@slayzone/hub 0.36.0-beta.12 → 0.36.0-beta.13

package/dist/bin.cjs

@@ -56,6 +56,10 @@ function getSlayzoneReleaseChannel() {
   const raw = process.env.SLAYZONE_RELEASE_CHANNEL?.trim();
   return raw ? raw : "unknown";
 }
+function getSupervisedRoot(role2, channel = getSlayzoneReleaseChannel()) {
+  const bucket = channel === "dev" ? "dev" : "stable";
+  return import_path.default.join(getSlayzoneHomeDir(), bucket, role2);
+}
 function getClaudeSettingsPath() {
   if (process.env.SLAYZONE_CLAUDE_SETTINGS_PATH) return process.env.SLAYZONE_CLAUDE_SETTINGS_PATH;
   const home = process.env.HOME ?? process.env.USERPROFILE ?? import_os.default.homedir();
@@ -18308,7 +18312,7 @@ var init_hub_addr = __esm({
 
 // ../../shared/platform/src/paths.ts
 function getStorageDir() {
-  return (0, import_node_path2.join)(getSlayzoneHomeDir(), "storage");
+  return getSlayzoneHomeDir();
 }
 function ensureDataRoot() {
   const dir = getStorageDir();
@@ -18348,12 +18352,11 @@ function getServerHost() {
   }
   return host;
 }
-var import_node_fs2, import_node_path2, warnedHost, SIDECAR_FIXED_PORT, HUB_PORT_BLOCK, HUB_DYNAMIC_PORT_RANGE;
+var import_node_fs2, warnedHost, SIDECAR_FIXED_PORT, HUB_PORT_BLOCK, HUB_DYNAMIC_PORT_RANGE;
 var init_paths = __esm({
   "../../shared/platform/src/paths.ts"() {
     "use strict";
     import_node_fs2 = require("node:fs");
-    import_node_path2 = require("node:path");
     init_dirs();
     init_hub_addr();
     warnedHost = null;
@@ -18647,6 +18650,82 @@ async function writeFileIfChanged(filePath, content, mode) {
   await import_promises2.default.rename(tmp, target);
   return true;
 }
+async function updateFileAtomically(filePath, merge3, opts = {}) {
+  const { mode, retries = 5 } = opts;
+  const target = await resolveTarget(filePath);
+  await import_promises2.default.mkdir(import_path2.default.dirname(target), { recursive: true });
+  const release = await acquireLock(`${target}.lock`);
+  try {
+    for (let attempt = 0; ; attempt++) {
+      const baseline = await safeReadFile(target);
+      const merged = await merge3(baseline);
+      if (merged == null) return false;
+      const buf = Buffer.isBuffer(merged) ? merged : Buffer.from(merged, "utf8");
+      if (baseline && baseline.equals(buf)) return false;
+      const tmp = `${target}.tmp.${import_crypto.default.randomBytes(6).toString("hex")}`;
+      await import_promises2.default.writeFile(tmp, buf);
+      if (mode != null && process.platform !== "win32") {
+        await import_promises2.default.chmod(tmp, mode);
+      }
+      if (sameBytes(baseline, await safeReadFile(target))) {
+        await import_promises2.default.rename(tmp, target);
+        return true;
+      }
+      await import_promises2.default.rm(tmp, { force: true });
+      if (attempt >= retries) {
+        throw new Error(
+          `[fs-utils] updateFileAtomically: ${target} kept changing underneath ${retries + 1} merge attempts \u2014 giving up rather than writing a stale merge`
+        );
+      }
+      await sleep2(2 ** attempt + Math.floor(Math.random() * 5));
+    }
+  } finally {
+    await release();
+  }
+}
+async function acquireLock(lockPath) {
+  const deadline = Date.now() + LOCK_TIMEOUT_MS;
+  for (; ; ) {
+    try {
+      const handle = await import_promises2.default.open(lockPath, "wx");
+      await handle.writeFile(`${process.pid} ${(/* @__PURE__ */ new Date()).toISOString()}
+`);
+      await handle.close();
+      return async () => {
+        await import_promises2.default.rm(lockPath, { force: true });
+      };
+    } catch (err) {
+      if (!isCode(err, "EEXIST")) throw err;
+      const age = await lockAgeMs(lockPath);
+      if (age === null) continue;
+      if (age > LOCK_STALE_MS) {
+        await import_promises2.default.rm(lockPath, { force: true });
+        continue;
+      }
+      if (Date.now() > deadline) {
+        throw new Error(
+          `[fs-utils] timed out after ${LOCK_TIMEOUT_MS}ms waiting for ${lockPath}`
+        );
+      }
+      await sleep2(5 + Math.floor(Math.random() * 10));
+    }
+  }
+}
+async function lockAgeMs(lockPath) {
+  try {
+    return Date.now() - (await import_promises2.default.stat(lockPath)).mtimeMs;
+  } catch (err) {
+    if (isCode(err, "ENOENT")) return null;
+    throw err;
+  }
+}
+function sameBytes(a, b) {
+  if (a === null || b === null) return a === b;
+  return a.equals(b);
+}
+function sleep2(ms) {
+  return new Promise((resolve5) => setTimeout(resolve5, ms));
+}
 async function safeReadFile(p2) {
   try {
     return await import_promises2.default.readFile(p2);
@@ -18665,15 +18744,20 @@ async function resolveTarget(p2) {
   return p2;
 }
 function isENOENT(err) {
-  return typeof err === "object" && err != null && err.code === "ENOENT";
+  return isCode(err, "ENOENT");
 }
-var import_promises2, import_path2, import_crypto;
+function isCode(err, code) {
+  return typeof err === "object" && err != null && err.code === code;
+}
+var import_promises2, import_path2, import_crypto, LOCK_STALE_MS, LOCK_TIMEOUT_MS;
 var init_fs_utils = __esm({
   "../../shared/platform/src/fs-utils.ts"() {
     "use strict";
     import_promises2 = __toESM(require("fs/promises"), 1);
     import_path2 = __toESM(require("path"), 1);
     import_crypto = __toESM(require("crypto"), 1);
+    LOCK_STALE_MS = 1e4;
+    LOCK_TIMEOUT_MS = 5e3;
   }
 });
 
