@slayzone/cli 0.36.0-beta.12 → 0.36.0-beta.15

package/dist/slay.js

@@ -28443,9 +28443,6 @@ var {
 // ../../shared/platform/src/hub-discovery.ts
 var import_node_http = __toESM(require("node:http"), 1);
 
-// ../../shared/platform/src/paths.ts
-var import_node_path = require("node:path");
-
 // ../../shared/platform/src/dirs.ts
 var import_path = __toESM(require("path"), 1);
 var import_os = __toESM(require("os"), 1);
@@ -28495,8 +28492,13 @@ function parseHubAddress(addr) {
 
 // ../../shared/platform/src/paths.ts
 function getStorageDir() {
-  return (0, import_node_path.join)(getSlayzoneHomeDir(), "storage");
+  return getSlayzoneHomeDir();
 }
+var SIDECAR_FIXED_PORT = {
+  prod: 51100,
+  dev: 51101,
+  test: 51102
+};
 var HUB_PORT_BLOCK = { start: 51100, end: 51199 };
 
 // ../../shared/platform/src/hub-discovery.ts
@@ -28605,9 +28607,7 @@ async function findHub(nameOrPort, opts = {}) {
 var import_fs2 = __toESM(require("fs"), 1);
 var import_path3 = __toESM(require("path"), 1);
 
-// src/db.ts
-var import_node_sqlite = require("node:sqlite");
-var import_node_http2 = __toESM(require("node:http"), 1);
+// src/cli-state.ts
 var import_fs = __toESM(require("fs"), 1);
 var import_path2 = __toESM(require("path"), 1);
 var import_os2 = __toESM(require("os"), 1);
@@ -28617,18 +28617,6 @@ var import_child_process = require("child_process");
 var import_util = require("util");
 var execFileAsync = (0, import_util.promisify)(import_child_process.execFile);
 
-// ../../shared/platform/src/db.ts
-var DB_PRAGMAS = [
-  "journal_mode = WAL",
-  "foreign_keys = ON",
-  "synchronous = NORMAL",
-  "cache_size = -8000",
-  "busy_timeout = 5000"
-];
-function getDbName(packaged) {
-  return packaged ? "slayzone.sqlite" : "slayzone.dev.sqlite";
-}
-
 // ../../shared/platform/src/slz-file-url.ts
 var SLZ_FILE_HOST = "app";
 var SLZ_FILE_PREFIX = `slz-file://${SLZ_FILE_HOST}`;
@@ -28636,182 +28624,34 @@ var SLZ_FILE_PREFIX = `slz-file://${SLZ_FILE_HOST}`;
 // ../../shared/platform/src/ipc-dedup.ts
 var UNCHANGED = Object.freeze({ __ipc_unchanged__: true });
 
-// src/db-helpers.mts
-function resolveProjectArg(opt) {
-  const val = opt ?? process.env.SLAYZONE_PROJECT_ID;
-  if (!val) {
-    console.error("No --project provided and $SLAYZONE_PROJECT_ID is not set.");
-    process.exit(1);
-  }
-  return val;
-}
-
-// src/db.ts
-function defaultDir() {
-  const dir = getStorageDir();
-  if (import_fs.default.existsSync(dir)) return dir;
-  if (process.platform === "linux") {
-    const configHome = process.env.XDG_CONFIG_HOME || import_path2.default.join(import_os2.default.homedir(), ".config");
-    const legacyDir = import_path2.default.join(configHome, "slayzone");
-    if (import_fs.default.existsSync(legacyDir)) return legacyDir;
-  }
-  return dir;
-}
-function getDbPath(dev) {
-  return import_path2.default.join(defaultDir(), getDbName(!dev));
-}
-function loopbackHubPort() {
-  const parsed = parseHubAddress(process.env.SLAYZONE_HUB_ADDRESS);
-  if (!parsed?.port) return null;
-  return LOOPBACK_HOSTS.has(parsed.host) ? parsed.port : null;
-}
-function hasLocalDatabase() {
-  return import_fs.default.existsSync(getDbPath(process.env.SLAYZONE_DEV === "1"));
-}
-function getServerPort() {
-  const envPort = loopbackHubPort();
-  if (envPort) return envPort;
-  try {
-    const db = openDb();
-    const row = db.query(
-      `SELECT value FROM settings WHERE key = 'server_port' LIMIT 1`
-    );
-    db.close();
-    const port = parseInt(row[0]?.value ?? "", 10);
-    return port > 0 && port <= 65535 ? port : null;
-  } catch {
-    return null;
-  }
-}
-function getAlternateServerPort() {
-  if (loopbackHubPort()) return null;
-  const dev = process.env.SLAYZONE_DEV === "1";
-  const altPath = getDbPath(!dev);
-  if (!import_fs.default.existsSync(altPath)) return null;
-  try {
-    const altDb = new import_node_sqlite.DatabaseSync(altPath);
-    const row = altDb.prepare(`SELECT value FROM settings WHERE key = 'server_port' LIMIT 1`).get();
-    altDb.close();
-    const port = parseInt(row?.value ?? "", 10);
-    return port > 0 && port <= 65535 ? port : null;
-  } catch {
-    return null;
-  }
-}
-function postJson(port, path9, timeoutMs = 3e3) {
-  return new Promise((resolve) => {
-    const req = import_node_http2.default.request({ hostname: "127.0.0.1", port, path: path9, method: "POST" }, (res) => {
-      res.resume();
-      res.on("end", () => {
-        const code = res.statusCode ?? 0;
-        resolve(code >= 200 && code < 300);
-      });
-    });
-    req.on("error", () => resolve(false));
-    req.setTimeout(timeoutMs, () => {
-      req.destroy();
-      resolve(false);
-    });
-    req.end();
-  });
-}
-function probePort(port) {
-  return postJson(port, "/api/notify", 1e3);
-}
-async function postHubNotify(hub, timeoutMs = 3e3) {
-  try {
-    const headers = hub.token ? { Authorization: `Bearer ${hub.token}` } : {};
-    const res = await fetch(`${hub.baseUrl}/api/notify`, {
-      method: "POST",
-      headers,
-      signal: AbortSignal.timeout(timeoutMs)
-    });
-    return res.ok;
-  } catch {
-    return false;
-  }
-}
-async function notifyApp() {
-  const hub = resolveHubTarget();
-  if (hub) {
-    const ok = await postHubNotify(hub);
-    if (!ok) {
-      console.error(
-        "Warning: hub notify failed (POST /api/notify) \u2014 hub may be stale or unreachable"
-      );
-    }
-    return;
-  }
-  const port = getServerPort();
-  if (port) {
-    const ok = await postJson(port, "/api/notify");
-    if (!ok) {
-      console.error(
-        "Warning: app notify failed (POST /api/notify) \u2014 app may be stale or unreachable"
-      );
-    }
-    return;
-  }
-  const altPort = getAlternateServerPort();
-  if (altPort && await probePort(altPort)) {
-    const dev = process.env.SLAYZONE_DEV === "1";
-    const hint = dev ? "without --dev" : "with --dev";
-    console.error(
-      `Warning: SlayZone app is running ${hint}. Changes were saved but the app was not notified.`
-    );
-    console.error(`  Re-run ${dev ? "without --dev" : "with --dev"} to target the same database.`);
-  }
+// src/cli-state.ts
+function getCliStateDir() {
+  const home = process.env.HOME ?? process.env.USERPROFILE ?? import_os2.default.homedir();
+  return import_path2.default.join(home, ".slayzone", "cli");
 }
-function getArtifactsDir() {
-  const dir = defaultDir();
-  return import_path2.default.join(dir, "artifacts");
+function getHubTargetPath() {
+  const name = process.env.SLAYZONE_DEV === "1" ? "hub-target.dev.json" : "hub-target.json";
+  return import_path2.default.join(getCliStateDir(), name);
 }
-function openDb() {
-  const dev = process.env.SLAYZONE_DEV === "1";
-  const dbPath = getDbPath(dev);
-  if (!import_fs.default.existsSync(dbPath)) {
-    console.error(`Database not found: ${dbPath}`);
-    const altPath = getDbPath(!dev);
-    if (import_fs.default.existsSync(altPath)) {
-      const hint = dev ? "without --dev" : "with --dev";
-      console.error(`Found other database at: ${altPath}`);
-      console.error(`Re-run ${hint} to target that database.`);
-    } else {
-      console.error("Make sure SlayZone has been launched at least once.");
-    }
-    process.exit(1);
-  }
-  const db = new import_node_sqlite.DatabaseSync(dbPath);
-  for (const pragma of DB_PRAGMAS) {
-    db.exec(`PRAGMA ${pragma}`);
-  }
-  return {
-    query(sql, params = {}) {
-      return db.prepare(sql).all(params);
-    },
-    run(sql, params = {}) {
-      db.prepare(sql).run(params);
-    },
-    close() {
-      db.close();
-    },
-    raw() {
-      return db;
-    }
-  };
+function getServiceRuntimeDir(kind) {
+  return import_path2.default.join(getCliStateDir(), `${kind}-runtime`);
 }
-function getDataDir() {
-  return defaultDir();
+function legacyHubTargetPaths() {
+  const home = process.env.HOME ?? process.env.USERPROFILE ?? import_os2.default.homedir();
+  const candidates = [
+    import_path2.default.join(getStorageDir(), "cli-hub-target.json"),
+    import_path2.default.join(home, ".slayzone", "cli-hub-target.json")
+  ];
+  return candidates.filter((p2, i) => candidates.indexOf(p2) === i && import_fs.default.existsSync(p2));
 }
 
