfZynD_.mjs";
 import { SETTINGS, SETTINGS_SCHEMA_URL, TUTORIAL_VERSION } from "@stim-cli/core/state";
 import chalk from "chalk";
 //#region src/guide/agent.ts
@@ -148,7 +148,7 @@ server.* or hosting.* for the user, or approve requests. Read stim guide setting
 Desktop access tickets and person-owned approval.
 Read stim guide settings to select a remote machine. Keep a requested named
 placement when recovering STIM_OFFLOAD_REFUSED: report its reason and remedy.
-When the user mentions slow builds, a busy machine or wanting updates away from the desk, tell them about Stim Desktop > Settings > Remote Machines > Add or Phones > Pair a Phone; see stim guide settings.
+When the user mentions slow builds, a busy machine or wanting updates away from the desk, tell them about Stim Desktop > Settings > Remote Machines > Add (or stim remote add <machine> in their terminal) or Phones > Pair a Phone; see stim guide settings.
 
 Read stim guide lifecycle concurrency when a build waits on another workspace
 or a build call times out. A native build can outlive a shell timeout; if the
@@ -612,7 +612,12 @@ it never starts an EAS build. iOS simulatorApp selects the simulator viewer.
 remote selects the launch host using the CLI's existing placement and approval
 rules; remoteBuild independently selects where compilation runs. macOS requires
 a named hosting Mac; auto, eas and proxy are not supported there.
-All methods accept signal. run builds, installs and launches.
+All methods accept signal. run builds, installs and launches. iOS and Android run
+also accept recordedBuild: true, which installs and launches the app the last
+build with the same scheme and configuration (or variant) recorded in this
+workspace, without fingerprinting, building or replacing its JS, and refuses with
+STIM_NO_RECORDED_BUILD when there is none. @stim-cli/ci uses it; the CLI and the
+private Desktop transport do not.
 Web requires a running server, just like stim web.
 
 build produces an artifact without acquiring a device, starting a runtime, or
@@ -627,18 +632,20 @@ including when Desktop is not installed on the build machine. Opening it only
 navigates; it does not install or launch the built app.
 
 Build options:
-  ios:     scheme, configuration, arch (arm64, x86_64, all), buildCache, remoteBuild
-  android: variant, abi (arm64-v8a, armeabi-v7a, x86, x86_64, all), buildCache, remoteBuild
+  ios:     scheme, configuration, arch (arm64, x86_64, all), buildCache, remoteBuild, easProfile
+  android: variant, abi (arm64-v8a, armeabi-v7a, x86, x86_64, all), buildCache, remoteBuild, easProfile
   macos:   remoteBuild
 An iOS build targets the simulator. A Debug build defaults to the host
 architecture (Android only while optimizations.android.targetAbiOnly is on, the
 default); Release defaults to all. macOS builds the configured Debug SwiftPM app.
 Build results retain an owned appPath (iOS), apkPath (Android) or bundle (macOS)
-inside this workspace until worktree removal. Later builds keep earlier copies.
+inside this workspace until worktree removal. Later builds keep earlier copies. An iOS or
+Android build also records its app in workspace state for recordedBuild runs; the
+last build per scheme and configuration or variant wins. easProfile downloads a
+completed EAS development build instead of compiling; it never starts an EAS build.
 A build leaves a running app's last build record and build log untouched; it
 writes its own build-artifact-<platform>.ndjson. No distribution archive or web build
-pipeline is inferred. Use @stim-cli/ci's buildCI to export a portable artifact and
-diagnostics for your CI provider.
+pipeline is inferred. Use @stim-cli/ci's buildCI to record the build and, with exportPath, export a portable artifact for your CI provider.
 
 Unresolved native Metro cleanup keeps error.details.cause.retainedClaimRoots and
 STIM_CLAIM_UNAVAILABLE even after cancellation. Web cancellation stops pending
@@ -1270,7 +1277,7 @@ leased until <time>" for each one.`,
                   local: machine that approved this one but whose key no
                   person confirmed, so nothing pinned it; fingerprint is the
                   key's fingerprint to compare with the one stim-server setup
-                  printed there, and only stim doctor --fix in a terminal asks.
+                  printed there, and only stim remote add or doctor --fix in a terminal asks.
                   A local: entry has no dnsName. "outdated" means its
                   stim-server speaks protocol 1; the finding names the
                   stim-server service update command to run there.
@@ -1285,7 +1292,7 @@ leased until <time>" for each one.`,
                   fits the pin; match is "exact", or "major" for the newest
                   install of the pinned major not older than the pin), else null
   remoteMachines  one { machine, state, diagnosis?, dnsName?, fingerprint?, deviceId?,
-                  requestedAt?, expiresAt?, offloadable?, reasons?, problems?, capacity?, host? } per
+                  requestedAt?, tailnet?, expiresAt?, offloadable?, reasons?, problems?, capacity?, host? } per
                   remote.machines entry, for its build approval; state is "approved", "pending", "not-asked",
                   "revoked" (revoked or denied), "lapsed" (the request lapsed
                   before approval), "key-changed", "key-unconfirmed" (as in
@@ -1297,6 +1304,10 @@ leased until <time>" for each one.`,
                   (deviceHosts carries it too); the codes are
                   tailscale-stopped, tailscale-logged-out, tailscale-unavailable
                   (this machine's Tailscale), peer-not-found, peer-ambiguous,
+                  peer-wrong-tailnet (no peer is named so, and this Mac is
+                  signed in to another tailnet than the one it was on when it
+                  asked the machine for access; both are named; tailnet is
+                  { name, suffix?, id? }),
                   peer-offline (with last seen), peer-no-answer (the connection
                   got no reply and tailscale ping fails), route-missing (nothing accepts
                   connections on the serve port), route-tls, route-http-error
@@ -3842,6 +3853,11 @@ WHAT WRITES WHAT
                        the run that pointed you at it. A build from the API's
                        build() writes build-artifact-<platform>.ndjson
                        instead, so it never replaces a run's transcript.
+                       A failed build also leaves a copy of its transcript next
+                       to the log, named <log>.failed (build-ios.ndjson.failed);
+                       the failure's log line points at it, and the next
+                       failed build of that log replaces it. \`logs\` does not
+                       read it.
 