@@ -19154,6 +19238,7 @@ __export(src_exports, {
   getSlayzoneReleaseChannel: () => getSlayzoneReleaseChannel,
   getStateDir: () => getStateDir,
   getStorageDir: () => getStorageDir,
+  getSupervisedRoot: () => getSupervisedRoot,
   getTrpcPort: () => getTrpcPort,
   hubUrlFromAddr: () => hubUrlFromAddr,
   installCli: () => installCli,
@@ -19174,6 +19259,7 @@ __export(src_exports, {
   stripDeviceStatusQueries: () => stripDeviceStatusQueries,
   stripDeviceStatusResponses: () => stripDeviceStatusResponses,
   toSlzFileUrl: () => toSlzFileUrl,
+  updateFileAtomically: () => updateFileAtomically,
   withResultDedup: () => withResultDedup,
   writeFileIfChanged: () => writeFileIfChanged
 });
@@ -23122,7 +23208,7 @@ var require_BufferList = __commonJS({
         this.head = this.tail = null;
         this.length = 0;
       };
-      BufferList.prototype.join = function join30(s2) {
+      BufferList.prototype.join = function join29(s2) {
         if (this.length === 0) return "";
         var p2 = this.head;
         var ret = "" + p2.data;
@@ -53088,7 +53174,7 @@ var require_common = __commonJS({
     function setup(env2) {
       createDebug.debug = createDebug;
       createDebug.default = createDebug;
-      createDebug.coerce = coerce2;
+      createDebug.coerce = coerce;
       createDebug.disable = disable;
       createDebug.enable = enable;
       createDebug.enabled = enabled;
@@ -53243,7 +53329,7 @@ var require_common = __commonJS({
         }
         return false;
       }
-      function coerce2(val) {
+      function coerce(val) {
         if (val instanceof Error) {
           return val.stack || val.message;
         }
@@ -71669,7 +71755,7 @@ var require_view = __commonJS({
     var dirname11 = path27.dirname;
     var basename6 = path27.basename;
     var extname2 = path27.extname;
-    var join30 = path27.join;
+    var join29 = path27.join;
     var resolve5 = path27.resolve;
     module2.exports = View;
     function View(name, options) {
@@ -71731,12 +71817,12 @@ var require_view = __commonJS({
     };
     View.prototype.resolve = function resolve6(dir, file2) {
       var ext = this.ext;
-      var path28 = join30(dir, file2);
+      var path28 = join29(dir, file2);
       var stat7 = tryStat(path28);
       if (stat7 && stat7.isFile()) {
         return path28;
       }
-      path28 = join30(dir, basename6(file2, ext), "index" + ext);
+      path28 = join29(dir, basename6(file2, ext), "index" + ext);
       stat7 = tryStat(path28);
       if (stat7 && stat7.isFile()) {
         return path28;
@@ -75381,7 +75467,7 @@ var require_send = __commonJS({
     var Stream = require("stream");
     var util2 = require("util");
     var extname2 = path27.extname;
-    var join30 = path27.join;
+    var join29 = path27.join;
     var normalize = path27.normalize;
     var resolve5 = path27.resolve;
     var sep3 = path27.sep;
@@ -75553,7 +75639,7 @@ var require_send = __commonJS({
           return res;
         }
         parts = path28.split(sep3);
-        path28 = normalize(join30(root, path28));
+        path28 = normalize(join29(root, path28));
       } else {
         if (UP_PATH_REGEXP.test(path28)) {
           debug('malicious path "%s"', path28);
@@ -75686,7 +75772,7 @@ var require_send = __commonJS({
           if (err) return self2.onStatError(err);
           return self2.error(404);
         }
-        var p2 = join30(path28, self2._index[i]);
+        var p2 = join29(path28, self2._index[i]);
         debug('stat "%s"', p2);
         fs17.stat(p2, function(err2, stat7) {
           if (err2) return next(err2);
@@ -97938,7 +98024,7 @@ var init_factory = __esm({
         }
         return transformedData;
       };
-      const transformOutput = async (data, unsafe_model, select = [], join30) => {
+      const transformOutput = async (data, unsafe_model, select = [], join29) => {
         const transformSingleOutput = async (data2, unsafe_model2, select2 = []) => {
           if (!data2) return null;
           const newMappedKeys = config3.mapKeysTransformOutput ?? {};
@@ -97974,10 +98060,10 @@ var init_factory = __esm({
           }
           return transformedData2;
         };
-        if (!join30 || Object.keys(join30).length === 0) return await transformSingleOutput(data, unsafe_model, select);
+        if (!join29 || Object.keys(join29).length === 0) return await transformSingleOutput(data, unsafe_model, select);
         unsafe_model = getDefaultModelName(unsafe_model);
         const transformedData = await transformSingleOutput(data, unsafe_model, select);
-        const requiredModels = Object.entries(join30).map(([model, joinConfig]) => ({
+        const requiredModels = Object.entries(join29).map(([model, joinConfig]) => ({
           modelName: getModelName(model),
           defaultModelName: getDefaultModelName(model),
           joinConfig
@@ -98074,8 +98160,8 @@ var init_factory = __esm({
         if (!unsanitizedJoin) return void 0;
         if (Object.keys(unsanitizedJoin).length === 0) return void 0;
         const transformedJoin = {};
-        for (const [model, join30] of Object.entries(unsanitizedJoin)) {
-          if (!join30) continue;
+        for (const [model, join29] of Object.entries(unsanitizedJoin)) {
+          if (!join29) continue;
           const defaultModelName = getDefaultModelName(model);
           const defaultBaseModelName = getDefaultModelName(baseModel);
           let foreignKeys = Object.entries(schema4[defaultModelName].fields).filter(([field, fieldAttributes]) => fieldAttributes.references && getDefaultModelName(fieldAttributes.references.model) === defaultBaseModelName);
@@ -98116,7 +98202,7 @@ var init_factory = __esm({
           const isUnique = to === "id" ? true : foreignKeyAttributes.unique ?? false;
           let limit = options.advanced?.database?.defaultFindManyLimit ?? 100;
           if (isUnique) limit = 1;
-          else if (typeof join30 === "object" && typeof join30.limit === "number") limit = join30.limit;
+          else if (typeof join29 === "object" && typeof join29.limit === "number") limit = join29.limit;
           transformedJoin[getModelName(model)] = {
             on: {
               from,
@@ -98332,21 +98418,21 @@ var init_factory = __esm({
             action: "findOne"
           });
           unsafeModel = getDefaultModelName(unsafeModel);
-          let join30;
+          let join29;
           let passJoinToAdapter = true;
           if (!config3.disableTransformJoin) {
             const result = transformJoinClause(unsafeModel, unsafeJoin, select);
             if (result) {
-              join30 = result.join;
+              join29 = result.join;
               select = result.select;
             }
-            if (!options.experimental?.joins && join30 && Object.keys(join30).length > 0) passJoinToAdapter = false;
-          } else join30 = unsafeJoin;
+            if (!options.experimental?.joins && join29 && Object.keys(join29).length > 0) passJoinToAdapter = false;
+          } else join29 = unsafeJoin;
           debugLog({ method: "findOne" }, `${formatTransactionId(thisTransactionId)} ${formatStep(1, 3)}`, `${formatMethod("findOne")}:`, {
             model,
             where,
             select,
-            join: join30
+            join: join29
           });
           const res = await withSpan(`db findOne ${model}`, {
             [ATTR_DB_OPERATION_NAME]: "findOne",
@@ -98355,14 +98441,14 @@ var init_factory = __esm({
             model,
             where,
             select,
-            join: passJoinToAdapter ? join30 : void 0
+            join: passJoinToAdapter ? join29 : void 0
           }));
           debugLog({ method: "findOne" }, `${formatTransactionId(thisTransactionId)} ${formatStep(2, 3)}`, `${formatMethod("findOne")} ${formatAction("DB Result")}:`, {
             model,
             data: res
           });
           let transformed = res;
-          if (!config3.disableTransformOutput) transformed = await transformOutput(res, unsafeModel, select, join30);
+          if (!config3.disableTransformOutput) transformed = await transformOutput(res, unsafeModel, select, join29);
           debugLog({ method: "findOne" }, `${formatTransactionId(thisTransactionId)} ${formatStep(3, 3)}`, `${formatMethod("findOne")} ${formatAction("Parsed Result")}:`, {
             model,
             data: transformed
@@ -98380,23 +98466,23 @@ var init_factory = __esm({
             action: "findMany"
           });
           unsafeModel = getDefaultModelName(unsafeModel);
-          let join30;
+          let join29;
           let passJoinToAdapter = true;
           if (!config3.disableTransformJoin) {
             const result = transformJoinClause(unsafeModel, unsafeJoin, select);
             if (result) {
-              join30 = result.join;
+              join29 = result.join;
               select = result.select;
             }
-            if (!options.experimental?.joins && join30 && Object.keys(join30).length > 0) passJoinToAdapter = false;
-          } else join30 = unsafeJoin;
+            if (!options.experimental?.joins && join29 && Object.keys(join29).length > 0) passJoinToAdapter = false;
+          } else join29 = unsafeJoin;
           debugLog({ method: "findMany" }, `${formatTransactionId(thisTransactionId)} ${formatStep(1, 3)}`, `${formatMethod("findMany")}:`, {
             model,
             where,
             limit,
             sortBy,
             offset,
-            join: join30
+            join: join29
           });
           const res = await withSpan(`db findMany ${model}`, {
             [ATTR_DB_OPERATION_NAME]: "findMany",
@@ -98408,7 +98494,7 @@ var init_factory = __esm({
             select,
             sortBy,
             offset,
-            join: passJoinToAdapter ? join30 : void 0
+            join: passJoinToAdapter ? join29 : void 0
           }));
           debugLog({ method: "findMany" }, `${formatTransactionId(thisTransactionId)} ${formatStep(2, 3)}`, `${formatMethod("findMany")} ${formatAction("DB Result")}:`, {
             model,