 // src/hub-config.ts
-var HUB_CONFIG_FILENAME = "hub.json";
 var hubOverride = null;
 function setHubOverride(target) {
   hubOverride = target;
 }
 function getHubConfigPath() {
-  return import_path3.default.join(getDataDir(), HUB_CONFIG_FILENAME);
+  return getHubTargetPath();
 }
 function normalizeHubUrl(raw) {
   const trimmed = raw.trim();
@@ -28825,8 +28665,13 @@ function normalizeHubUrl(raw) {
   if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return null;
   return `${parsed.origin}${parsed.pathname.replace(/\/+$/, "")}`;
 }
+function hubFilePathForRead() {
+  const current = getHubConfigPath();
+  if (import_fs2.default.existsSync(current)) return current;
+  return legacyHubTargetPaths()[0] ?? current;
+}
 function readHubFile() {
-  const configPath = getHubConfigPath();
+  const configPath = hubFilePathForRead();
   let rawText;
   try {
     rawText = import_fs2.default.readFileSync(configPath, "utf-8");
@@ -28888,20 +28733,43 @@ function writeHubConfig(url, token) {
   return configPath;
 }
 function removeHubConfig() {
+  let removed = false;
+  for (const target of [getHubConfigPath(), ...legacyHubTargetPaths()]) {
+    try {
+      import_fs2.default.unlinkSync(target);
+      removed = true;
+    } catch (e) {
+      if (e.code !== "ENOENT") throw e;
+    }
+  }
+  return removed;
+}
+
+// src/local-hub.ts
+function fixedPortForChannel() {
+  return process.env.SLAYZONE_DEV === "1" ? SIDECAR_FIXED_PORT.dev : SIDECAR_FIXED_PORT.prod;
+}
+async function probeFixedPort() {
+  const port = fixedPortForChannel();
+  const hub = await findHub(String(port));
+  return hub ? hub.port : null;
+}
+async function isCoLocatedHub() {
+  const configured = resolveHubTarget();
+  if (!configured) return true;
   try {
-    import_fs2.default.unlinkSync(getHubConfigPath());
-    return true;
-  } catch (e) {
-    if (e.code === "ENOENT") return false;
-    throw e;
+    const host = new URL(configured.baseUrl).hostname.replace(/^\[|\]$/g, "");
+    return LOOPBACK_HOSTS.has(host);
+  } catch {
+    return false;
   }
 }
 
 // src/api.ts
-function resolveTarget() {
+async function resolveTarget() {
   const hub = resolveHubTarget();
   if (hub) return { baseUrl: hub.baseUrl, token: hub.token, hub: true };
-  const port = getServerPort();
+  const port = await probeFixedPort();
   if (!port) {
     console.error("SlayZone server port not found. Is the app running?");
     process.exit(1);
@@ -28923,7 +28791,7 @@ function connectError(target) {
   process.exit(1);
 }
 async function request(path9, init) {
-  const target = resolveTarget();
+  const target = await resolveTarget();
   let res;
   try {
     res = await fetch(`${target.baseUrl}${path9}`, withAuth(init, target.token));
@@ -28961,7 +28829,7 @@ function apiDelete(path9, body) {
   });
 }
 async function apiFetch(path9, init) {
-  const target = resolveTarget();
+  const target = await resolveTarget();
   try {
     return await fetch(`${target.baseUrl}${path9}`, withAuth(init, target.token));
   } catch {
@@ -28969,7 +28837,7 @@ async function apiFetch(path9, init) {
   }
 }
 async function apiGetStream(path9, passThroughCodes = []) {
-  const target = resolveTarget();
+  const target = await resolveTarget();
   let res;
   try {
     res = await fetch(`${target.baseUrl}${path9}`, withAuth(void 0, target.token));
@@ -28992,7 +28860,7 @@ async function apiGetStream(path9, passThroughCodes = []) {
   return { body: res.body };
 }
 async function requestStream(method, path9, body) {
-  const target = resolveTarget();
+  const target = await resolveTarget();
   let res;
   try {
     res = await fetch(`${target.baseUrl}${path9}`, {
@@ -29035,171 +28903,6 @@ function failFromText(body, status) {
   process.exit(1);
 }
 