   Only a dev server Stim hosted is captured. If you started the bundler
   yourself, the metro and client sources stay empty -- which is not a sign of a
@@ -3904,7 +3920,7 @@ Branch on the code, never on the message.`,
   on the host to enable handoff and native logs (hello features hosted-ios-data
   for iOS and hosted-android-data for Android).
   A name outside remote.machines is STIM_BAD_ARG. Missing or pending hosting
-  approval keeps the doctor --fix and stim-server setup remedies.`
+  approval keeps the stim remote add and stim-server setup remedies.`
 		},
 		STIM_EAS_BUILD_MISSING: {
 			summary: "no completed EAS development build matches; build only with session authorization",
@@ -4021,7 +4037,11 @@ Branch on the code, never on the message.`,
 			summary: "xcodebuild or gradle failed; the Android missing-SDK and APK refusals",
 			body: () => `STIM_BUILD_FAILED
   xcodebuild or gradle failed. The EXTRACTED diagnostics are printed (capped),
-  not the transcript. Read the log path on the next line for the rest.
+  not the transcript. Read the log path on the next line for the rest: it names
+  a copy of the failed transcript (<log>.failed) that the next build in the
+  workspace does not overwrite. When xcodebuild names failed script phases,
+  the first diagnostics are the phase names and the last error lines the
+  script printed, ahead of the compiler diagnostics.
   Three Android refusals share this code without gradle itself failing:
   - NO ANDROID SDK, before gradle starts: nothing exists at the SDK path
     Stim resolves (ANDROID_HOME, else ANDROID_SDK_ROOT, else the default
@@ -4282,9 +4302,9 @@ fingerprint reads, such as .env.local. Make the named input agree on both Macs,
 for example by committing the lockfile pod install rewrote there; pairing does
 not change it.
 
-Run stim doctor --fix to ask for build access if not paired. Check
-stim settings get remote.machines. A person on the worker approves this machine
-by running the stim-server setup command doctor --fix printed, with its ticket
+Run stim remote add <machine> to ask for build access if not approved. Check
+stim remote list. A person on the worker approves this machine
+by running the stim-server setup command stim remote add printed, with its ticket
 and expiry (guide settings). Agents never run setup or approve requests.
 Rerun with --remote-build auto or remote for placement with local fallback, or
 --remote-build local to keep the build here.
@@ -5166,6 +5186,16 @@ captured"  (in metro.ndjson, bare RN)
   Stim's processes. For a legacy record, stop the server with the tool that
   started it before retrying. Never reconstruct ownership from a process
   name, port, or wall-clock timestamp.`
+		},
+		STIM_NO_RECORDED_BUILD: {
+			summary: "a recordedBuild run found no recorded build for its selectors",
+			body: () => `STIM_NO_RECORDED_BUILD
+  The API run option \`recordedBuild: true\` (used by \`stim-ci run\`) installs the
+  app the last build with the same iOS scheme and configuration, or Android
+  variant, recorded in this workspace's state. None is recorded, or its app was
+  removed. Nothing was started. Build first with the same selectors and the same
+  Stim home (\`stim-ci build\`, or the API build), then run again. \`stim guide ci\`
+  has the flow. \`stim ios\` and \`stim android\` never use it.`
 		},
 		STIM_BAD_ARG: {
 			summary: "an argument, setting, directory, flavor, or device name refused before anything starts",
@@ -6177,23 +6207,37 @@ prerequisites. \`reload\` refuses because the app has no Metro runtime. Re-run
 \`stim android\` after an edit and use \`stim stop\` for scoped cleanup.`
 		},
 		ci: {
-			summary: "Run an app and tests through @stim-cli/ci with diagnostics and scoped cleanup",
+			summary: "Build an app once, then install it and run tests through @stim-cli/ci with scoped cleanup",
 			body: () => `CONTINUOUS INTEGRATION
 
 Install app dependencies and platform tools first. Use a dedicated checkout:
 cleanup stops that workspace, including resources created before a build fails.
 
+  npx --yes --package @stim-cli/ci stim-ci build --platform ios --project ./app
   npx --yes --package @stim-cli/ci stim-ci run --platform ios --project ./app --timeout 1800 -- pnpm test:e2e
 
 Or install npm install --global @stim-cli/ci and use stim-ci directly.
 Platforms: ios, android, macos, web. Everything after -- is argv, not a shell.
---artifacts selects the result directory (a fresh temporary directory by default).
+build is the only step that compiles (or restores from the cache, or with
+--eas-profile downloads an EAS development build). It records the app for this
+checkout, platform and selectors (iOS scheme and configuration, Android variant)
+in workspace state under the Stim home; the last build for those selectors wins.
+run never builds, fingerprints or replaces JS: it installs and launches that
+recorded app as built and trusts it, then runs the test. A Debug app still gets
+Metro from run. With no recorded build for the selectors, run refuses with
+STIM_NO_RECORDED_BUILD and names the stim-ci build command. Build and run must
+share the Stim home (--home or STIM_HOME). macOS and web run unchanged: macOS
+run builds the app itself.
+build exports nothing unless --export <path> is given (an APK, or a tar.gz).
+--artifacts selects a directory for result, test and diagnostic files; without
+it none are written, no logs are copied and the action uploads nothing.
 An explicit artifacts directory must be empty; use a new directory per run.
 Stdout is one JSON result; progress and test output go to stderr.
 