@@ -98416,7 +98502,7 @@ var init_factory = __esm({
           });
           let transformed = res;
           if (!config3.disableTransformOutput) transformed = await Promise.all(res.map(async (r) => {
-            return await transformOutput(r, unsafeModel, void 0, join30);
+            return await transformOutput(r, unsafeModel, void 0, join29);
           }));
           debugLog({ method: "findMany" }, `${formatTransactionId(thisTransactionId)} ${formatStep(3, 3)}`, `${formatMethod("findMany")} ${formatAction("Parsed Result")}:`, {
             model,
@@ -98821,7 +98907,7 @@ var init_dist5 = __esm({
               return sortBy.direction === "asc" ? comparison : -comparison;
             });
           };
-          function convertWhereClause(where, model, join30, select) {
+          function convertWhereClause(where, model, join29, select) {
             const baseRecords = (() => {
               const table = activeDb[model];
               if (!table) {
@@ -98881,14 +98967,14 @@ var init_dist5 = __esm({
               })))));
               return records;
             })();
-            if (!join30) return baseRecords;
+            if (!join29) return baseRecords;
             const grouped = /* @__PURE__ */ new Map();
             const seenIds = /* @__PURE__ */ new Map();
             for (const baseRecord of baseRecords) {
               const baseId = String(baseRecord.id);
               if (!grouped.has(baseId)) {
                 const nested = { ...baseRecord };
-                for (const [joinModel, joinAttr] of Object.entries(join30)) {
+                for (const [joinModel, joinAttr] of Object.entries(join29)) {
                   const joinModelName = getModelName(joinModel);
                   if (joinAttr.relation === "one-to-one") nested[joinModelName] = null;
                   else {
@@ -98899,7 +98985,7 @@ var init_dist5 = __esm({
                 grouped.set(baseId, nested);
               }
               const nestedEntry = grouped.get(baseId);
-              for (const [joinModel, joinAttr] of Object.entries(join30)) {
+              for (const [joinModel, joinAttr] of Object.entries(join29)) {
                 const joinModelName = getModelName(joinModel);
                 const joinTable = activeDb[joinModelName];
                 if (!joinTable) {
@@ -98932,18 +99018,18 @@ var init_dist5 = __esm({
               activeDb[model].push(data);
               return data;
             },
-            findOne: async ({ model, where, select, join: join30 }) => {
-              const res = convertWhereClause(where, model, join30, select);
-              if (join30) {
+            findOne: async ({ model, where, select, join: join29 }) => {
+              const res = convertWhereClause(where, model, join29, select);
+              if (join29) {
                 const resArray = res;
                 if (!resArray.length) return null;
                 return resArray[0];
               }
               return res[0] || null;
             },
-            findMany: async ({ model, where, sortBy, limit, select, offset, join: join30 }) => {
-              const res = convertWhereClause(where || [], model, join30, select);
-              if (join30) {
+            findMany: async ({ model, where, sortBy, limit, select, offset, join: join29 }) => {
+              const res = convertWhereClause(where || [], model, join29, select);
+              if (join29) {
                 const resArray = res;
                 if (!resArray.length) return [];
                 applySortToRecords(resArray, sortBy, model);
@@ -100913,10 +100999,10 @@ var init_query_node = __esm({
           where: node.where ? WhereNode.cloneWithOperation(node.where, "And", operation) : WhereNode.create(operation)
         });
       },
-      cloneWithJoin(node, join30) {
+      cloneWithJoin(node, join29) {
         return freeze({
           ...node,
-          joins: node.joins ? freeze([...node.joins, join30]) : freeze([join30])
+          joins: node.joins ? freeze([...node.joins, join29]) : freeze([join29])
         });
       },
       cloneWithReturning(node, selections) {
@@ -105427,8 +105513,8 @@ var init_with_schema_transformer = __esm({
           this.#collectSchemableIdsFromTableExpr(node.table, schemableIds);
         }
         if ("joins" in node && node.joins) {
-          for (const join30 of node.joins) {
-            this.#collectSchemableIdsFromTableExpr(join30.table, schemableIds);
+          for (const join29 of node.joins) {
+            this.#collectSchemableIdsFromTableExpr(join29.table, schemableIds);
           }
         }
         if ("using" in node && node.using) {
@@ -117609,7 +117695,7 @@ var init_mssql_introspector = __esm({
         return await this.#db.selectFrom("sys.schemas").select("name").execute();
       }
       async getTables(options = { withInternalKyselyTables: false }) {
-        const rawColumns = await this.#db.selectFrom("sys.tables as tables").leftJoin("sys.schemas as table_schemas", "table_schemas.schema_id", "tables.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "tables.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join30) => join30.onRef("comments.major_id", "=", "tables.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).$if(!options.withInternalKyselyTables, (qb) => qb.where("tables.name", "!=", DEFAULT_MIGRATION_TABLE).where("tables.name", "!=", DEFAULT_MIGRATION_LOCK_TABLE)).select([
+        const rawColumns = await this.#db.selectFrom("sys.tables as tables").leftJoin("sys.schemas as table_schemas", "table_schemas.schema_id", "tables.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "tables.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join29) => join29.onRef("comments.major_id", "=", "tables.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).$if(!options.withInternalKyselyTables, (qb) => qb.where("tables.name", "!=", DEFAULT_MIGRATION_TABLE).where("tables.name", "!=", DEFAULT_MIGRATION_LOCK_TABLE)).select([
           "tables.name as table_name",
           (eb) => eb.ref("tables.type").$castTo().as("table_type"),
           "table_schemas.name as table_schema_name",
@@ -117624,7 +117710,7 @@ var init_mssql_introspector = __esm({
           "types.name as type_name",
           "type_schemas.name as type_schema_name",
           "comments.value as column_comment"
-        ]).unionAll(this.#db.selectFrom("sys.views as views").leftJoin("sys.schemas as view_schemas", "view_schemas.schema_id", "views.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "views.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join30) => join30.onRef("comments.major_id", "=", "views.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).select([
+        ]).unionAll(this.#db.selectFrom("sys.views as views").leftJoin("sys.schemas as view_schemas", "view_schemas.schema_id", "views.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "views.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join29) => join29.onRef("comments.major_id", "=", "views.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).select([
           "views.name as table_name",
           "views.type as table_type",
           "view_schemas.name as table_schema_name",
@@ -118714,10 +118800,10 @@ var init_dist7 = __esm({
             mysqlNoIdWarned = true;
             logger.warn(`[Kysely Adapter] MySQL does not support INSERT...RETURNING. With generateId set to false, the adapter uses best-effort fallback strategies (unique columns, full-field match) to retrieve inserted rows. For reliable behavior, use Better Auth's default ID generation, a custom generateId function, or generateId: "serial" for auto-increment.`);
           }
-          const selectAllJoins = (join30) => {
+          const selectAllJoins = (join29) => {
             const allSelects = [];
             const allSelectsStr = [];
-            if (join30) for (const [joinModel, _2] of Object.entries(join30)) {
+            if (join29) for (const [joinModel, _2] of Object.entries(join29)) {
               const fields = schema4[getDefaultModelName(joinModel)]?.fields;
               const [_joinModelSchema, joinModelName] = joinModel.includes(".") ? joinModel.split(".") : [void 0, joinModel];
               if (!fields) continue;
@@ -118942,7 +119028,7 @@ var init_dist7 = __esm({
             async create({ data, model }) {
               return await withReturning(data, db2.insertInto(model).values(data), model, []);
             },
-            async findOne({ model, where, select, join: join30 }) {
+            async findOne({ model, where, select, join: join29 }) {
               const { and, or } = convertWhereClause(model, where);
               let query = db2.selectFrom((eb) => {
                 let b = eb.selectFrom(model);
@@ -118955,19 +119041,19 @@ var init_dist7 = __esm({
                 else b = b.selectAll();
                 return b.as("primary");
               }).selectAll("primary");
-              if (join30) for (const [joinModel, joinAttr] of Object.entries(join30)) {
+              if (join29) for (const [joinModel, joinAttr] of Object.entries(join29)) {
                 const [_joinModelSchema, joinModelName] = joinModel.includes(".") ? joinModel.split(".") : [void 0, joinModel];
-                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join31) => join31.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
+                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join30) => join30.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
               }
-              const { allSelectsStr, allSelects } = selectAllJoins(join30);
+              const { allSelectsStr, allSelects } = selectAllJoins(join29);
               query = query.select(allSelects);
               const res = await query.execute();
               if (!res || !Array.isArray(res) || res.length === 0) return null;
               const row = res[0];
-              if (join30) return processJoinedResults(res, join30, allSelectsStr)[0];
+              if (join29) return processJoinedResults(res, join29, allSelectsStr)[0];