-// ../../domains/terminal/src/shared/types.ts
-var BuiltinTerminalMode = {
-  ClaudeCode: "claude-code",
-  ClaudeChat: "claude-chat",
-  Codex: "codex",
-  CodexChat: "codex-chat",
-  Gemini: "gemini",
-  Antigravity: "antigravity",
-  CursorAgent: "cursor-agent",
-  OpenCode: "opencode",
-  QwenCode: "qwen-code",
-  Copilot: "copilot"
-};
-var DEFAULT_TERMINAL_MODES = [
-  {
-    id: BuiltinTerminalMode.ClaudeCode,
-    label: "Claude",
-    type: "claude-code",
-    initialCommand: "claude --session-id {id} {flags}",
-    resumeCommand: "claude --resume {id} {flags}",
-    headlessCommand: "claude -p {prompt} {flags}",
-    defaultFlags: "--allow-dangerously-skip-permissions",
-    enabled: true,
-    isBuiltin: true,
-    order: 0
-  },
-  {
-    id: BuiltinTerminalMode.ClaudeChat,
-    label: "Claude Chat",
-    type: "claude-code",
-    initialCommand: null,
-    resumeCommand: null,
-    headlessCommand: "claude -p {prompt} {flags}",
-    defaultFlags: "--allow-dangerously-skip-permissions",
-    enabled: true,
-    isBuiltin: true,
-    order: 0.5
-  },
-  {
-    id: BuiltinTerminalMode.Codex,
-    label: "Codex",
-    type: "codex",
-    initialCommand: "codex {flags}",
-    resumeCommand: "codex {flags} resume {id}",
-    headlessCommand: "codex exec {flags} {prompt}",
-    defaultFlags: "--sandbox workspace-write",
-    enabled: true,
-    isBuiltin: true,
-    order: 1
-  },
-  {
-    // Codex Chat — structured (non-PTY) chat backed by `codex app-server`'s
-    // JSON-RPC protocol. Coexists with the PTY `codex` mode above.
-    // `initialCommand`/`resumeCommand` are null: chat is spawned by the
-    // chat-transport-manager, not the PTY manager.
-    id: BuiltinTerminalMode.CodexChat,
-    label: "Codex Chat",
-    type: "codex",
-    initialCommand: null,
-    resumeCommand: null,
-    headlessCommand: "codex exec {flags} {prompt}",
-    defaultFlags: "",
-    enabled: true,
-    isBuiltin: true,
-    order: 1.5
-  },
-  {
-    id: BuiltinTerminalMode.Gemini,
-    label: "Gemini",
-    type: "gemini",
-    initialCommand: "gemini {flags}",
-    resumeCommand: "gemini --resume latest {flags}",
-    headlessCommand: "gemini -p {prompt} {flags}",
-    defaultFlags: "--yolo",
-    enabled: true,
-    isBuiltin: true,
-    order: 2
-  },
-  {
-    // Antigravity CLI — Google's successor to Gemini CLI (Gemini CLI stops
-    // serving free/Pro/Ultra requests 2026-06-18). Binary is `agy`. Commands
-    // confirmed against `agy --help` (v1.0.0):
-    //   resume     `agy --conversation=<id>`              (short `-c` = most-recent)
-    //   headless   `-p` / `--print`                      (single non-interactive prompt)
-    //   auto-approve `--dangerously-skip-permissions`     (skip tool permission prompts)
-    //
-    // `resumeCommand` uses `{id}`: the SessionStart hook captures the CLI
-    // session_id into provider_config.antigravity (see agent-hook.ts
-    // `persistConversationId`), and `{id}` is only ever interpolated when a
-    // captured id exists — pty-manager picks `resumeCommand` solely when
-    // `resuming = !!existingConversationId`. No id → `initialCommand` (fresh
-    // session).
-    id: BuiltinTerminalMode.Antigravity,
-    label: "Antigravity",
-    type: "antigravity",
-    initialCommand: "agy {flags}",
-    resumeCommand: "agy --conversation={id} {flags}",
-    headlessCommand: "agy -p {prompt} {flags}",
-    defaultFlags: "--dangerously-skip-permissions",
-    enabled: true,
-    isBuiltin: true,
-    order: 2.5
-  },
-  {
-    id: BuiltinTerminalMode.CursorAgent,
-    label: "Cursor",
-    type: "cursor-agent",
-    initialCommand: "cursor-agent {flags}",
-    resumeCommand: "cursor-agent --resume {id} {flags}",
-    headlessCommand: "cursor-agent -p {prompt} {flags}",
-    defaultFlags: "--force",
-    enabled: true,
-    isBuiltin: true,
-    order: 3
-  },
-  {
-    id: BuiltinTerminalMode.OpenCode,
-    label: "OpenCode",
-    type: "opencode",
-    initialCommand: "opencode {flags}",
-    resumeCommand: "opencode --session {id} {flags}",
-    headlessCommand: "opencode run {flags} {prompt}",
-    defaultFlags: "",
-    enabled: true,
-    isBuiltin: true,
-    order: 4
-  },
-  {
-    id: BuiltinTerminalMode.QwenCode,
-    label: "Qwen",
-    type: "qwen-code",
-    initialCommand: "qwen --session-id {id} {flags}",
-    resumeCommand: "qwen --resume {id} {flags}",
-    headlessCommand: "qwen -p {prompt} {flags}",
-    defaultFlags: "--yolo",
-    enabled: true,
-    isBuiltin: true,
-    order: 6
-  },
-  {
-    id: BuiltinTerminalMode.Copilot,
-    label: "Copilot",
-    type: "copilot",
-    initialCommand: "copilot --resume={id} {flags}",
-    resumeCommand: "copilot --resume={id} {flags}",
-    headlessCommand: "copilot -p {prompt} {flags}",
-    defaultFlags: "--allow-all-tools",
-    enabled: true,
-    isBuiltin: true,
-    order: 7
-  },
-  {
-    id: "terminal",
-    label: "Terminal",
-    type: "terminal",
-    initialCommand: null,
-    resumeCommand: null,
-    headlessCommand: null,
-    defaultFlags: null,
-    enabled: true,
-    isBuiltin: true,
-    order: 8
-  }
-];
-
 // src/commands/tasks/cli-author.ts
 function cliAuthor() {
   const agentId = process.env.SLAYZONE_AGENT_ID;
@@ -29412,6 +29115,88 @@ async function listAction(opts) {
   printTasks(data, blockedIds);
 }
 
+// src/db.ts
+var import_node_http2 = __toESM(require("node:http"), 1);
+
+// src/db-helpers.mts
+function resolveProjectArg(opt) {
+  const val = opt ?? process.env.SLAYZONE_PROJECT_ID;
+  if (!val) {
+    console.error("No --project provided and $SLAYZONE_PROJECT_ID is not set.");
+    process.exit(1);
+  }
+  return val;
+}
+
+// src/db.ts
+function postJson(port, path9, timeoutMs = 3e3) {
+  return new Promise((resolve) => {
+    const req = import_node_http2.default.request({ hostname: "127.0.0.1", port, path: path9, method: "POST" }, (res) => {
+      res.resume();
+      res.on("end", () => {
+        const code = res.statusCode ?? 0;
+        resolve(code >= 200 && code < 300);
+      });
+    });
+    req.on("error", () => resolve(false));
+    req.setTimeout(timeoutMs, () => {
+      req.destroy();
+      resolve(false);
+    });
+    req.end();
+  });
+}
+async function probeAlternateChannel() {
+  const dev = process.env.SLAYZONE_DEV === "1";
+  const altPort = dev ? SIDECAR_FIXED_PORT.prod : SIDECAR_FIXED_PORT.dev;
+  const hub = await findHub(String(altPort));
+  return hub ? hub.port : null;
+}
+async function postHubNotify(hub, timeoutMs = 3e3) {
+  try {
+    const headers = hub.token ? { Authorization: `Bearer ${hub.token}` } : {};
+    const res = await fetch(`${hub.baseUrl}/api/notify`, {
+      method: "POST",
+      headers,
+      signal: AbortSignal.timeout(timeoutMs)
+    });
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+async function notifyApp() {
+  const hub = resolveHubTarget();
+  if (hub) {
+    const ok = await postHubNotify(hub);
+    if (!ok) {
+      console.error(
+        "Warning: hub notify failed (POST /api/notify) \u2014 hub may be stale or unreachable"
+      );
+    }
+    return;
+  }
+  const port = await probeFixedPort();
+  if (port) {
+    const ok = await postJson(port, "/api/notify");
+    if (!ok) {
+      console.error(
+        "Warning: app notify failed (POST /api/notify) \u2014 app may be stale or unreachable"
+      );
+    }
+    return;
+  }
+  const altPort = await probeAlternateChannel();
+  if (altPort) {
+    const dev = process.env.SLAYZONE_DEV === "1";
+    const hint = dev ? "without --dev" : "with --dev";
+    console.error(
+      `Warning: SlayZone app is running ${hint}. Changes were saved but the app was not notified.`
+    );
+    console.error(`  Re-run ${dev ? "without --dev" : "with --dev"} to target the same database.`);
+  }
+}
+
 // src/commands/tasks/create.ts
 async function createAction(title, opts) {
   const projectRef = resolveProjectArg(opts.project);
@@ -30094,27 +29879,6 @@ function getEffectiveRenderMode(title, override) {
 }
 
 // src/commands/tasks/artifacts.ts
-function resolveArtifact(db, prefix) {
-  const rows = db.query(
-    `SELECT * FROM task_artifacts WHERE id LIKE :prefix || '%' LIMIT 2`,
-    { ":prefix": prefix }
-  );
-  if (rows.length === 0) {
-    console.error(`Artifact not found: "${prefix}"`);
-    process.exit(1);
-  }
-  if (rows.length > 1) {
-    console.error(
-      `Ambiguous artifact id "${prefix}". Matches: ${rows.map((r) => r.id.slice(0, 8)).join(", ")}`
-    );
-    process.exit(1);
-  }
-  return rows[0];
-}
-function artifactFilePath(artifactsDir, taskId, artifactId, title) {
-  const ext = getExtensionFromTitle(title) || ".txt";
-  return import_path6.default.join(artifactsDir, taskId, `${artifactId}${ext}`);
-}
 function printArtifacts(artifacts, folders) {
   if (artifacts.length === 0) {
     console.log("No artifacts.");
@@ -30403,11 +30167,18 @@ function artifactsSubcommand() {
     console.log(`Deleted: ${artifact.id.slice(0, 8)}  ${artifact.title}`);
   });
   cmd.command("path <artifactId>").description("Print artifact file path").action(async (artifactId) => {
-    const db = openDb();
-    const artifact = resolveArtifact(db, artifactId);
-    db.close();
-    const dir = getArtifactsDir();
-    process.stdout.write(artifactFilePath(dir, artifact.task_id, artifact.id, artifact.title));
+    const { data } = await apiGet(
+      `/api/artifacts/${encodeURIComponent(artifactId)}`
+    );
+    const local = await isCoLocatedHub();
+    if (!local) {
+      console.error(
+        `Refusing to print a path for a hub on another machine \u2014 ${data.filePath} exists there, not here.
+Use \`slay tasks artifacts read ${artifactId}\` to get the content, or \`download\` to write it locally.`
+      );
+      process.exit(1);
+    }
+    process.stdout.write(data.filePath);
   });
   cmd.command("mkdir <name>").description("Create a folder").option("--task <id>", "Task ID (or $SLAYZONE_TASK_ID)").option("--parent <id>", "Parent folder ID").option("--json", "Output as JSON").action(async (name, opts) => {
     const taskRef = await resolveId(opts.task);
@@ -30739,7 +30510,7 @@ function tasksCommand() {
 