 Tests receive STIM_CI_PLATFORM, STIM_CI_DEVICE_ID, STIM_CI_APP_ID,
-STIM_CI_METRO_PORT, STIM_CI_ARTIFACTS_DIR and STIM_CI_RUN_RESULT. The last is
-run.json with the exact public API result. Use that target and check app
+STIM_CI_METRO_PORT, STIM_CI_ARTIFACTS_DIR and STIM_CI_RUN_RESULT. The last two
+are empty without --artifacts; otherwise STIM_CI_RUN_RESULT is run.json with the
+exact public API result, whose facts carry the stable cache appPath. Use that target and check app
 readiness; launched can still be bundling or unverified.
 
 result.json preserves the test exit code even if diagnostics or cleanup fail.
@@ -6213,7 +6257,7 @@ CI=true alone does not change defaults, ownership or coordination. Persist only
 cache artifacts, not state, claims or device ledgers. Independent homes must
 not share a writable filesystem cache because its claims live in the home.
 
-The programmatic runner is import { runCI } from '@stim-cli/ci'. See its package
+The programmatic API is import { buildCI, runCI } from '@stim-cli/ci'. See its package
 README for result types, cancellation, cache policy, and coordination findings.`
 		},
 		"hosted-android": {
@@ -6222,9 +6266,8 @@ README for result types, cancellation, cache policy, and coordination findings.`
 
 If Stim is not installed globally, replace stim with npx stim.
 
-  stim settings set remote.machines '["janics-mac-mini"]'
-  stim doctor --fix
-  stim doctor
+  stim remote add janics-mac-mini
+  stim remote list
   stim android --remote janics-mac-mini --device-profile pixel_7
   stim status --json
   stim reload android
@@ -6384,10 +6427,9 @@ and show records already copied here.`
 
 If Stim is not installed globally, replace stim with npx stim.
 
-  stim settings set remote.machines '["janics-mac-mini"]'
-  stim doctor --fix
-  # A person there runs the stim-server setup command doctor printed.
-  stim doctor
+  stim remote add janics-mac-mini
+  # A person there runs the stim-server setup command it printed.
+  stim remote list
   stim ios --remote janics-mac-mini --device-type "iPhone 17 Pro" --runtime "iOS 27.0"
   stim status --json
   stim reload ios
@@ -6471,7 +6513,7 @@ refuses. The host boots headless and ignores this Mac's iosSimulatorApp setting.
 --slot, --device-type and --runtime select the hosted simulator; --scheme,
 --configuration and --eas-profile select the app as usual. The build targets
 the offered simulator architecture, not this machine's. --remote-build remains
-independent and selects a compatible build worker for a Debug cache miss.
+independent and selects a compatible build worker for a cache miss.
 
 The host's own owned devices count toward concurrency.maxDevices and its per-platform cap
 (concurrency.maxIosDevices, concurrency.maxAndroidDevices; hosted macOS apps use concurrency.maxMacosApps).
@@ -8757,7 +8799,12 @@ THE POOL: WHICH DEVICE AN ID-LESS \`--device\` PICKS
   its own hermesc when Hermes is enabled) into a copy of the artifact,
   refreshes an expo-updates manifest as described above, re-signs it and
   installs that; any swap failure falls back to a full build
-  rather than ever installing stale JS. Device logs are still collected, so
+  rather than ever installing stale JS. A simulator Release build can run on
+  a remote machine (stim guide settings, remote.build), which bundles the JS
+  of the checkout it synced, its gitignored .env.production files included,
+  in the remote machine's environment: an EXPO_PUBLIC_ variable set only in
+  this shell is not applied there. A machine without Xcode cannot swap, so a
+  cached Release app is built again on the remote machine instead. Device logs are still collected, so
   \`logs --errors\` answers "does it repro in release/Hermes bytecode".
   A run with no \`--device\` installs on the simulator only. \`ios --device\`
   builds the \`iphoneos\` slice for a cabled iPhone and keys its cache
@@ -10050,6 +10097,8 @@ THE ONE CASE GC WILL NOT REAP
   global, so \`worktree remove\` reclaims them along with everything else in
   the global workspace directory. Each build starts its transcript file over, so the log
   holds one run and a workspace you keep building in does not accumulate them.
+  A failed build also leaves a copy of its transcript (<log>.failed) that the
+  next failed build replaces; \`gc\` does not trim it, \`worktree remove\` does.
 