               return row;
             },
-            async findMany({ model, where, limit, select, offset, sortBy, join: join30 }) {
+            async findMany({ model, where, limit, select, offset, sortBy, join: join29 }) {
               const { and, or } = convertWhereClause(model, where);
               let query = db2.selectFrom((eb) => {
                 let b = eb.selectFrom(model);
@@ -118996,11 +119082,11 @@ var init_dist7 = __esm({
                 else b = b.selectAll();
                 return b.as("primary");
               }).selectAll("primary");
-              if (join30) for (const [joinModel, joinAttr] of Object.entries(join30)) {
+              if (join29) for (const [joinModel, joinAttr] of Object.entries(join29)) {
                 const [_joinModelSchema, joinModelName] = joinModel.includes(".") ? joinModel.split(".") : [void 0, joinModel];
-                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join31) => join31.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
+                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join30) => join30.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
               }
-              const { allSelectsStr, allSelects } = selectAllJoins(join30);
+              const { allSelectsStr, allSelects } = selectAllJoins(join29);
               query = query.select(allSelects);
               if (sortBy?.field) query = query.orderBy(`${getFieldName({
                 model,
@@ -119008,7 +119094,7 @@ var init_dist7 = __esm({
               })}`, sortBy.direction);
               const res = await query.execute();
               if (!res) return [];
-              if (join30) return processJoinedResults(res, join30, allSelectsStr);
+              if (join29) return processJoinedResults(res, join29, allSelectsStr);
               return res;
             },
             async update({ model, where, update: values }) {
@@ -141900,107 +141986,128 @@ function resolveHubName() {
   const fromEnv = process.env.SLAYZONE_HUB_NAME?.trim();
   if (fromEnv) return fromEnv;
   if (process.env.SLAYZONE_SUPERVISED === "1") return SUPERVISED_HUB_NAME;
-  const fromFile = loadSlayzoneConfig().hubName?.trim();
+  const fromFile = loadHubConfigFile().hubName?.trim();
   if (fromFile) return fromFile;
   return (0, import_node_path.basename)(getSlayzoneHomeDir()) || "hub";
 }
-function getSlayzoneConfigPath() {
-  return (0, import_node_path.join)(getSlayzoneHomeDir(), "config.json");
+function getHubConfigFilePath() {
+  return (0, import_node_path.join)(getSlayzoneHomeDir(), "hub.config.json");
+}
+function getHubStateFilePath() {
+  return (0, import_node_path.join)(getSlayzoneHomeDir(), "hub.state.json");
 }
-function coerce(raw) {
+function legacyConfigFilePathFor(newFilePath) {
+  return (0, import_node_path.join)((0, import_node_path.dirname)(newFilePath), "config.json");
+}
+function coerceHubConfig(raw) {
   const cfg = {};
-  if (typeof raw.runnerTransportSecret === "string" && raw.runnerTransportSecret.length > 0)
-    cfg.runnerTransportSecret = raw.runnerTransportSecret;
   if (typeof raw.address === "string" && raw.address.length > 0) cfg.address = raw.address;
   if (typeof raw.publicAddress === "string" && raw.publicAddress.length > 0)
     cfg.publicAddress = raw.publicAddress;
-  if (typeof raw.hubName === "string" && raw.hubName.trim().length > 0)
-    cfg.hubName = raw.hubName.trim();
   if (raw.mode === "local" || raw.mode === "remote") cfg.mode = raw.mode;
+  if (typeof raw.hubName === "string" && raw.hubName.trim().length > 0) cfg.hubName = raw.hubName.trim();
   if (typeof raw.port === "number" && Number.isInteger(raw.port)) cfg.port = raw.port;
   if (typeof raw.publicUrl === "string" && raw.publicUrl.length > 0) cfg.publicUrl = raw.publicUrl;
-  if (typeof raw.joinToken === "string" && raw.joinToken.length > 0) cfg.joinToken = raw.joinToken;
-  if (typeof raw.runnerName === "string" && raw.runnerName.length > 0)
-    cfg.runnerName = raw.runnerName;
-  if (typeof raw.hubUrl === "string" && raw.hubUrl.length > 0) cfg.hubUrl = raw.hubUrl;
-  if (Array.isArray(raw.allowedRoots)) {
-    const roots = raw.allowedRoots.filter(
-      (r) => typeof r === "string" && r.length > 0
-    );
-    if (roots.length > 0) cfg.allowedRoots = roots;
-  }
-  if (typeof raw.pinnedCertSha256 === "string" && raw.pinnedCertSha256.length > 0)
-    cfg.pinnedCertSha256 = raw.pinnedCertSha256;
   return cfg;
 }
-function loadSlayzoneConfig(configPath = getSlayzoneConfigPath()) {
+function coerceHubState(raw) {
+  const state = {};
+  if (typeof raw.runnerTransportSecret === "string" && raw.runnerTransportSecret.length > 0)
+    state.runnerTransportSecret = raw.runnerTransportSecret;
+  return state;
+}
+function readJsonObject(path27) {
   let raw;
   try {
-    raw = (0, import_node_fs.readFileSync)(configPath, "utf8");
+    raw = (0, import_node_fs.readFileSync)(path27, "utf8");
   } catch (err) {
-    if (err.code === "ENOENT") return {};
+    if (err.code === "ENOENT") return null;
     process.stderr.write(
-      `[slayzone-config] cannot read ${configPath}: ${err instanceof Error ? err.message : String(err)} \u2014 using empty config
+      `[slayzone-config] cannot read ${path27}: ${err instanceof Error ? err.message : String(err)} \u2014 using empty config
 `
     );
-    return {};
+    return null;
   }
   let parsed;
   try {
     parsed = JSON.parse(raw);
   } catch (err) {
     process.stderr.write(
-      `[slayzone-config] ${configPath} is not valid JSON: ${err instanceof Error ? err.message : String(err)} \u2014 using empty config
+      `[slayzone-config] ${path27} is not valid JSON: ${err instanceof Error ? err.message : String(err)} \u2014 using empty config
 `
     );
-    return {};
+    return null;
   }
   if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-    process.stderr.write(`[slayzone-config] ${configPath} is not a JSON object \u2014 using empty config
+    process.stderr.write(`[slayzone-config] ${path27} is not a JSON object \u2014 using empty config
 `);
-    return {};
+    return null;
   }
-  return coerce(parsed);
+  return parsed;
 }
-function saveSlayzoneConfig(cfg, configPath = getSlayzoneConfigPath()) {
-  const dir = (0, import_node_path.dirname)(configPath);
+function writeJsonAtomic(path27, data) {
+  const dir = (0, import_node_path.dirname)(path27);
   (0, import_node_fs.mkdirSync)(dir, { recursive: true, mode: 448 });
-  const tmpPath = `${configPath}.tmp-${process.pid}-${Date.now()}`;
-  (0, import_node_fs.writeFileSync)(tmpPath, `${JSON.stringify(cfg, null, 2)}
+  const tmpPath = `${path27}.tmp-${process.pid}-${Date.now()}`;
+  (0, import_node_fs.writeFileSync)(tmpPath, `${JSON.stringify(data, null, 2)}
 `, { mode: 384 });
   try {
-    (0, import_node_fs.renameSync)(tmpPath, configPath);
+    (0, import_node_fs.renameSync)(tmpPath, path27);
   } catch (err) {
     (0, import_node_fs.rmSync)(tmpPath, { force: true });
     throw err;
   }
 }
-function updateSlayzoneConfig(patch, configPath = getSlayzoneConfigPath()) {
-  const current = loadSlayzoneConfig(configPath);
-  const merged = { ...current };
-  for (const [k, v2] of Object.entries(patch)) {
-    if (v2 !== void 0) merged[k] = v2;
-  }
-  saveSlayzoneConfig(merged, configPath);
-  return merged;
+function loadHubConfigFile(path27 = getHubConfigFilePath()) {
+  const raw = readJsonObject(path27);
+  if (raw) return coerceHubConfig(raw);
+  const legacy = readJsonObject(legacyConfigFilePathFor(path27));
+  return legacy ? coerceHubConfig(legacy) : {};
+}
+function loadHubStateFile(path27 = getHubStateFilePath()) {
+  const raw = readJsonObject(path27);
+  if (raw) return coerceHubState(raw);
+  const legacy = readJsonObject(legacyConfigFilePathFor(path27));
+  return legacy ? coerceHubState(legacy) : {};
+}
+function saveHubStateFile(state, path27 = getHubStateFilePath()) {
+  writeJsonAtomic(path27, state);
 }
-function ensureHubAuthSecret(configPath = getSlayzoneConfigPath()) {
-  const existing = loadSlayzoneConfig(configPath);
+function ensureHubAuthSecret(path27 = getHubStateFilePath()) {
+  const existing = loadHubStateFile(path27);
   if (existing.runnerTransportSecret) return existing.runnerTransportSecret;
   const candidate = (0, import_node_crypto.randomBytes)(32).toString("hex");
   const merged = { ...existing, runnerTransportSecret: candidate };
-  (0, import_node_fs.mkdirSync)((0, import_node_path.dirname)(configPath), { recursive: true, mode: 448 });
+  (0, import_node_fs.mkdirSync)((0, import_node_path.dirname)(path27), { recursive: true, mode: 448 });
   try {
-    (0, import_node_fs.writeFileSync)(configPath, `${JSON.stringify(merged, null, 2)}
+    (0, import_node_fs.writeFileSync)(path27, `${JSON.stringify(merged, null, 2)}
 `, { flag: "wx", mode: 384 });
     return candidate;
   } catch (err) {
     if (err.code !== "EEXIST") throw err;
   }
-  const afterRace = loadSlayzoneConfig(configPath);
-  if (afterRace.runnerTransportSecret) return afterRace.runnerTransportSecret;
-  const finalCfg = updateSlayzoneConfig({ runnerTransportSecret: candidate }, configPath);
-  return finalCfg.runnerTransportSecret ?? candidate;
+  const afterRace = readJsonObject(path27);
+  const afterRaceState = afterRace ? coerceHubState(afterRace) : {};
+  if (afterRaceState.runnerTransportSecret) return afterRaceState.runnerTransportSecret;
+  const finalState = updateHubStateFile({ runnerTransportSecret: candidate }, path27);
+  return finalState.runnerTransportSecret ?? candidate;
+}
+function updateHubStateFile(patch, path27 = getHubStateFilePath()) {
+  const current = readJsonObject(path27);
+  const merged = current ? coerceHubState(current) : {};
+  for (const [k, v2] of Object.entries(patch)) {
+    if (v2 !== void 0) merged[k] = v2;
+  }
+  saveHubStateFile(merged, path27);
+  return merged;
+}
+function updateJsonFile(patch, path27) {
+  const current = readJsonObject(path27) ?? {};
+  const merged = { ...current };
+  for (const [k, v2] of Object.entries(patch)) {
+    if (v2 !== void 0) merged[k] = v2;
+  }
+  writeJsonAtomic(path27, merged);
 }
 