 // src/commands/projects.ts
 var import_node_fs = __toESM(require("node:fs"), 1);
-var import_node_path2 = __toESM(require("node:path"), 1);
+var import_node_path = __toESM(require("node:path"), 1);
 
 // ../../shared/workflow/src/types.ts
 var WORKFLOW_CATEGORIES = [
@@ -30861,7 +30632,7 @@ function normalizeProjectPath(input) {
   if (!input) return null;
   const trimmed = input.trim();
   if (!trimmed) return null;
-  return import_node_path2.default.resolve(trimmed);
+  return import_node_path.default.resolve(trimmed);
 }
 function ensureProjectPath(projectPath) {
   if (!projectPath) return false;
@@ -31085,6 +30856,7 @@ complete -c slay -n '__fish_use_subcommand' -a 'automations' -d 'Manage automati
 complete -c slay -n '__fish_use_subcommand' -a 'processes' -d 'Manage processes'
 complete -c slay -n '__fish_use_subcommand' -a 'hub' -d 'Run, list and target SlayZone hubs'
 complete -c slay -n '__fish_use_subcommand' -a 'runner' -d 'Run and manage SlayZone runners'
+complete -c slay -n '__fish_use_subcommand' -a 'update' -d 'Update globally npm-installed @slayzone packages'
 complete -c slay -n '__fish_use_subcommand' -a 'completions' -d 'Print shell completions'
 complete -c slay -n '__fish_seen_subcommand_from tasks' -a 'list create view done update archive delete open search subtasks subtask-add tag'
 complete -c slay -n '__fish_seen_subcommand_from processes' -a 'list logs kill follow'
@@ -31109,6 +30881,7 @@ _slay() {
     'processes:Manage processes'
     'hub:Run, list and target SlayZone hubs'
     'runner:Run and manage SlayZone runners'
+    'update:Update globally npm-installed @slayzone packages'
     'completions:Print shell completions'
   )
   local -a task_commands
@@ -31210,6 +30983,9 @@ _slay() {
     runner)
       _describe 'runner commands' runner_commands
       ;;
+    update)
+      _arguments '--check[Report available updates without installing]'
+      ;;
     completions)
       _arguments ':shell:(fish zsh bash)'
       ;;
@@ -31227,7 +31003,7 @@ _slay_completions() {
   cur="\${COMP_WORDS[COMP_CWORD]}"
   prev="\${COMP_WORDS[COMP_CWORD-1]}"
   if [ $COMP_CWORD -eq 1 ]; then
-    COMPREPLY=( $(compgen -W "tasks projects tags templates automations processes hub runner completions" -- "$cur") )
+    COMPREPLY=( $(compgen -W "tasks projects tags templates automations processes hub runner update completions" -- "$cur") )
   elif [ $COMP_CWORD -eq 2 ]; then
     case "$prev" in
       tasks)
@@ -31254,6 +31030,9 @@ _slay_completions() {
       runner)
         COMPREPLY=( $(compgen -W "ls mint create start stop rm restart logs" -- "$cur") )
         ;;
+      update)
+        COMPREPLY=( $(compgen -W "--check" -- "$cur") )
+        ;;
       completions)
         COMPREPLY=( $(compgen -W "fish zsh bash" -- "$cur") )
         ;;
@@ -31287,7 +31066,7 @@ function completionsCommand() {
 
 // src/commands/init.ts
 var import_node_fs2 = __toESM(require("node:fs"), 1);
-var import_node_path3 = __toESM(require("node:path"), 1);
+var import_node_path2 = __toESM(require("node:path"), 1);
 
 // ../../domains/ai-config/src/shared/provider-registry.ts
 var PROVIDER_PATHS = {
@@ -34691,7 +34470,7 @@ function writeInstructionsToDisk(projectPath, providers) {
   }
   const written = [];
   for (const filename of filenames) {
-    const filePath = import_node_path3.default.join(projectPath, filename);
+    const filePath = import_node_path2.default.join(projectPath, filename);
     const existing = import_node_fs2.default.existsSync(filePath) ? import_node_fs2.default.readFileSync(filePath, "utf-8") : "";
     const prefix = existing && !existing.endsWith("\n") ? "\n" : "";
     import_node_fs2.default.appendFileSync(filePath, prefix + INSTRUCTIONS, "utf-8");
@@ -34704,8 +34483,8 @@ function writeSkillsToDisk(projectPath, providers, skills) {
     const mapping = PROVIDER_PATHS[provider];
     if (!mapping?.skillsDir) continue;
     for (const skill of skills) {
-      const filePath = import_node_path3.default.join(projectPath, mapping.skillsDir, skill.slug, "SKILL.md");
-      import_node_fs2.default.mkdirSync(import_node_path3.default.dirname(filePath), { recursive: true });
+      const filePath = import_node_path2.default.join(projectPath, mapping.skillsDir, skill.slug, "SKILL.md");
+      import_node_fs2.default.mkdirSync(import_node_path2.default.dirname(filePath), { recursive: true });
       import_node_fs2.default.writeFileSync(filePath, skill.content, "utf-8");
     }
   }
@@ -35546,94 +35325,119 @@ function panelsCommand() {
 // src/commands/hub.ts
 var import_node_child_process3 = require("node:child_process");
 var import_node_fs7 = require("node:fs");
-var import_node_path7 = require("node:path");
+var import_node_path6 = require("node:path");
 
 // ../../shared/platform/src/slayzone-config.ts
 var import_node_fs4 = require("node:fs");
-var import_node_path4 = require("node:path");
+var import_node_path3 = require("node:path");
 
 // ../../shared/platform/src/runner-identity.ts
 var DEFAULT_LOCAL_RUNNER_NAME = "local-runner";
 