   Simulators are large and live in the CoreSimulator device set, not in your
   project. If the disk is filling up, Stim's own devices are usually not the
@@ -10993,11 +11042,12 @@ A remote machine approves this one when a person there runs
 \`stim-server setup\` with this machine's setup ticket (32 random bytes, 43
 base64url characters) in STIM_SETUP_TICKET. Stim Desktop's Add wizard makes the
 ticket and sets STIM_ACCESS_TICKET for one \`doctor --fix\` run; without it,
-\`doctor --fix\` makes one and prints the setup command to run on the worker.
+\`stim remote add <machine>\` or \`doctor --fix\` makes one and prints the setup
+command to run on the worker.
 Agents never set STIM_ACCESS_TICKET, never run \`stim-server setup\`, never edit
 \`remote.*\`, \`server.*\` or \`hosting.*\` for the user, and never approve requests.
 Until setup approves, the worker answers unknown-secret and the entry stays
-pending; every doctor run tries again. The first connection after approval pins
+pending; every \`stim remote list\` or doctor run tries again. The first connection after approval pins
 the worker's stim-server key in build-machines.json or device-host-machines.json,
 and every later connection must prove that key; the tailnet node and address
 never decide who the worker is. With --fix, a pending entry is replaced when
@@ -11013,8 +11063,8 @@ agents do not run them. \`stim guide facts doctor\` lists the codes.
 REMOTE MACHINES AND PHONE APP
 When the user mentions slow builds, a busy machine, a full disk or device limit, or
 wanting updates away from the desk, tell them about Stim Desktop > Settings >
-Remote Machines > Add (another machine on the tailnet that builds for this one,
-or a Mac that also hosts simulators) or Phones > Pair a Phone (the Stim phone
+Remote Machines > Add, or \`stim remote add <machine>\` in their terminal (another
+machine on the tailnet that builds for this one, or a Mac that also hosts simulators) or Phones > Pair a Phone (the Stim phone
 app). Stim Desktop also suggests these itself, at most once a day and never
 during a build. Agents only tell the user: they never run \`stim-server setup\`,
 never edit \`remote.*\`, \`server.*\` or \`hosting.*\` for the user, and never
@@ -11023,10 +11073,20 @@ approve requests.
 REMOTE MACHINES ARE MACHINE-LEVEL
 \`remote.machines\` names the remote machines this machine may build on and host owned
 simulator sessions on, by MagicDNS name with an optional serve port (default
-7443). Name each node and port once:
+7443). Name each node and port once. From any directory:
+
+  stim remote add janics-mac-mini
+  stim remote list
+  stim remote remove janics-mac-mini
 
-  stim settings set remote.machines '["janics-mac-mini"]'
-  stim doctor --fix
+\`stim remote add\` appends the machine to the machine-scope list, keeping the
+entries already there, asks it for build and device-host approval and prints
+the setup command for it. \`stim remote list\` contacts every listed machine
+and reports both approvals; it asks nothing new. \`stim remote remove\` drops the
+entry and forgets this machine's credentials for it; the remote machine keeps
+its approval until a person there runs the \`stim-server devices revoke\`
+command it prints. Each takes --json. \`stim settings set remote.machines\`
+replaces the whole list.
 
 The order of \`remote.machines\` is the priority order for every workload: the
 build, simulator, emulator and macOS app each go to the first listed machine that
@@ -11054,16 +11114,15 @@ addresses are refused, and the running server applies a change within seconds.
 An interface name follows the interface onto whatever private network it
 joins, so name the address on a machine that moves between networks, and an
 interface only on a worker that stays put. Then the person runs the setup
-command \`stim doctor --fix\` prints here:
+command \`stim remote add\` prints here:
 
   stim settings set server.lanAddresses '["10.0.0.92"]'     # on the worker
-  stim settings set remote.machines '["local:10.0.0.92"]'   # on this machine
-  stim doctor --fix
+  stim remote add local:10.0.0.92                           # on this machine
 
 Every connection runs Stim's Noise handshake, so plain WebSocket carries it
 without TLS, and the address never identifies anyone. Nothing on a local network
 vouches for the worker's key, so \`stim-server setup\` prints the worker's server
-key fingerprint and \`stim doctor --fix\`, run by a person in a terminal, shows
+key fingerprint and \`stim remote list\`, run by a person in a terminal, shows
 the fingerprint the worker answered with and pins the key only after they
 confirm it matches. Until then the entry reports key-unconfirmed and is not
 used. Agents never answer that question. The printed setup command carries the
@@ -11130,8 +11189,8 @@ machine idle: wait for existing work to finish or stop the relevant sessions bef
 benchmarking. Agents change these settings only when the user asks them to.
 
 DEVICE HOSTING
-Only \`doctor --fix\` asks for device-host access: it makes a setup ticket and
-prints the command. A person approves by running \`stim-server setup\` on the
+Only \`stim remote add\` and \`doctor --fix\` ask for device-host access: they
+make a setup ticket and print the command. A person approves by running \`stim-server setup\` on the
 worker with that ticket: one ticket, one expiry, one record per capability for
 the key that holds the ticket, with a per-grant Y/n question (Enter approves) in a
 terminal or \`--yes\` otherwise. Agents never run \`stim-server setup\` or
@@ -11161,9 +11220,11 @@ Stim sends tokens only to the pinned node's own tailnet address,
 with its MagicDNS name for TLS and Host routing. A changed node refuses
 access, and uncertain replies or unreadable credentials preserve the pin.
 An invalid remote.machines setting reports an error and preserves every saved credential.
-\`doctor --fix\` forgets entries removed from remote.machines; remove a
-replaced machine, run it, then re-add the name to request a new approval.
-A definite revoked or lapsed request can be requested again with --fix.
+\`stim remote remove\` forgets the credentials of the machine it removes, and
+\`doctor --fix\` forgets those of entries removed from remote.machines otherwise.
+For a replaced machine, run \`stim remote remove <machine>\`, then
+\`stim remote add <machine>\` to request a new approval. A definite revoked or
+lapsed request can be requested again with \`stim remote add\` or --fix.
 An in-progress approval inspection reports busy rather than replacing its
 pending token. \`stim macos --remote <placement>\` or \`macos.remote\` runs a macOS
 app on an approved remote Mac (stim guide macos), and \`ios.remote\` and
@@ -11192,10 +11253,11 @@ The same \`remote.machines\` list names the machines that may build for this one
     "remote": { "machines": ["janics-mac-mini"] }
   }
 