 // ../../shared/platform/src/config-prompt.ts
@@ -142022,7 +142129,7 @@ async function confirm(io, question, { defaultYes = true } = {}) {
   return raw === "y" || raw === "yes";
 }
 async function runInteractiveConfig(opts) {
-  const configPath = opts.configPath ?? getSlayzoneConfigPath();
+  const configPath = opts.configPath;
   const ownIo = opts.io === void 0;
   const io = opts.io ?? createStdioPromptIO();
   try {
@@ -142049,7 +142156,7 @@ async function runInteractiveConfig(opts) {
     if (saved) {
       const patch = {};
       for (const { field, config: config3 } of collected) patch[field.configKey] = config3;
-      updateSlayzoneConfig(patch, configPath);
+      updateJsonFile(patch, configPath);
       io.write(`Saved ${configPath}`);
     } else {
       io.write("Not saved \u2014 using these values for this run only.");
@@ -153389,7 +153496,7 @@ async function setDefaultTemplate(db, projectId, templateId) {
 }
 
 // ../../domains/task/src/server/artifact-store.ts
-var import_node_path4 = __toESM(require("node:path"), 1);
+var import_node_path3 = __toESM(require("node:path"), 1);
 var import_node_fs6 = require("node:fs");
 
 // ../../domains/task/src/shared/types.ts
@@ -153929,7 +154036,7 @@ var updateTaskInputSchema = external_exports.object({
 // ../../domains/task-artifacts/src/server/blob-store.ts
 var import_node_crypto6 = require("node:crypto");
 var import_node_fs5 = require("node:fs");
-var import_node_path3 = __toESM(require("node:path"), 1);
+var import_node_path2 = __toESM(require("node:path"), 1);
 
 // ../../domains/task-artifacts/src/server/errors.ts
 var VersionError = class extends Error {
@@ -153953,13 +154060,13 @@ function isVersionError(err) {
 var BlobStore = class {
   rootDir;
   constructor(dataDir) {
-    this.rootDir = import_node_path3.default.join(dataDir, "blobs");
+    this.rootDir = import_node_path2.default.join(dataDir, "blobs");
   }
   dirFor(hash2) {
-    return import_node_path3.default.join(this.rootDir, hash2.slice(0, 2));
+    return import_node_path2.default.join(this.rootDir, hash2.slice(0, 2));
   }
   blobPath(hash2) {
-    return import_node_path3.default.join(this.dirFor(hash2), hash2.slice(2));
+    return import_node_path2.default.join(this.dirFor(hash2), hash2.slice(2));
   }
   has(hash2) {
     return (0, import_node_fs5.existsSync)(this.blobPath(hash2));
@@ -153989,9 +154096,9 @@ var BlobStore = class {
       return { hash: hash2, size: buf.length, created: false };
     }
     (0, import_node_fs5.mkdirSync)(this.dirFor(hash2), { recursive: true });
-    const tmpDir = import_node_path3.default.join(this.rootDir, ".tmp");
+    const tmpDir = import_node_path2.default.join(this.rootDir, ".tmp");
     (0, import_node_fs5.mkdirSync)(tmpDir, { recursive: true });
-    const tmpPath = import_node_path3.default.join(tmpDir, (0, import_node_crypto6.randomUUID)());
+    const tmpPath = import_node_path2.default.join(tmpDir, (0, import_node_crypto6.randomUUID)());
     (0, import_node_fs5.writeFileSync)(tmpPath, buf);
     try {
       (0, import_node_fs5.renameSync)(tmpPath, finalPath);
@@ -154019,7 +154126,7 @@ var BlobStore = class {
     const hashes = [];
     for (const shard of (0, import_node_fs5.readdirSync)(this.rootDir)) {
       if (shard === ".tmp" || shard.length !== 2) continue;
-      const shardDir = import_node_path3.default.join(this.rootDir, shard);
+      const shardDir = import_node_path2.default.join(this.rootDir, shard);
       for (const rest of (0, import_node_fs5.readdirSync)(shardDir)) {
         hashes.push(shard + rest);
       }
@@ -154217,7 +154324,7 @@ Diff.prototype = {
   tokenize: function tokenize(value) {
     return Array.from(value);
   },
-  join: function join4(chars) {
+  join: function join3(chars) {
     return chars.join("");
   },
   postProcess: function postProcess(changeObjects) {
@@ -155297,7 +155404,7 @@ function buildFolderPathResolver(folders) {
     const f = byId.get(id);
     if (!f) return "";
     const parent = f.parent_id;
-    return parent ? import_node_path4.default.join(folderPath(parent), f.name) : f.name;
+    return parent ? import_node_path3.default.join(folderPath(parent), f.name) : f.name;
   }
   return folderPath;
 }
@@ -155318,14 +155425,14 @@ function collectFolderAndDescendants(folders, rootId) {
   return targetIds;
 }
 function createArtifactStore(dataDir) {
-  const artifactsDir2 = import_node_path4.default.join(dataDir, "artifacts");
+  const artifactsDir2 = import_node_path3.default.join(dataDir, "artifacts");
   function getArtifactFilePath2(taskId, artifactId, title) {
     const ext = getExtensionFromTitle(title) || ".txt";
-    return import_node_path4.default.join(artifactsDir2, taskId, `${artifactId}${ext}`);
+    return import_node_path3.default.join(artifactsDir2, taskId, `${artifactId}${ext}`);
   }
   function getLegacyArtifactFilePath(taskId, artifactId, title) {
     const ext = getExtensionFromTitle(title) || ".txt";
-    return import_node_path4.default.join(dataDir, "assets", taskId, `${artifactId}${ext}`);
+    return import_node_path3.default.join(dataDir, "assets", taskId, `${artifactId}${ext}`);
   }
   async function getRow(db, id) {
     return await db.prepare("SELECT * FROM task_artifacts WHERE id = ?").get(id);
@@ -155455,7 +155562,7 @@ function createArtifactStore(dataDir) {
         dataDir,
         taskId: data.taskId,
         sourcePath: data.sourcePath,
-        title: data.title ?? import_node_path4.default.basename(data.sourcePath)
+        title: data.title ?? import_node_path3.default.basename(data.sourcePath)
       });
       return parseArtifact(row);
     },
@@ -155491,7 +155598,7 @@ function createArtifactStore(dataDir) {
       };
     },
     cleanupTaskArtifacts(taskId) {
-      const taskDir = import_node_path4.default.join(artifactsDir2, taskId);
+      const taskDir = import_node_path3.default.join(artifactsDir2, taskId);
       if ((0, import_node_fs6.existsSync)(taskDir)) (0, import_node_fs6.rmSync)(taskDir, { recursive: true, force: true });
     },
     // --- Versions ---
@@ -156114,12 +156221,12 @@ function redactValue(value) {
 var filesystemBlobWriter = {
   write(bytes, extension) {
     const { mkdirSync: mkdirSync20, writeFileSync: writeFileSync13 } = require("node:fs");
-    const { join: join30 } = require("node:path");
+    const { join: join29 } = require("node:path");
     const { getStorageDir: getStorageDir2 } = (init_src(), __toCommonJS(src_exports));
-    const dir = join30(getStorageDir2(), "diagnostics");
+    const dir = join29(getStorageDir2(), "diagnostics");
     mkdirSync20(dir, { recursive: true });
     const name = `blob-${Date.now()}-${bytes.length}.${extension}`;
-    const path27 = join30(dir, name);
+    const path27 = join29(dir, name);
     writeFileSync13(path27, bytes);
     return path27;
   }
@@ -158511,7 +158618,7 @@ var ClaudeAdapter = class {
 // ../../domains/terminal/src/server/adapters/codex-adapter.ts
 var import_promises4 = require("node:fs/promises");
 var import_node_os2 = require("node:os");
-var import_node_path5 = require("node:path");
+var import_node_path4 = require("node:path");
 