 // ../../shared/platform/src/slayzone-config.ts
-function getSlayzoneConfigPath() {
-  return (0, import_node_path4.join)(getSlayzoneHomeDir(), "config.json");
+function getHubConfigFilePath() {
+  return (0, import_node_path3.join)(getSlayzoneHomeDir(), "hub.config.json");
+}
+function getRunnerConfigFilePath() {
+  return (0, import_node_path3.join)(getSlayzoneHomeDir(), "runner.config.json");
 }
-function coerce(raw) {
+function legacyConfigFilePathFor(newFilePath) {
+  return (0, import_node_path3.join)((0, import_node_path3.dirname)(newFilePath), "config.json");
+}
+function coerceHubConfig(raw) {
   const cfg = {};
-  if (typeof raw.runnerTransportSecret === "string" && raw.runnerTransportSecret.length > 0)
-    cfg.runnerTransportSecret = raw.runnerTransportSecret;
   if (typeof raw.address === "string" && raw.address.length > 0) cfg.address = raw.address;
   if (typeof raw.publicAddress === "string" && raw.publicAddress.length > 0)
     cfg.publicAddress = raw.publicAddress;
-  if (typeof raw.hubName === "string" && raw.hubName.trim().length > 0)
-    cfg.hubName = raw.hubName.trim();
   if (raw.mode === "local" || raw.mode === "remote") cfg.mode = raw.mode;
+  if (typeof raw.hubName === "string" && raw.hubName.trim().length > 0) cfg.hubName = raw.hubName.trim();
   if (typeof raw.port === "number" && Number.isInteger(raw.port)) cfg.port = raw.port;
   if (typeof raw.publicUrl === "string" && raw.publicUrl.length > 0) cfg.publicUrl = raw.publicUrl;
+  return cfg;
+}
+function coerceRunnerConfig(raw) {
+  const cfg = {};
   if (typeof raw.joinToken === "string" && raw.joinToken.length > 0) cfg.joinToken = raw.joinToken;
-  if (typeof raw.runnerName === "string" && raw.runnerName.length > 0)
-    cfg.runnerName = raw.runnerName;
+  if (typeof raw.runnerName === "string" && raw.runnerName.length > 0) cfg.runnerName = raw.runnerName;
   if (typeof raw.hubUrl === "string" && raw.hubUrl.length > 0) cfg.hubUrl = raw.hubUrl;
   if (Array.isArray(raw.allowedRoots)) {
-    const roots = raw.allowedRoots.filter(
-      (r) => typeof r === "string" && r.length > 0
-    );
+    const roots = raw.allowedRoots.filter((r) => typeof r === "string" && r.length > 0);
     if (roots.length > 0) cfg.allowedRoots = roots;
   }
   if (typeof raw.pinnedCertSha256 === "string" && raw.pinnedCertSha256.length > 0)
     cfg.pinnedCertSha256 = raw.pinnedCertSha256;
   return cfg;
 }
-function loadSlayzoneConfig(configPath = getSlayzoneConfigPath()) {
+function readJsonObject(path9) {
   let raw;
   try {
-    raw = (0, import_node_fs4.readFileSync)(configPath, "utf8");
+    raw = (0, import_node_fs4.readFileSync)(path9, "utf8");
   } catch (err) {
-    if (err.code === "ENOENT") return {};
+    if (err.code === "ENOENT") return null;
     process.stderr.write(
-      `[slayzone-config] cannot read ${configPath}: ${err instanceof Error ? err.message : String(err)} \u2014 using empty config
+      `[slayzone-config] cannot read ${path9}: ${err instanceof Error ? err.message : String(err)} \u2014 using empty config
 `
     );
-    return {};
+    return null;
   }
   let parsed;
   try {
     parsed = JSON.parse(raw);
   } catch (err) {
     process.stderr.write(
-      `[slayzone-config] ${configPath} is not valid JSON: ${err instanceof Error ? err.message : String(err)} \u2014 using empty config
+      `[slayzone-config] ${path9} is not valid JSON: ${err instanceof Error ? err.message : String(err)} \u2014 using empty config
 `
     );
-    return {};
+    return null;
   }
   if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-    process.stderr.write(`[slayzone-config] ${configPath} is not a JSON object \u2014 using empty config
+    process.stderr.write(`[slayzone-config] ${path9} is not a JSON object \u2014 using empty config
 `);
-    return {};
+    return null;
   }
-  return coerce(parsed);
+  return parsed;
 }
-function saveSlayzoneConfig(cfg, configPath = getSlayzoneConfigPath()) {
-  const dir = (0, import_node_path4.dirname)(configPath);
+function writeJsonAtomic(path9, data) {
+  const dir = (0, import_node_path3.dirname)(path9);
   (0, import_node_fs4.mkdirSync)(dir, { recursive: true, mode: 448 });
-  const tmpPath = `${configPath}.tmp-${process.pid}-${Date.now()}`;
-  (0, import_node_fs4.writeFileSync)(tmpPath, `${JSON.stringify(cfg, null, 2)}
+  const tmpPath = `${path9}.tmp-${process.pid}-${Date.now()}`;
+  (0, import_node_fs4.writeFileSync)(tmpPath, `${JSON.stringify(data, null, 2)}
 `, { mode: 384 });
   try {
-    (0, import_node_fs4.renameSync)(tmpPath, configPath);
+    (0, import_node_fs4.renameSync)(tmpPath, path9);
   } catch (err) {
     (0, import_node_fs4.rmSync)(tmpPath, { force: true });
     throw err;
   }
 }
-function updateSlayzoneConfig(patch, configPath = getSlayzoneConfigPath()) {
-  const current = loadSlayzoneConfig(configPath);
-  const merged = { ...current };
+function saveHubConfigFile(cfg, path9 = getHubConfigFilePath()) {
+  writeJsonAtomic(path9, cfg);
+}
+function updateHubConfigFile(patch, path9 = getHubConfigFilePath()) {
+  const current = readJsonObject(path9);
+  const merged = current ? coerceHubConfig(current) : {};
+  for (const [k, v2] of Object.entries(patch)) {
+    if (v2 !== void 0) merged[k] = v2;
+  }
+  saveHubConfigFile(merged, path9);
+  return merged;
+}
+function loadRunnerConfigFile(path9 = getRunnerConfigFilePath()) {
+  const raw = readJsonObject(path9);
+  if (raw) return coerceRunnerConfig(raw);
+  const legacy = readJsonObject(legacyConfigFilePathFor(path9));
+  return legacy ? coerceRunnerConfig(legacy) : {};
+}
+function saveRunnerConfigFile(cfg, path9 = getRunnerConfigFilePath()) {
+  writeJsonAtomic(path9, cfg);
+}
+function updateRunnerConfigFile(patch, path9 = getRunnerConfigFilePath()) {
+  const current = readJsonObject(path9);
+  const merged = current ? coerceRunnerConfig(current) : {};
   for (const [k, v2] of Object.entries(patch)) {
     if (v2 !== void 0) merged[k] = v2;
   }
-  saveSlayzoneConfig(merged, configPath);
+  saveRunnerConfigFile(merged, path9);
   return merged;
 }
 