-\`doctor --fix\`, run in any app directory, makes a setup ticket for each named
-machine and prints the \`stim-server setup\` command a person runs on that
-machine to approve this one, under the approval rule above. The next doctor run
-pins the worker's stim-server key in $STIM_HOME/build-machines.json. A build grant is full access
+\`stim remote add <machine>\`, run in any directory, makes a setup ticket for
+that machine and prints the \`stim-server setup\` command a person runs on that
+machine to approve this one, under the approval rule above; \`doctor --fix\`,
+run in an app directory, does the same for every named machine. The next
+\`stim remote list\` or doctor run pins the worker's stim-server key in $STIM_HOME/build-machines.json. A build grant is full access
 to the account stim-server runs as: project code runs there unsandboxed, so it
 can grant itself read and control. Revoking it does not undo what that code
 already did. Grant it only to machines you trust.
@@ -11254,12 +11316,15 @@ that has it (--scope limits it to one).
 
 A name never prompts for pairing, tries another remote machine or falls back here.
 remote-only refuses instead of building here for a build that cannot leave this
-machine (device, Release, an unknown simulator runtime, the build cache off), and
-when no pairing or approval exists.
+machine (device, Android release, an unknown simulator runtime, the build cache
+off), and when no pairing or approval exists.
 Any refusal or failure is STIM_OFFLOAD_REFUSED with the remote machine and reason.
-Device, Release/non-Debug, --remote, Android CAS compiler builds, builds with
-the build cache off, and an unknown simulator runtime cannot build there and
-refuse on a cache miss. Invalid values, unlisted names and unpaired names refuse
+Device, Android release variant, --remote, Android CAS compiler builds, builds
+with the build cache off, and an unknown simulator runtime cannot build there
+and refuse on a cache miss, with a remedy to rerun with --remote-build local or
+auto. An iOS simulator Release or other non-Debug build can: the remote machine
+bundles the JS of the synced checkout into the app.
+Invalid values, unlisted names and unpaired names refuse
 at setup before consulting the cache; they create no build record or failed-run
 stats. A listed paired name with a cache hit compiles nothing, contacts no worker
 and records buildMachine with builtOn absent. Build failures retain the selected
@@ -11272,8 +11337,8 @@ files the native fingerprint hashes or the Expo config reads, such as .env.local
 and other Expo .env files, secrets included. Nothing under node_modules and no
 build output the fingerprint ignores is sent. A fingerprint-mismatch refusal
 names the sources that differ and the files pod install or prebuild rewrote there.
-Run stim doctor --fix to ask for build access if not paired. A person on the
-worker approves it by running the stim-server setup command doctor printed, with
+Run stim remote add <machine> to ask for build access if not approved. A person
+on the worker approves it by running the stim-server setup command it printed, with
 its ticket and expiry. Check stim settings get remote.machines,
 or rerun with --remote-build auto or --remote-build local. Ctrl-C cancels
 the remote build without a local xcodebuild, Gradle or SwiftPM compile.
@@ -11334,10 +11399,10 @@ machine counts as saturated: each machine applies its own value, and a remote
 machine past it is skipped like a full one. \`stim status\` shows this machine's
 load per core against it, as \`capacity.load\` in JSON.
 
-Device, Release and
+Device builds, Android release variants,
 \`--remote eas|proxy\` builds, Android builds with the Apple Clang CAS compiler cache,
 and iOS/Android runs with the build cache off, always build here. Hosted iOS
-Debug builds can use a separate --remote-build, targeting the hosting Mac's
+builds can use a separate --remote-build, targeting the hosting Mac's
 architecture and runtime.
 macOS uses matching Xcode and macOS SDK (not when --remote-build and --remote name the
 same Mac; see stim guide macos), with a per-client SwiftPM dependency
@@ -12342,9 +12407,9 @@ ON ANOTHER MAC
 
 stim macos --remote <machine> or macos.remote builds the Debug app on this Mac and runs it on an
 approved remote Mac over the tailnet, without SSH. The Mac must be listed
-in remote.machines and approved: stim doctor --fix makes a setup ticket, a
-person on that Mac runs stim-server setup with that ticket and expiry (guide
-settings), and stim doctor then pins that Mac's stim-server key. Stim goes ahead
+in remote.machines and approved: stim remote add <machine> adds it and makes a
+setup ticket, a person on that Mac runs stim-server setup with that ticket and
+expiry (guide settings), and stim remote list then pins that Mac's stim-server key. Stim goes ahead
 only with the stim-server that proves it holds that key.
 A refusal or an unreachable host fails the command; with a named Mac it never launches here
 instead.