 // ../../domains/terminal/src/server/adapters/types.ts
 function defaultEncodeSubmit(text) {
@@ -158644,7 +158751,7 @@ var CodexAdapter = class _CodexAdapter {
       }
     ];
     for (const dp of datePaths) {
-      const dir = (0, import_node_path5.join)(
+      const dir = (0, import_node_path4.join)(
         (0, import_node_os2.homedir)(),
         ".codex",
         "sessions",
@@ -158655,14 +158762,14 @@ var CodexAdapter = class _CodexAdapter {
       try {
         const files = (await (0, import_promises4.readdir)(dir)).filter((f) => f.endsWith(".jsonl")).sort().reverse();
         for (const file2 of files) {
-          const info2 = await (0, import_promises4.stat)((0, import_node_path5.join)(dir, file2));
+          const info2 = await (0, import_promises4.stat)((0, import_node_path4.join)(dir, file2));
           if (info2.birthtimeMs < spawnedAt - 5e3) break;
           const match = file2.match(
             /([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/i
           );
           if (!match) continue;
           let firstLine;
-          const fh = await (0, import_promises4.open)((0, import_node_path5.join)(dir, file2), "r");
+          const fh = await (0, import_promises4.open)((0, import_node_path4.join)(dir, file2), "r");
           try {
             const buf = Buffer.alloc(4096);
             const { bytesRead } = await fh.read({ buffer: buf, length: 4096 });
@@ -160655,9 +160762,9 @@ async function buildMcpEnv(db, taskId, mode, sessionId, projectId, remote) {
   if (resolvedProjectId) env2.SLAYZONE_PROJECT_ID = resolvedProjectId;
   if (sessionId) env2.SLAYZONE_SESSION_ID = sessionId;
   const hookCapable = Boolean(mode && HOOK_SUPPORTED_AGENT_IDS.has(mode));
+  env2.SLAYZONE_ROOT = getSlayzoneHomeDir();
   function setHookIdentity() {
     env2.SLAYZONE_AGENT_ID = mode;
-    env2.SLAYZONE_ROOT = getSlayzoneHomeDir();
     const ctx = {
       v: 1,
       agentId: mode,
@@ -167818,6 +167925,7 @@ function parseProject(row) {
   if (!row) return null;
   return {
     ...row,
+    starred: Boolean(row.starred),
     columns_config: parseColumnsConfig(row.columns_config),
     execution_context: row.execution_context ? (() => {
       try {
@@ -167886,6 +167994,10 @@ async function updateProject(db, data, iconsDir2) {
       values.push(data.autoCreateWorktreeOnTaskCreate ? 1 : 0);
     }
   }
+  if (data.starred !== void 0) {
+    fields.push("starred = ?");
+    values.push(data.starred ? 1 : 0);
+  }
   if (data.worktreeSourceBranch !== void 0) {
     fields.push("worktree_source_branch = ?");
     values.push(data.worktreeSourceBranch);
@@ -170531,7 +170643,7 @@ var processesRouter = router({
 });
 
 // ../../shared/transport/src/server/routers/projects.ts
-var import_node_path6 = require("node:path");
+var import_node_path5 = require("node:path");
 init_zod();
 var createProjectInput = external_exports.object({
   name: external_exports.string().min(1),
@@ -170540,7 +170652,7 @@ var createProjectInput = external_exports.object({
   columnsConfig: external_exports.array(external_exports.unknown()).optional()
 });
 var updateProjectInput = external_exports.unknown();
-var iconsDir = (dataRoot) => (0, import_node_path6.join)(dataRoot, "project-icons");
+var iconsDir = (dataRoot) => (0, import_node_path5.join)(dataRoot, "project-icons");
 var projectsRouter = router({
   list: publicProcedure.query(({ ctx }) => listAllProjects(ctx.db)),
   create: publicProcedure.input(createProjectInput).mutation(({ ctx, input }) => createProject(ctx.db, input)),
@@ -171483,6 +171595,16 @@ async function listHibernatedSessionIds(db) {
   const rows = await db.prepare("SELECT task_id FROM terminal_tabs WHERE hibernated = 1 AND is_main = 1").all();
   return rows.map((r) => `${r.task_id}:${r.task_id}`);
 }
+async function listAutoRestoreTaskIds(db) {
+  const rows = await db.prepare(
+    `SELECT tt.task_id FROM terminal_tabs tt
+       JOIN tasks t ON t.id = tt.task_id
+       WHERE tt.is_main = 1 AND tt.mode != 'terminal'
+         AND tt.was_spawned = 1 AND tt.hibernated = 0
+         AND t.deleted_at IS NULL`
+  ).all();
+  return rows.map((r) => r.task_id);
+}
 
 // ../../domains/task-terminals/src/server/tabs-store.ts
 function rowToTab(row) {
@@ -171623,6 +171745,9 @@ var taskTerminalsRouter = router({
   list: publicProcedure.input(external_exports.object({ taskId: external_exports.string() })).query(({ ctx, input }) => listTabsForTask(ctx.db, input.taskId)),
   /** Main-tab session ids flagged hibernated — seeds the renderer's 💤 dots at boot. */
   listHibernatedSessions: publicProcedure.query(({ ctx }) => listHibernatedSessionIds(ctx.db)),
+  /** Task ids whose main session was alive at last shutdown and isn't
+   *  hibernated — the boot-restore set (see `listAutoRestoreTaskIds`). */
+  listAutoRestoreTasks: publicProcedure.query(({ ctx }) => listAutoRestoreTaskIds(ctx.db)),
   create: publicProcedure.input(createInput4).mutation(({ ctx, input }) => createTabRow(ctx.db, input)),
   split: publicProcedure.input(external_exports.object({ tabId: external_exports.string() })).mutation(({ ctx, input }) => splitTabRow(ctx.db, input.tabId)),
   moveToGroup: publicProcedure.input(external_exports.object({ tabId: external_exports.string(), targetGroupId: external_exports.string().nullable() })).mutation(({ ctx, input }) => moveTabToGroup(ctx.db, input.tabId, input.targetGroupId)),
@@ -185749,30 +185874,30 @@ var import_node_crypto19 = require("node:crypto");
 var import_node_fs13 = require("node:fs");
 var import_promises13 = require("node:fs/promises");
 var import_node_os3 = require("node:os");
-var import_node_path8 = require("node:path");
+var import_node_path7 = require("node:path");
 var import_promises14 = require("node:stream/promises");
 
 // ../../shared/transport/src/server/http/rest-api/artifacts/shared.ts
-var import_node_path7 = require("node:path");
+var import_node_path6 = require("node:path");
 init_src();
 function getArtifactsDataRoot() {
   return getStorageDir();
 }
-var artifactsDir = (0, import_node_path7.join)(getArtifactsDataRoot(), "artifacts");
+var artifactsDir = (0, import_node_path6.join)(getArtifactsDataRoot(), "artifacts");
 function getArtifactFilePath(taskId, artifactId, title) {
   const ext = getExtensionFromTitle(title) || ".txt";
-  return (0, import_node_path7.join)(artifactsDir, taskId, `${artifactId}${ext}`);
+  return (0, import_node_path6.join)(artifactsDir, taskId, `${artifactId}${ext}`);
 }
 function resolveArtifactFilePath(taskId, artifactId, title) {
   const ext = getExtensionFromTitle(title) || ".txt";
-  return (0, import_node_path7.join)(getArtifactsDataRoot(), "artifacts", taskId, `${artifactId}${ext}`);
+  return (0, import_node_path6.join)(getArtifactsDataRoot(), "artifacts", taskId, `${artifactId}${ext}`);
 }
 