@@ -35641,7 +35445,7 @@ function updateSlayzoneConfig(patch, configPath = getSlayzoneConfigPath()) {
 var import_node_child_process = require("node:child_process");
 var import_node_fs5 = require("node:fs");
 var import_node_os = require("node:os");
-var import_node_path5 = require("node:path");
+var import_node_path4 = require("node:path");
 var KINDS = {
   hub: {
     labelPrefix: "com.slayzone.hub.",
@@ -35677,8 +35481,8 @@ function assertValidServiceName(kind, name) {
 }
 function defaultUnitDir(backend) {
   const home = process.env.HOME ?? (0, import_node_os.homedir)();
-  if (backend === "launchd") return (0, import_node_path5.join)(home, "Library", "LaunchAgents");
-  if (backend === "systemd") return (0, import_node_path5.join)(home, ".config", "systemd", "user");
+  if (backend === "launchd") return (0, import_node_path4.join)(home, "Library", "LaunchAgents");
+  if (backend === "systemd") return (0, import_node_path4.join)(home, ".config", "systemd", "user");
   throw new Error("[slayzone] no unit directory: this platform has no user service backend");
 }
 function detectBackend() {
@@ -35699,7 +35503,7 @@ function detectBackend() {
 }
 function unitPath(kind, name, backend, unitDir = defaultUnitDir(backend)) {
   assertValidServiceName(kind, name);
-  return backend === "launchd" ? (0, import_node_path5.join)(unitDir, `${KINDS[kind].labelPrefix}${name}.plist`) : (0, import_node_path5.join)(unitDir, `${KINDS[kind].systemdPrefix}${name}.service`);
+  return backend === "launchd" ? (0, import_node_path4.join)(unitDir, `${KINDS[kind].labelPrefix}${name}.plist`) : (0, import_node_path4.join)(unitDir, `${KINDS[kind].systemdPrefix}${name}.service`);
 }
 function nameFromUnitFile(kind, file, backend) {
   if (backend === "launchd") {
@@ -35754,9 +35558,9 @@ ${envEntries}
     <false/>
   </dict>
   <key>StandardOutPath</key>
-  <string>${xmlEscape((0, import_node_path5.join)(spec.logDir, kind.outLog))}</string>
+  <string>${xmlEscape((0, import_node_path4.join)(spec.logDir, kind.outLog))}</string>
   <key>StandardErrorPath</key>
-  <string>${xmlEscape((0, import_node_path5.join)(spec.logDir, kind.errLog))}</string>
+  <string>${xmlEscape((0, import_node_path4.join)(spec.logDir, kind.errLog))}</string>
   <key>ProcessType</key>
   <string>Background</string>
 </dict>
@@ -35811,7 +35615,7 @@ function listRegisteredUnits(kind, backend, unitDir = defaultUnitDir(backend)) {
   const out = [];
   for (const file of files) {
     const name = nameFromUnitFile(kind, file, backend);
-    if (name) out.push({ name, unitPath: (0, import_node_path5.join)(unitDir, file) });
+    if (name) out.push({ name, unitPath: (0, import_node_path4.join)(unitDir, file) });
   }
   return out.sort((a, b) => a.name.localeCompare(b.name));
 }
@@ -35843,8 +35647,8 @@ function launchdLabel(kind, name) {
 var import_node_child_process2 = require("node:child_process");
 var import_node_fs6 = require("node:fs");
 var import_node_module = require("node:module");
-var import_node_path6 = require("node:path");
-var CLI_VERSION = true ? "0.36.0-beta.12" : "";
+var import_node_path5 = require("node:path");
+var CLI_VERSION = true ? "0.36.0-beta.15" : "";
 function fail(message) {
   console.error(message);
   process.exit(1);
@@ -35877,18 +35681,18 @@ function readServicePkg(kind, pkgJsonPath) {
   }
   const binRel = typeof pkg.bin === "string" ? pkg.bin : pkg.bin?.[PACKAGES[kind].bin];
   if (!binRel) return null;
-  const binPath = (0, import_node_path6.join)((0, import_node_path6.dirname)(pkgJsonPath), binRel);
+  const binPath = (0, import_node_path5.join)((0, import_node_path5.dirname)(pkgJsonPath), binRel);
   if (!(0, import_node_fs6.existsSync)(binPath)) return null;
   return { binPath, version: pkg.version ?? "unknown" };
 }
 function interpreterFor(binPath, version) {
-  let dir = (0, import_node_path6.dirname)(binPath);
+  let dir = (0, import_node_path5.dirname)(binPath);
   for (let i = 0; i < 6; i++) {
-    const pathTxt = (0, import_node_path6.join)(dir, "node_modules", "electron", "path.txt");
+    const pathTxt = (0, import_node_path5.join)(dir, "node_modules", "electron", "path.txt");
     if ((0, import_node_fs6.existsSync)(pathTxt)) {
       try {
         const rel = (0, import_node_fs6.readFileSync)(pathTxt, "utf8").trim();
-        const electron = (0, import_node_path6.join)(dir, "node_modules", "electron", "dist", rel);
+        const electron = (0, import_node_path5.join)(dir, "node_modules", "electron", "dist", rel);
         if ((0, import_node_fs6.existsSync)(electron)) {
           return {
             command: electron,
@@ -35901,7 +35705,7 @@ function interpreterFor(binPath, version) {
       } catch {
       }
     }
-    const parent = (0, import_node_path6.dirname)(dir);
+    const parent = (0, import_node_path5.dirname)(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -35916,7 +35720,7 @@ function resolveServiceBin(kind) {
     // this package's CJS bundle.
     () => {
       try {
-        return (0, import_node_module.createRequire)(process.argv[1] ?? (0, import_node_path6.join)(process.cwd(), "x")).resolve(
+        return (0, import_node_module.createRequire)(process.argv[1] ?? (0, import_node_path5.join)(process.cwd(), "x")).resolve(
           `${pkg}/package.json`
         );
       } catch {
@@ -35927,7 +35731,7 @@ function resolveServiceBin(kind) {
     () => {
       const self2 = process.argv[1];
       if (!self2) return null;
-      const sibling = (0, import_node_path6.join)((0, import_node_path6.dirname)(self2), "..", "..", devDir, "package.json");
+      const sibling = (0, import_node_path5.join)((0, import_node_path5.dirname)(self2), "..", "..", devDir, "package.json");
       return (0, import_node_fs6.existsSync)(sibling) ? sibling : null;
     }
   ];
@@ -35937,8 +35741,8 @@ function resolveServiceBin(kind) {
     const found2 = readServicePkg(kind, path9);
     if (found2) return interpreterFor(found2.binPath, found2.version);
   }
-  const prefix = (0, import_node_path6.join)(getDataDir(), `${kind}-runtime`);
-  const installed = (0, import_node_path6.join)(prefix, "node_modules", pkg, "package.json");
+  const prefix = getServiceRuntimeDir(kind);
+  const installed = (0, import_node_path5.join)(prefix, "node_modules", pkg, "package.json");
   const wanted = CLI_VERSION ? `${pkg}@${CLI_VERSION}` : `${pkg}@beta`;
   if (!(0, import_node_fs6.existsSync)(installed) || CLI_VERSION && readServicePkg(kind, installed)?.version !== CLI_VERSION) {
     console.log(`Installing ${wanted}\u2026`);
@@ -35970,13 +35774,13 @@ function ensureLogDir(kind, root) {
   (0, import_node_fs6.mkdirSync)(dir, { recursive: true });
   return dir;
 }
-function logDirFor(kind, root) {
-  return kind === "hub" ? (0, import_node_path6.join)(root, "storage", "logs") : (0, import_node_path6.join)(root, "logs");
+function logDirFor(_kind, root) {
+  return (0, import_node_path5.join)(root, "logs");
 }
 function serviceLogPaths(kind, root) {
   const dir = logDirFor(kind, root);
   const names = serviceLogNames(kind);
-  return { out: (0, import_node_path6.join)(dir, names.out), err: (0, import_node_path6.join)(dir, names.err) };
+  return { out: (0, import_node_path5.join)(dir, names.out), err: (0, import_node_path5.join)(dir, names.err) };
 }
 function failWithLog(kind, name, logPath, what) {
   let detail = "";
@@ -36006,7 +35810,7 @@ function readServiceLogTail(kind, root, lines) {
   const chunks = [];
   for (const f of files) {
     try {
-      chunks.push((0, import_node_fs6.readFileSync)((0, import_node_path6.join)(dir, f), "utf8"));
+      chunks.push((0, import_node_fs6.readFileSync)((0, import_node_path5.join)(dir, f), "utf8"));
     } catch {
     }
   }
@@ -36023,7 +35827,7 @@ function followServiceLog(args) {
   }
   const dir = logDirFor(kind, root);
   if (!(0, import_node_fs6.existsSync)(dir)) fail(`No log directory at ${shortenPath(dir)}.`);
-  const candidates = (0, import_node_fs6.readdirSync)(dir).filter((f) => f.endsWith(".log")).map((f) => ({ f, path: (0, import_node_path6.join)(dir, f), mtime: (0, import_node_fs6.statSync)((0, import_node_path6.join)(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime);
+  const candidates = (0, import_node_fs6.readdirSync)(dir).filter((f) => f.endsWith(".log")).map((f) => ({ f, path: (0, import_node_path5.join)(dir, f), mtime: (0, import_node_fs6.statSync)((0, import_node_path5.join)(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime);
   if (candidates.length === 0) fail(`No log files in ${shortenPath(dir)}.`);
   const target = candidates[0].path;
   const targs = follow ? ["-f", "-n", String(lines), target] : ["-n", String(lines), target];
@@ -36192,20 +35996,11 @@ ${hint}` : ""}`);
 