package/dist/{hosted-android-B7yfqXEy.mjs → hosted-android-D__HGVIO.mjs}

@@ -1,7 +1,7 @@
 import { d as throwIfCancelled } from "./exec-CGuDzt40.mjs";
-import { l as call, u as connectHost } from "./hosted-client-CQuzZwAu.mjs";
-import { a as requestHostedMetro } from "./metro-request-2LmFpC1z.mjs";
-import { a as stopHostedNative, i as prepareHostedNative, r as placeHostedNative } from "./hosted-native-B7OFt5gB.mjs";
+import { l as call, u as connectHost } from "./hosted-client-DMOOu8vD.mjs";
+import { a as requestHostedMetro } from "./metro-request-O8Q-JvBg.mjs";
+import { a as stopHostedNative, i as prepareHostedNative, r as placeHostedNative } from "./hosted-native-BiiUG_Q6.mjs";
 //#region src/device-host/hosted-android.ts
 async function prepareHostedAndroid(machine, selectors, recorded, mode) {
 	return await prepareHostedNative(machine, selectors, recorded, "android", false, mode);

package/dist/{hosted-client-CQuzZwAu.mjs → hosted-client-DMOOu8vD.mjs}

@@ -1,7 +1,7 @@
 import { d as throwIfCancelled, l as cancellableSleep } from "./exec-CGuDzt40.mjs";
-import { K as resolveEndpoint, P as diagnoseConnectFailure } from "./config-BW0fAtoK.mjs";
-import { t as BuildConnection } from "./client-kU37gURU.mjs";
-import { g as configuredMachines } from "./selection-CH-MUVGD.mjs";
+import { F as diagnoseConnectFailure, q as resolveEndpoint } from "./config-BA3TgoIP.mjs";
+import { t as BuildConnection } from "./client-KSWIeQLA.mjs";
+import { nt as configuredMachines } from "./support-BJbXovoO.mjs";
 import { createHash } from "node:crypto";
 import { lstatSync, readFileSync, readdirSync, readlinkSync } from "node:fs";
 import { join } from "node:path";
@@ -28,7 +28,7 @@ function credentialRefusal(message, remedy = "Run stim doctor.") {
 function hostingCredential(machine) {
 	const configured = configuredMachines();
 	if (configured === null) throw credentialRefusal("remote.machines is invalid. Run stim guide settings and correct it.", "Run stim guide settings and correct remote.machines.");
-	if (!configured.includes(machine)) throw Object.assign(/* @__PURE__ */ new Error(`${machine} is not in remote.machines. Add it with stim settings set remote.machines, then run stim doctor --fix to ask it for hosting access.`), { code: "STIM_BAD_ARG" });
+	if (!configured.includes(machine)) throw Object.assign(/* @__PURE__ */ new Error(`${machine} is not in remote.machines. Run stim remote add ${machine} to add it and ask it for hosting access.`), { code: "STIM_BAD_ARG" });
 	let credentials;
 	try {
 		credentials = readDeviceHostMachines();
@@ -36,9 +36,9 @@ function hostingCredential(machine) {
 		throw credentialRefusal("The hosting credentials are unreadable. Run stim doctor.");
 	}
 	const credential = credentials.find((each) => each.machine === machine);
-	if (!credential) throw credentialRefusal(`This machine has not asked ${machine} for hosting access. Run stim doctor --fix.`, "Run stim doctor --fix.");
+	if (!credential) throw credentialRefusal(`This machine has not asked ${machine} for hosting access. Run stim remote add ${machine}.`, `Run stim remote add ${machine}.`);
 	if (credential.state !== "approved") {
-		const remedy = `A person on ${machine} runs the stim-server setup command stim doctor --fix printed; then run stim doctor.`;
+		const remedy = `A person on ${machine} runs the stim-server setup command stim remote add ${machine} printed; then run stim remote list.`;
 		throw credentialRefusal(`${machine} has not confirmed hosting access for this machine. ${remedy}`, remedy);
 	}
 	return credential;

package/dist/{hosted-logs-DfYCqrrR.mjs → hosted-logs-CClIktQM.mjs}

@@ -1,11 +1,11 @@
 import { t as getExecutor } from "./exec-CGuDzt40.mjs";
-import { E as workspaceDir, k as workspaceLogsDir$1 } from "./workspace-state-BdZ-QgmB.mjs";
-import { l as phaseLine } from "./command-output-DjExb_tZ.mjs";
-import { U as parseMachine$1, _t as validateDeviceSlot, ut as deviceSlotFileKey } from "./config-BW0fAtoK.mjs";
-import { n as macosDir } from "./state-DSOUqO-o.mjs";
-import { n as androidLogGroups, r as isAndroidCrashText } from "./android-B2DSKg-A.mjs";
+import { E as workspaceDir, k as workspaceLogsDir$1 } from "./workspace-state-BhwAJBgA.mjs";
+import { l as phaseLine } from "./command-output-T3cDctRE.mjs";
+import { W as parseMachine$1, dt as deviceSlotFileKey, vt as validateDeviceSlot } from "./config-BA3TgoIP.mjs";
+import { n as macosDir } from "./state-B4B5P4LU.mjs";
+import { n as androidLogGroups, r as isAndroidCrashText } from "./android-5wkcMFDG.mjs";
 import { c as readNdjsonGenerations$1, i as createNdjsonWriter } from "./ndjson-CrjIsGzw.mjs";
-import { l as call } from "./hosted-client-CQuzZwAu.mjs";
+import { l as call } from "./hosted-client-DMOOu8vD.mjs";
 import { mkdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { LOG_ROTATE_BYTES, ambientWrite, withDirLockAsync } from "@stim-cli/core";