 // ../../shared/transport/src/server/http/rest-api/artifacts/content.ts
 async function stageRequestBody(req) {
-  const stagingDir = (0, import_node_path8.join)((0, import_node_os3.tmpdir)(), "slayzone-artifact-uploads");
+  const stagingDir = (0, import_node_path7.join)((0, import_node_os3.tmpdir)(), "slayzone-artifact-uploads");
   (0, import_node_fs13.mkdirSync)(stagingDir, { recursive: true });
-  const tmpPath = (0, import_node_path8.join)(stagingDir, (0, import_node_crypto19.randomUUID)());
+  const tmpPath = (0, import_node_path7.join)(stagingDir, (0, import_node_crypto19.randomUUID)());
   await (0, import_promises14.pipeline)(req, (0, import_node_fs13.createWriteStream)(tmpPath));
   return tmpPath;
 }
@@ -185948,7 +186073,18 @@ function registerArtifactsCrudRoutes(app, deps4) {
         res.status(resolved.status).json({ ok: false, error: resolved.error });
         return;
       }
-      res.json({ ok: true, data: resolved.row });
+      const row = resolved.row;
+      res.json({
+        ok: true,
+        data: {
+          ...row,
+          filePath: resolveArtifactFilePath(
+            String(row.task_id),
+            row.id,
+            String(row.title ?? "")
+          )
+        }
+      });
     } catch (err) {
       res.status(500).json({ ok: false, error: err instanceof Error ? err.message : String(err) });
     }
@@ -186253,7 +186389,7 @@ var import_node_crypto20 = require("node:crypto");
 var import_node_fs14 = require("node:fs");
 var import_promises15 = require("node:fs/promises");
 var import_node_os4 = require("node:os");
-var import_node_path9 = require("node:path");
+var import_node_path8 = require("node:path");
 var import_promises16 = require("node:stream/promises");
 function store3() {
   return createArtifactStore(getArtifactsDataRoot());
@@ -186299,9 +186435,9 @@ function parseAuthor(type2, id) {
   return { type: type2, id: typeof id === "string" && id ? id : null };
 }
 async function stageRequestBody2(req) {
-  const stagingDir = (0, import_node_path9.join)((0, import_node_os4.tmpdir)(), "slayzone-artifact-uploads");
+  const stagingDir = (0, import_node_path8.join)((0, import_node_os4.tmpdir)(), "slayzone-artifact-uploads");
   (0, import_node_fs14.mkdirSync)(stagingDir, { recursive: true });
-  const tmpPath = (0, import_node_path9.join)(stagingDir, (0, import_node_crypto20.randomUUID)());
+  const tmpPath = (0, import_node_path8.join)(stagingDir, (0, import_node_crypto20.randomUUID)());
   await (0, import_promises16.pipeline)(req, (0, import_node_fs14.createWriteStream)(tmpPath));
   return tmpPath;
 }
@@ -186527,7 +186663,7 @@ function registerOpenArtifactRoute(app, deps4) {
 }
 
 // ../../shared/transport/src/server/http/rest-api/artifacts/export-pdf.ts
-var import_node_path10 = require("node:path");
+var import_node_path9 = require("node:path");
 var import_node_fs15 = require("node:fs");
 function registerArtifactsExportPdfRoute(app, deps4) {
   app.post("/api/artifacts/:id/export/pdf", async (req, res) => {
@@ -186562,7 +186698,7 @@ function registerArtifactsExportPdfRoute(app, deps4) {
     const html2 = isMermaid ? exporter.buildMermaidPdfHtml(content, title) : exporter.buildPdfHtml(content, mode, title);
     try {
       const pdfBuffer = await exporter.renderToPdf(html2, isMermaid);
-      (0, import_node_fs15.mkdirSync)((0, import_node_path10.dirname)(outputPath), { recursive: true });
+      (0, import_node_fs15.mkdirSync)((0, import_node_path9.dirname)(outputPath), { recursive: true });
       (0, import_node_fs15.writeFileSync)(outputPath, pdfBuffer);
       res.json({ ok: true, path: outputPath });
     } catch (err) {
@@ -186572,7 +186708,7 @@ function registerArtifactsExportPdfRoute(app, deps4) {
 }
 
 // ../../shared/transport/src/server/http/rest-api/artifacts/export-png.ts
-var import_node_path11 = require("node:path");
+var import_node_path10 = require("node:path");
 var import_node_fs16 = require("node:fs");
 function registerArtifactsExportPngRoute(app, deps4) {
   app.post("/api/artifacts/:id/export/png", async (req, res) => {
@@ -186610,7 +186746,7 @@ function registerArtifactsExportPngRoute(app, deps4) {
     }
     try {
       const pngBuffer = await exporter.renderToPng(html2);
-      (0, import_node_fs16.mkdirSync)((0, import_node_path11.dirname)(outputPath), { recursive: true });
+      (0, import_node_fs16.mkdirSync)((0, import_node_path10.dirname)(outputPath), { recursive: true });
       (0, import_node_fs16.writeFileSync)(outputPath, pngBuffer);
       res.json({ ok: true, path: outputPath });
     } catch (err) {
@@ -186620,7 +186756,7 @@ function registerArtifactsExportPngRoute(app, deps4) {
 }
 
 // ../../shared/transport/src/server/http/rest-api/artifacts/export-html.ts
-var import_node_path12 = require("node:path");
+var import_node_path11 = require("node:path");
 var import_node_fs17 = require("node:fs");
 function registerArtifactsExportHtmlRoute(app, deps4) {
   app.post("/api/artifacts/:id/export/html", async (req, res) => {
@@ -186653,7 +186789,7 @@ function registerArtifactsExportHtmlRoute(app, deps4) {
     const content = (0, import_node_fs17.readFileSync)(srcPath, "utf-8");
     const isMermaid = mode === "mermaid-preview";
     const html2 = isMermaid ? exporter.buildMermaidPdfHtml(content, title) : exporter.buildPdfHtml(content, mode, title);
-    (0, import_node_fs17.mkdirSync)((0, import_node_path12.dirname)(outputPath), { recursive: true });
+    (0, import_node_fs17.mkdirSync)((0, import_node_path11.dirname)(outputPath), { recursive: true });
     (0, import_node_fs17.writeFileSync)(outputPath, html2, "utf-8");
     res.json({ ok: true, path: outputPath });
   });
@@ -187304,7 +187440,7 @@ function registerBrowserContentRoute(app, deps4) {
 
 // ../../shared/transport/src/server/http/rest-api/browser/screenshot.ts
 var import_node_os5 = require("node:os");
-var import_node_path13 = require("node:path");
+var import_node_path12 = require("node:path");
 var import_node_crypto21 = require("node:crypto");
 var import_node_fs18 = require("node:fs");
 function registerBrowserScreenshotRoute(app, deps4) {
@@ -187318,12 +187454,12 @@ function registerBrowserScreenshotRoute(app, deps4) {
         res.status(500).json({ error: "Captured image is empty" });
         return;
       }
-      const dir = (0, import_node_path13.join)((0, import_node_os5.tmpdir)(), "slayzone", "browser-screenshots");
+      const dir = (0, import_node_path12.join)((0, import_node_os5.tmpdir)(), "slayzone", "browser-screenshots");
       (0, import_node_fs18.mkdirSync)(dir, { recursive: true });
       try {
         const cutoff = Date.now() - 36e5;
         for (const f of (0, import_node_fs18.readdirSync)(dir)) {
-          const fp = (0, import_node_path13.join)(dir, f);
+          const fp = (0, import_node_path12.join)(dir, f);
           try {
             if ((0, import_node_fs18.statSync)(fp).mtimeMs < cutoff) (0, import_node_fs18.unlinkSync)(fp);
           } catch {
@@ -187331,7 +187467,7 @@ function registerBrowserScreenshotRoute(app, deps4) {
         }
       } catch {
       }
-      const filePath = (0, import_node_path13.join)(dir, `${(0, import_node_crypto21.randomUUID)()}.png`);
+      const filePath = (0, import_node_path12.join)(dir, `${(0, import_node_crypto21.randomUUID)()}.png`);
       (0, import_node_fs18.writeFileSync)(filePath, image.toPNG());
       res.json({ ok: true, path: filePath });
     } catch (err) {
@@ -188417,7 +188553,7 @@ function createMcpRestApp(deps4) {
 
 // ../../domains/hub-auth/src/server/auth.ts
 var import_node_fs20 = require("node:fs");
-var import_node_path15 = require("node:path");
+var import_node_path14 = require("node:path");
 var import_node_sqlite = require("node:sqlite");
 