 // src/commands/hub.ts
 var HUB_PACKAGE = servicePackage("hub");
-function outOfBlockPorts() {
-  if (!hasLocalDatabase()) return [];
-  try {
-    const port = getServerPort();
-    return port ? [port] : [];
-  } catch {
-    return [];
-  }
-}
 function discoverAllHubs() {
-  return discoverHubs({ extraPorts: outOfBlockPorts() });
+  return discoverHubs();
 }
 function findAnyHub(nameOrPort) {
-  return findHub(nameOrPort, { extraPorts: outOfBlockPorts() });
+  return findHub(nameOrPort);
 }
 function formatUptime(ms) {
   const s = Math.floor(ms / 1e3);
@@ -36277,8 +36072,8 @@ async function launchHub(args) {
   const bin = resolveServiceBin("hub");
   const logDir = ensureLogDir("hub", root);
   const logs = serviceLogPaths("hub", root);
-  const probePort2 = address !== void 0 ? parseHubAddress(address)?.port : port;
-  const findIt = () => probePort2 === void 0 ? findAnyHub(name) : findHub(String(probePort2));
+  const probePort = address !== void 0 ? parseHubAddress(address)?.port : port;
+  const findIt = () => probePort === void 0 ? findAnyHub(name) : findHub(String(probePort));
   if (backend === "none") {
     const out = (0, import_node_fs7.openSync)(logs.out, "a");
     const child = (0, import_node_child_process3.spawn)(bin.command, bin.args, {
@@ -36511,7 +36306,7 @@ function hubCommand() {
     "Externally-reachable address of this hub \u2014 makes it a REMOTE hub (auth + TLS + wss join tokens)"
   ).option("--bind <host[:port]>", "Address to bind (default: loopback, or 0.0.0.0 when remote)").action(
     async (name, opts) => {
-      const root = (0, import_node_path7.resolve)(opts.root ?? process.cwd());
+      const root = (0, import_node_path6.resolve)(opts.root ?? process.cwd());
       const port = opts.port === void 0 ? void 0 : Number(opts.port);
       if (port !== void 0 && (!Number.isInteger(port) || port < 1 || port > 65535)) {
         fail(`Invalid --port ${opts.port} \u2014 expected an integer 1-65535.`);
@@ -36556,13 +36351,13 @@ Start it with \`slay hub start ${name}\`, or remove it with \`slay hub rm ${name
         );
       }
       if (publicAddress !== void 0) {
-        updateSlayzoneConfig(
+        updateHubConfigFile(
           {
             mode: "remote",
             publicAddress,
             ...address !== void 0 ? { address } : {}
           },
-          (0, import_node_path7.join)(root, "config.json")
+          (0, import_node_path6.join)(root, "hub.config.json")
         );
         console.log("Mode:   remote (client auth + TLS enforced)");
         console.log(`Bind:   ${address ?? "(hub block default)"}`);
@@ -36792,7 +36587,7 @@ machines dial, recreate it with \`--public-address <host:port>\`.`
 // src/commands/runner.ts
 var import_node_child_process4 = require("node:child_process");
 var import_node_fs8 = require("node:fs");
-var import_node_path8 = require("node:path");
+var import_node_path7 = require("node:path");
 
 // ../../shared/platform/src/join-token.ts
 var JOIN_TOKEN_PREFIX = "szjt1";
@@ -36819,7 +36614,7 @@ var RUNNER_PACKAGE = servicePackage("runner");
 var ENROLL_TIMEOUT_MS = 3e4;
 var CONNECTED_RE = /"mode":"(enroll|hello)"/;
 function configPathFor(root) {
-  return (0, import_node_path8.join)(root, "config.json");
+  return (0, import_node_path7.join)(root, "runner.config.json");
 }
 function warnIfLoopbackHub(hubUrl) {
   if (!isLoopbackRunnerUrl(hubUrl)) return;
@@ -36833,7 +36628,8 @@ never connect. For a hub other machines can reach, recreate it with
 }
 function isEnrolled(root) {
   try {
-    return (0, import_node_fs8.readdirSync)((0, import_node_path8.join)(root, "runners")).some((f) => f.endsWith(".json"));
+    const parsed = JSON.parse((0, import_node_fs8.readFileSync)((0, import_node_path7.join)(root, "runner.state.json"), "utf8"));
+    return typeof parsed === "object" && parsed !== null && Object.keys(parsed).length > 0;
   } catch {
     return false;
   }
@@ -37014,14 +36810,22 @@ Run \`slay runner mint\` there, or put the hub in remote mode (\`slay hub create
   cmd.command("ls").description("List the runners installed on this machine").option("--json", "Output as JSON").action((opts) => {
     const backend = detectBackend();
     if (backend === "none") {
-      console.log("This platform has no user service manager \u2014 no runners can be registered.");
+      if (opts.json) {
+        console.log("[]");
+        return;
+      }
+      console.log(
+        "No runners installed \u2014 this platform has no user service manager, so runners cannot be registered here."
+      );
+      console.log(`Run one in the foreground instead:
+  npx ${RUNNER_PACKAGE}`);
       return;
     }
     const units = listRegisteredUnits("runner", backend);
     const rows = units.map((u) => {
       const root = readUnitRoot("runner", u.name, backend);
       const status = supervisorStatus("runner", backend, u.name);
-      const hubUrl = root ? loadSlayzoneConfig(configPathFor(root)).hubUrl ?? null : null;
+      const hubUrl = root ? loadRunnerConfigFile(configPathFor(root)).hubUrl ?? null : null;
       return {
         name: u.name,
         unitPath: u.unitPath,
@@ -37073,7 +36877,7 @@ Runner "${r.name}" is stopped. Start it: slay runner start ${r.name}`);
     "Filesystem root the runner may operate under (repeatable; default: the runner root)",
     (value, previous = []) => [...previous, value]
   ).action(async (name, opts) => {
-    const root = (0, import_node_path8.resolve)(opts.root ?? process.cwd());
+    const root = (0, import_node_path7.resolve)(opts.root ?? process.cwd());
     const backend = resolveBackend();
     const decoded = decodeJoinToken(opts.token);
     if (!decoded) {
@@ -37096,15 +36900,15 @@ Mint one on the hub:
 Start it with \`slay runner start ${name}\`, or remove it with \`slay runner rm ${name}\`.`
       );
     }
-    const occupant = loadSlayzoneConfig(configPathFor(root)).runnerName;
+    const occupant = loadRunnerConfigFile(configPathFor(root)).runnerName;
     if (occupant !== void 0) {
       fail(
         `A runner is already installed in ${shortenPath(root)} \u2014 "${occupant}".
 ` + (occupant === name ? `Start it with \`slay runner start ${name}\`, or remove it with \`slay runner rm ${name}\`.` : `Give this runner its own directory with \`--root <dir>\`, or remove "${occupant}" first with \`slay runner rm ${occupant}\`.`)
       );
     }
-    const allowedRoots = opts.allow && opts.allow.length > 0 ? opts.allow.map((d) => (0, import_node_path8.resolve)(d)) : [root];
-    updateSlayzoneConfig(
+    const allowedRoots = opts.allow && opts.allow.length > 0 ? opts.allow.map((d) => (0, import_node_path7.resolve)(d)) : [root];
+    updateRunnerConfigFile(
       {
         joinToken: opts.token,
         hubUrl: decoded.hubUrl,
@@ -37208,30 +37012,189 @@ Start it with \`slay runner start ${name}\`, or remove it with \`slay runner rm
   return cmd;
 }
 