package/dist/{hosted-logs-sync-Dlpa2mQF.mjs → hosted-logs-sync-B7XCeqVm.mjs}

@@ -1,8 +1,8 @@
-import { l as phaseLine } from "./command-output-DjExb_tZ.mjs";
-import { n as pullHostedNativeLogs, r as readHostedNativeLogs, t as pullHostedMacosLogs } from "./hosted-logs-DfYCqrrR.mjs";
-import { u as connectHost } from "./hosted-client-CQuzZwAu.mjs";
-import { n as readHostedIos, t as readHostedAndroid } from "./ios-state-CWsBysyN.mjs";
-import "./hosted-macos-JKefapEm.mjs";
+import { l as phaseLine } from "./command-output-T3cDctRE.mjs";
+import { n as pullHostedNativeLogs, r as readHostedNativeLogs, t as pullHostedMacosLogs } from "./hosted-logs-CClIktQM.mjs";
+import { u as connectHost } from "./hosted-client-DMOOu8vD.mjs";
+import { n as readHostedIos, t as readHostedAndroid } from "./ios-state-Avwz2cbZ.mjs";
+import "./hosted-macos-D4sDJIbB.mjs";
 import { watch } from "node:fs";
 import { dirname, relative, resolve, sep } from "node:path";
 import { ambientWrite, configDir } from "@stim-cli/core";

package/dist/{hosted-macos-JKefapEm.mjs → hosted-macos-D4sDJIbB.mjs}

@@ -1,9 +1,9 @@
 import { l as cancellableSleep } from "./exec-CGuDzt40.mjs";
-import { l as phaseLine } from "./command-output-DjExb_tZ.mjs";
-import { a as agentAccess, i as closeAgentConnection, o as removeAgentAccess, t as pullHostedMacosLogs } from "./hosted-logs-DfYCqrrR.mjs";
-import { n as macosDir } from "./state-DSOUqO-o.mjs";
-import { _t as runCancellationSignal } from "./toolchain-CYonNjd_.mjs";
-import { _ as sha256, a as RESERVE_TIMEOUT_MS, b as upload, c as bundleManifest, d as heldNoLonger, g as settle, i as PREPARE_TIMEOUT_MS, l as call, n as INSTALL_TIMEOUT_MS, o as SESSION_TIMEOUT_MS, p as hostedSession, s as attach, u as connectHost, v as stoppedSession, y as unknownSession } from "./hosted-client-CQuzZwAu.mjs";
+import { l as phaseLine } from "./command-output-T3cDctRE.mjs";
+import { a as agentAccess, i as closeAgentConnection, o as removeAgentAccess, t as pullHostedMacosLogs } from "./hosted-logs-CClIktQM.mjs";
+import { n as macosDir } from "./state-B4B5P4LU.mjs";
+import { _t as runCancellationSignal } from "./toolchain-DCnWAxQL.mjs";
+import { _ as sha256, a as RESERVE_TIMEOUT_MS, b as upload, c as bundleManifest, d as heldNoLonger, g as settle, i as PREPARE_TIMEOUT_MS, l as call, n as INSTALL_TIMEOUT_MS, o as SESSION_TIMEOUT_MS, p as hostedSession, s as attach, u as connectHost, v as stoppedSession, y as unknownSession } from "./hosted-client-DMOOu8vD.mjs";
 import { randomUUID } from "node:crypto";
 import { join } from "node:path";
 import { ambientContext, ambientWrite } from "@stim-cli/core";

package/dist/{hosted-native-B7OFt5gB.mjs → hosted-native-BiiUG_Q6.mjs}

@@ -1,11 +1,11 @@
 import { l as cancellableSleep, w as withDrainingCancellation } from "./exec-CGuDzt40.mjs";
-import { E as workspaceDir, l as withWorkspaceStateLockAsync, r as readWorkspaceState$1 } from "./workspace-state-BdZ-QgmB.mjs";
-import { l as phaseLine } from "./command-output-DjExb_tZ.mjs";
-import { a as agentAccess, i as closeAgentConnection, n as pullHostedNativeLogs, o as removeAgentAccess } from "./hosted-logs-DfYCqrrR.mjs";
-import { _t as runCancellationSignal } from "./toolchain-CYonNjd_.mjs";
-import { _ as sha256, a as RESERVE_TIMEOUT_MS, b as upload, c as bundleManifest, d as heldNoLonger, g as settle, h as requireHostedAppMode, i as PREPARE_TIMEOUT_MS, l as call, n as INSTALL_TIMEOUT_MS, o as SESSION_TIMEOUT_MS, p as hostedSession, r as OFFER_TIMEOUT_MS, s as attach, t as IMAGE_INSTALL_TIMEOUT_MS, u as connectHost, v as stoppedSession, y as unknownSession } from "./hosted-client-CQuzZwAu.mjs";
-import { a as requestHostedMetro, n as closeHostedMetro, o as requireHostedMetro, r as hostedAgentPort } from "./metro-request-2LmFpC1z.mjs";
-import { s as writeHostedNative } from "./ios-state-CWsBysyN.mjs";
+import { E as workspaceDir, l as withWorkspaceStateLockAsync, r as readWorkspaceState$1 } from "./workspace-state-BhwAJBgA.mjs";
+import { l as phaseLine } from "./command-output-T3cDctRE.mjs";
+import { a as agentAccess, i as closeAgentConnection, n as pullHostedNativeLogs, o as removeAgentAccess } from "./hosted-logs-CClIktQM.mjs";
+import { _t as runCancellationSignal } from "./toolchain-DCnWAxQL.mjs";
+import { _ as sha256, a as RESERVE_TIMEOUT_MS, b as upload, c as bundleManifest, d as heldNoLonger, g as settle, h as requireHostedAppMode, i as PREPARE_TIMEOUT_MS, l as call, n as INSTALL_TIMEOUT_MS, o as SESSION_TIMEOUT_MS, p as hostedSession, r as OFFER_TIMEOUT_MS, s as attach, t as IMAGE_INSTALL_TIMEOUT_MS, u as connectHost, v as stoppedSession, y as unknownSession } from "./hosted-client-DMOOu8vD.mjs";
+import { a as requestHostedMetro, n as closeHostedMetro, o as requireHostedMetro, r as hostedAgentPort } from "./metro-request-O8Q-JvBg.mjs";
+import { s as writeHostedNative } from "./ios-state-Avwz2cbZ.mjs";
 import { randomUUID } from "node:crypto";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/{ios-sUPbWqEh.mjs → ios-BZuhvLGr.mjs}

@@ -1,9 +1,9 @@
-import { h as shortUdid, i as formatDuration, l as phaseLine, m as shortHash } from "./command-output-DjExb_tZ.mjs";
-import { Q as pickDevClientScheme, et as schemesFromInfoPlist } from "./toolchain-CYonNjd_.mjs";
-import { f as podAction, h as resolveDeviceType, i as deviceLabel, m as resolveConfiguration, n as buildLogFile, s as iosConfigurationSetting, t as appNameFromPath, u as isReleaseConfiguration, v as resolveRuntime } from "./support-ivsfDj0v.mjs";
-import { n as ensureWorkspaceStorageSafely } from "./native-runtime-CNgxeOCG.mjs";
-import { t as devClientScheme } from "./dev-client-D3wOllNd.mjs";
-import { c as writeLastBuild, i as iosFacts, n as cacheDescription, o as lastBuildRecord } from "./ios-project-DoTQYghg.mjs";
-import { d as replaceCollector, u as collectorEntry } from "./dependencies-CZ7c8XX_.mjs";
-import { n as registerIos, r as runIosOperation, t as iosCommand } from "./ios-DSBs9c6d.mjs";
+import { h as shortUdid, i as formatDuration, l as phaseLine, m as shortHash } from "./command-output-T3cDctRE.mjs";
+import { Q as pickDevClientScheme, et as schemesFromInfoPlist } from "./toolchain-DCnWAxQL.mjs";
+import { f as podAction, h as resolveDeviceType, i as deviceLabel, m as resolveConfiguration, n as buildLogFile, s as iosConfigurationSetting, t as appNameFromPath, u as isReleaseConfiguration, v as resolveRuntime } from "./support-BJbXovoO.mjs";
+import { n as ensureWorkspaceStorageSafely } from "./native-runtime-C3_NkUlW.mjs";
+import { t as devClientScheme } from "./dev-client-MO_DjTZr.mjs";
+import { c as writeLastBuild, i as iosFacts, n as cacheDescription, o as lastBuildRecord } from "./ios-project-Cz0S1Sz-.mjs";
+import { d as replaceCollector, u as collectorEntry } from "./dependencies-LH-7k1Vr.mjs";
+import { n as registerIos, r as runIosOperation, t as iosCommand } from "./ios-BhpUWyN7.mjs";
 export { appNameFromPath, buildLogFile, cacheDescription, collectorEntry, iosCommand as default, devClientScheme, deviceLabel, ensureWorkspaceStorageSafely, formatDuration, iosConfigurationSetting, iosFacts, isReleaseConfiguration, lastBuildRecord, phaseLine, pickDevClientScheme, podAction, registerIos, replaceCollector, resolveConfiguration, resolveDeviceType, resolveRuntime, runIosOperation, schemesFromInfoPlist, shortHash, shortUdid, writeLastBuild };

package/dist/{ios-BdZdNsAj.mjs → ios-BhfpRfNf.mjs}

@@ -1,10 +1,10 @@
 import { f as WorkspaceProcessCleanupError, l as cancellableSleep, n as isTimeoutError, t as getExecutor } from "./exec-CGuDzt40.mjs";
 import { n as stripAnsi, r as waitForChild, t as createLineReader } from "./process-output-Fpl8PYi8.mjs";
-import { rt as formatBytes, v as loadConfig$1 } from "./config-BW0fAtoK.mjs";
+import { it as formatBytes, v as loadConfig$1 } from "./config-BA3TgoIP.mjs";
 import { n as runOperationFileQuiet, t as runOperationFile } from "./operation-exec-DKlBcKAL.mjs";
-import { i as stimDesktopInstalledAsync, n as settingDefault, t as STIM_DESKTOP_OPEN_OPTIONS } from "./stim-desktop-_WTria-r.mjs";
-import { Ot as recordCreatedDeviceAsync, Tt as forgetCreatedDeviceAsync, pt as isStimOwnedSim } from "./android-Iq0M2t2d.mjs";
-import { n as signedTailFor } from "./apk-signed-tail-CPpA-3vu.mjs";
+import { i as stimDesktopInstalledAsync, n as settingDefault, t as STIM_DESKTOP_OPEN_OPTIONS } from "./stim-desktop-D0P_bzmd.mjs";
+import { Ot as recordCreatedDeviceAsync, Tt as forgetCreatedDeviceAsync, pt as isStimOwnedSim } from "./android-SJx1V3R3.mjs";
+import { n as signedTailFor } from "./apk-signed-tail-eZyXIrnc.mjs";
 import { createHash } from "node:crypto";
 import { closeSync, existsSync, lstatSync, mkdtempSync, openSync, readSync, readdirSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir, totalmem } from "node:os";