+// src/commands/update.ts
+var import_node_child_process5 = require("node:child_process");
+var import_node_fs9 = require("node:fs");
+var import_node_os2 = require("node:os");
+var import_node_path8 = require("node:path");
+var PACKAGE_NAMES = ["@slayzone/cli", "@slayzone/runner", "@slayzone/hub"];
+var KIND_FOR_PACKAGE = {
+  "@slayzone/hub": "hub",
+  "@slayzone/runner": "runner"
+};
+function runCapture(bin, args) {
+  try {
+    return (0, import_node_child_process5.execFileSync)(bin, args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+  } catch {
+    return null;
+  }
+}
+function bunGlobalRoot() {
+  const base = process.env.BUN_INSTALL || (0, import_node_path8.join)((0, import_node_os2.homedir)(), ".bun");
+  const dir = (0, import_node_path8.join)(base, "install", "global", "node_modules");
+  return (0, import_node_fs9.existsSync)(dir) ? dir : null;
+}
+var MANAGERS = [
+  {
+    id: "npm",
+    bin: "npm",
+    globalRoot: () => runCapture("npm", ["root", "-g"]),
+    installArgs: (names, target) => ["install", "-g", ...names.map((n) => `${n}@${target}`)]
+  },
+  {
+    id: "pnpm",
+    bin: "pnpm",
+    globalRoot: () => runCapture("pnpm", ["root", "-g"]),
+    // pnpm prompts interactively (or silently skips, off a TTY) before running a
+    // global package's install scripts — `--allow-build=<name>` pre-approves it,
+    // needed for hub/runner's native rebuild (better-sqlite3/node-pty). Verified
+    // via `pnpm add --help` (10.30.3); harmless to pass for cli, which has none.
+    installArgs: (names, target) => [
+      "add",
+      "-g",
+      ...names.filter((n) => KIND_FOR_PACKAGE[n]).map((n) => `--allow-build=${n}`),
+      ...names.map((n) => `${n}@${target}`)
+    ]
+  },
+  {
+    id: "bun",
+    bin: "bun",
+    globalRoot: bunGlobalRoot,
+    // Same problem as pnpm's build gate, bun's own flavor: postinstall scripts
+    // don't run for a package unless it's trusted. `--trust` opts the packages
+    // in this install into that list. Verified via `bun add --help` (1.3.6).
+    installArgs: (names, target) => [
+      "add",
+      "-g",
+      ...names.some((n) => KIND_FOR_PACKAGE[n]) ? ["--trust"] : [],
+      ...names.map((n) => `${n}@${target}`)
+    ]
+  }
+];
+function readInstalledVersion(globalRoot, pkg) {
+  const pkgJsonPath = (0, import_node_path8.join)(globalRoot, ...pkg.split("/"), "package.json");
+  if (!(0, import_node_fs9.existsSync)(pkgJsonPath)) return null;
+  try {
+    const parsed = JSON.parse((0, import_node_fs9.readFileSync)(pkgJsonPath, "utf8"));
+    return typeof parsed.version === "string" ? parsed.version : null;
+  } catch {
+    return null;
+  }
+}
+function fetchDistTags() {
+  for (const bin of ["npm", "pnpm"]) {
+    const out = runCapture(bin, ["view", "@slayzone/cli", "dist-tags", "--json"]);
+    if (!out) continue;
+    try {
+      return JSON.parse(out);
+    } catch {
+    }
+  }
+  return null;
+}
+function printRestartHints(updatedPackages) {
+  const backend = resolveBackend();
+  if (backend === "none") return;
+  const hints = [];
+  for (const pkg of updatedPackages) {
+    const kind = KIND_FOR_PACKAGE[pkg];
+    if (!kind) continue;
+    for (const unit of listRegisteredUnits(kind, backend)) {
+      hints.push(`  slay ${kind} restart ${unit.name} --upgrade`);
+    }
+  }
+  if (hints.length === 0) return;
+  console.log("\nRestart to apply:");
+  for (const hint of hints) console.log(hint);
+}
+function updateCommand() {
+  const cmd = new Command("update").description("Update globally installed @slayzone packages (cli, hub, runner) \u2014 npm, pnpm, or bun").option("--check", "Report available updates without installing anything").action((opts) => {
+    const roots = /* @__PURE__ */ new Map();
+    for (const mgr of MANAGERS) {
+      const root = mgr.globalRoot();
+      if (root) roots.set(mgr.id, root);
+    }
+    if (roots.size === 0) {
+      fail("Could not resolve a global install root for npm, pnpm, or bun. Is at least one on PATH?");
+    }
+    const found = [];
+    for (const [manager, root] of roots) {
+      for (const name of PACKAGE_NAMES) {
+        const installedVersion = readInstalledVersion(root, name);
+        if (installedVersion) found.push({ manager, name, installedVersion });
+      }
+    }
+    if (found.length === 0) {
+      console.log("No @slayzone packages found in any global npm, pnpm, or bun install.");
+      return;
+    }
+    const distTags = fetchDistTags();
+    if (!distTags) {
+      fail(
+        "Could not reach the npm registry to check for updates (`npm view @slayzone/cli dist-tags` and `pnpm view` both failed)."
+      );
+    }
+    const onPrerelease = found.some((p2) => p2.installedVersion.includes("-"));
+    const target = (onPrerelease ? distTags.beta : void 0) ?? distTags.latest ?? distTags.beta;
+    if (!target) fail("The registry returned no usable dist-tag for @slayzone/cli.");
+    const managerW = Math.max("MANAGER".length, ...found.map((p2) => p2.manager.length));
+    const nameW = Math.max("PACKAGE".length, ...found.map((p2) => p2.name.length));
+    const versionW = Math.max("INSTALLED".length, ...found.map((p2) => p2.installedVersion.length));
+    console.log(
+      `${"MANAGER".padEnd(managerW)}  ${"PACKAGE".padEnd(nameW)}  ${"INSTALLED".padEnd(versionW)}  STATUS`
+    );
+    for (const p2 of found) {
+      const status = p2.installedVersion === target ? "up to date" : `-> ${target}`;
+      console.log(
+        `${p2.manager.padEnd(managerW)}  ${p2.name.padEnd(nameW)}  ${p2.installedVersion.padEnd(versionW)}  ${status}`
+      );
+    }
+    const outdated = found.filter((p2) => p2.installedVersion !== target);
+    if (outdated.length === 0) {
+      console.log("\nEverything is up to date.");
+      return;
+    }
+    if (opts.check) {
+      console.log("\n--check: nothing installed. Run `slay update` to apply.");
+      return;
+    }
+    const byManager = /* @__PURE__ */ new Map();
+    for (const p2 of outdated) {
+      const list = byManager.get(p2.manager) ?? [];
+      list.push(p2.name);
+      byManager.set(p2.manager, list);
+    }
+    for (const [managerId, names] of byManager) {
+      const mgr = MANAGERS.find((m) => m.id === managerId);
+      if (!mgr) continue;
+      const args = mgr.installArgs(names, target);
+      console.log(`
+[${managerId}] Installing: ${names.map((n) => `${n}@${target}`).join(" ")}`);
+      try {
+        (0, import_node_child_process5.execFileSync)(mgr.bin, args, { stdio: "inherit" });
+      } catch {
+        fail(
+          `${mgr.bin} install failed. Install the packages yourself and retry:
+` + names.map((n) => `  ${mgr.bin} ${mgr.id === "npm" ? "install" : "add"} -g ${n}@${target}`).join("\n")
+        );
+      }
+    }
+    printRestartHints(outdated.map((p2) => p2.name));
+  });
+  return cmd;
+}
+
 // src/index.ts
-process.removeAllListeners("warning");
-process.on("warning", (warning) => {
-  if (warning.name === "ExperimentalWarning" && /SQLite/i.test(warning.message)) return;
-  console.warn(`${warning.name}: ${warning.message}`);
-});
-var program2 = new Command().name("slay").description("SlayZone CLI").version("0.36.0-beta.12").option("--dev", "Use development database (slayzone.dev.sqlite)").option("--hub <name|port>", "Target a specific hub on this machine (see `slay hub ls`)").showSuggestionAfterError(true).showHelpAfterError(true).hook("preAction", async (thisCommand) => {
+var program2 = new Command().name("slay").description("SlayZone CLI").version("0.36.0-beta.15").option("--dev", "Use development database (slayzone.dev.sqlite)").option("--hub <name|port>", "Target a specific hub on this machine (see `slay hub ls`)").showSuggestionAfterError(true).showHelpAfterError(true).hook("preAction", async (thisCommand) => {
   const root = thisCommand.parent ?? thisCommand;
   const opts = root.opts();
   if (opts.dev) process.env.SLAYZONE_DEV = "1";
   if (opts.hub !== void 0) await applyHubOverride(opts.hub);
 });
 async function applyHubOverride(nameOrPort) {
-  let extraPorts = [];
-  if (hasLocalDatabase()) {
-    try {
-      const appPort = getServerPort();
-      if (appPort) extraPorts = [appPort];
-    } catch {
-    }
-  }
-  const hub = await findHub(nameOrPort, { extraPorts });
+  const hub = await findHub(nameOrPort);
   if (!hub) {
-    const running = await discoverHubs({ extraPorts });
+    const running = await discoverHubs();
     console.error(`No hub named or listening on "${nameOrPort}".`);
     console.error(
       running.length > 0 ? `Running hubs: ${running.map((h) => `${h.name} (${h.port})`).join(", ")}` : "No hubs are running on this machine."
@@ -37255,6 +37218,7 @@ program2.addCommand(initCommand());
 program2.addCommand(ptyCommand());
 program2.addCommand(hubCommand());
 program2.addCommand(runnerCommand());
+program2.addCommand(updateCommand());
 program2.parseAsync(process.argv).catch((err) => {
   console.error(err instanceof Error ? err.message : String(err));
   process.exit(1);