 // ../../../node_modules/.pnpm/@better-auth+api-key@1.6.23_@better-auth+core@1.6.23_@better-auth+utils@0.4.2_@better-f_efec3e750119bc24bd5a4522a96cf31b/node_modules/@better-auth/api-key/dist/version-Cd4fCeRN.mjs
@@ -188949,7 +189085,7 @@ init_ip();
 var import_node_fs19 = __toESM(require("node:fs"), 1);
 var import_promises17 = __toESM(require("node:fs/promises"), 1);
 var import_node_os6 = __toESM(require("node:os"), 1);
-var import_node_path14 = __toESM(require("node:path"), 1);
+var import_node_path13 = __toESM(require("node:path"), 1);
 init_env();
 init_dist4();
 init_base64();
@@ -189189,7 +189325,7 @@ async function readRootPackageJson() {
   try {
     const cwd = process.cwd();
     if (!cwd) return void 0;
-    const raw = await import_promises17.default.readFile(import_node_path14.default.join(cwd, "package.json"), "utf-8");
+    const raw = await import_promises17.default.readFile(import_node_path13.default.join(cwd, "package.json"), "utf-8");
     packageJSONCache = JSON.parse(raw);
     return packageJSONCache;
   } catch {
@@ -189200,7 +189336,7 @@ async function getPackageVersion(pkg) {
   try {
     const cwd = process.cwd();
     if (!cwd) throw new Error("no-cwd");
-    const pkgJsonPath = import_node_path14.default.join(cwd, "node_modules", pkg, "package.json");
+    const pkgJsonPath = import_node_path13.default.join(cwd, "node_modules", pkg, "package.json");
     const raw = await import_promises17.default.readFile(pkgJsonPath, "utf-8");
     return JSON.parse(raw).version || await getVersionFromLocalPackageJson(pkg) || void 0;
   } catch {
@@ -192529,7 +192665,7 @@ function buildAuth(config3, database) {
   });
 }
 async function createHubAuth(config3) {
-  (0, import_node_fs20.mkdirSync)((0, import_node_path15.dirname)(config3.dbPath), { recursive: true });
+  (0, import_node_fs20.mkdirSync)((0, import_node_path14.dirname)(config3.dbPath), { recursive: true });
   const database = new import_node_sqlite.DatabaseSync(config3.dbPath);
   database.exec("PRAGMA journal_mode = WAL;");
   const auth = buildAuth(config3, database);
@@ -193061,7 +193197,7 @@ async function removeHubUser(auth, email3) {
 // ../../domains/hub-identity/src/server/hub-identity.ts
 var import_node_crypto26 = require("node:crypto");
 var import_node_fs21 = require("node:fs");
-var import_node_path16 = require("node:path");
+var import_node_path15 = require("node:path");
 var x509 = __toESM(require_x509_cjs(), 1);
 var cryptoProvider = import_node_crypto26.webcrypto;
 var IDENTITY_DIR = "identity";
@@ -193082,9 +193218,9 @@ var SAN_NAMES = [
   { type: "ip", value: "127.0.0.1" }
 ];
 async function loadOrCreateHubIdentity(dir) {
-  const identityDir = (0, import_node_path16.join)(dir, IDENTITY_DIR);
-  const keyPath = (0, import_node_path16.join)(identityDir, KEY_FILE);
-  const certPath = (0, import_node_path16.join)(identityDir, CERT_FILE);
+  const identityDir = (0, import_node_path15.join)(dir, IDENTITY_DIR);
+  const keyPath = (0, import_node_path15.join)(identityDir, KEY_FILE);
+  const certPath = (0, import_node_path15.join)(identityDir, CERT_FILE);
   const keyRaw = readFileOrNull(keyPath);
   const certRaw = readFileOrNull(certPath);
   const hadArtifacts = keyRaw !== null || certRaw !== null;
@@ -193200,7 +193336,7 @@ function fsyncDir(dir) {
 function sweepStaleTmp(dir) {
   try {
     for (const name of (0, import_node_fs21.readdirSync)(dir)) {
-      if (name.endsWith(TMP_SUFFIX)) (0, import_node_fs21.rmSync)((0, import_node_path16.join)(dir, name), { force: true });
+      if (name.endsWith(TMP_SUFFIX)) (0, import_node_fs21.rmSync)((0, import_node_path15.join)(dir, name), { force: true });
     }
   } catch {
   }
@@ -193217,7 +193353,7 @@ init_src();
 
 // src/db.ts
 var import_better_sqlite32 = __toESM(require("better-sqlite3"), 1);
-var import_node_path18 = __toESM(require("node:path"), 1);
+var import_node_path17 = __toESM(require("node:path"), 1);
 init_src();
 
 // ../../domains/terminal/src/server/chat-queue-txns.ts
@@ -193793,7 +193929,7 @@ var templatesTxns = {
 };
 
 // ../../domains/task-artifacts/src/server/artifact-txns.ts
-var import_node_path17 = require("node:path");
+var import_node_path16 = require("node:path");
 var import_node_fs22 = require("node:fs");
 var import_node_crypto27 = require("node:crypto");
 function seedInitialVersionsInWorker(rawDb, blobStore, artifactsDir2) {
@@ -193817,7 +193953,7 @@ function seedInitialVersionsInWorker(rawDb, blobStore, artifactsDir2) {
   const setCurrent = db.prepare("UPDATE task_artifacts SET current_version_id = ? WHERE id = ?");
   for (const row of needsSeed) {
     const ext = getExtensionFromTitle(row.title) || ".txt";
-    const filePath = (0, import_node_path17.join)(artifactsDir2, row.task_id, `${row.id}${ext}`);
+    const filePath = (0, import_node_path16.join)(artifactsDir2, row.task_id, `${row.id}${ext}`);
     if (!(0, import_node_fs22.existsSync)(filePath)) {
       skippedMissing++;
       continue;
@@ -197677,6 +197813,18 @@ ${body}` : `${renderedFrontmatter}
     up: (db) => {
       db.exec(`ALTER TABLE task_artifacts ADD COLUMN zoom_pct INTEGER DEFAULT NULL;`);
     }
+  },
+  {
+    version: 153,
+    up: (db) => {
+      db.exec(`ALTER TABLE projects ADD COLUMN starred INTEGER NOT NULL DEFAULT 0;`);
+    }
+  },
+  {
+    version: 154,
+    up: (db) => {
+      db.exec(`ALTER TABLE processes ADD COLUMN pid INTEGER DEFAULT NULL;`);
+    }
   }
 ];
 var LATEST_MIGRATION_VERSION = migrations[migrations.length - 1].version;
@@ -197737,7 +197885,7 @@ function bootstrapSchema(db) {
 // src/db.ts
 function getDatabasePathFromEnv() {
   const name = getDbName(process.env.SLAYZONE_DEV !== "1");
-  return import_node_path18.default.join(getStorageDir(), name);
+  return import_node_path17.default.join(getStorageDir(), name);
 }
 var SyncSlayzoneDb = class {
   constructor(db) {
@@ -197820,13 +197968,13 @@ function openServerDiagnosticsDatabase() {
 
 // src/composition.ts
 var import_node_events6 = require("node:events");
-var import_node_path20 = require("node:path");
+var import_node_path19 = require("node:path");
 var import_node_os7 = require("node:os");
 
 // src/shell-native.ts
 var import_node_child_process7 = require("node:child_process");
 var import_promises18 = require("node:fs/promises");
-var import_node_path19 = require("node:path");
+var import_node_path18 = require("node:path");
 function openCommand(p2) {
   switch (process.platform) {
     case "darwin":
@@ -197844,7 +197992,7 @@ function revealCommand(p2) {
     case "win32":
       return ["explorer", [`/select,${p2}`]];
     default:
-      return ["xdg-open", [(0, import_node_path19.dirname)(p2)]];
+      return ["xdg-open", [(0, import_node_path18.dirname)(p2)]];
   }
 }
 function openPath(absPath) {
@@ -199139,8 +199287,8 @@ function getDesktopBridgeRestUrl() {
 
 // src/build-info.ts
 function getServerBuildInfo() {
-  const commit = true ? "e148666c" : "dev";
-  const builtAt = true ? "2026-08-05T08:39:09.134Z" : "unknown";
+  const commit = true ? "447107dc" : "dev";
+  const builtAt = true ? "2026-08-05T23:22:30.305Z" : "unknown";
   return { commit, builtAt, buildId: `${commit}@${builtAt}` };
 }
 
@@ -203097,6 +203245,9 @@ function createDbProcessPersistence(db) {
     },
     remove(id) {
       return db.prepare("DELETE FROM processes WHERE id = ?").run(id).then(() => void 0);
+    },
+    updatePid(id, pid) {
+      return db.prepare("UPDATE processes SET pid = ? WHERE id = ?").run(pid, id).then(() => void 0);
     }
   };
 }
@@ -203104,9 +203255,7 @@ function createDbProcessPersistence(db) {
 // ../../domains/processes/src/server/process-backend.ts
 var import_child_process10 = require("child_process");
 init_src();
-function killProcessTree(child, signal = "SIGTERM") {
-  const pid = child.pid;
-  if (pid == null) return;
+function killPidTree(pid, signal = "SIGTERM") {
   if (process.platform === "win32") {
     try {
       (0, import_child_process10.execFileSync)("taskkill", ["/T", "/F", "/PID", String(pid)]);
@@ -203119,6 +203268,19 @@ function killProcessTree(child, signal = "SIGTERM") {
     }
   }
 }
+function killProcessTree(child, signal = "SIGTERM") {
+  const pid = child.pid;
+  if (pid == null) return;
+  killPidTree(pid, signal);
+}
+function getCommandLine(pid) {
+  if (process.platform === "win32") return Promise.resolve(null);
+  return new Promise((resolve5) => {
+    (0, import_child_process10.execFile)("ps", ["-o", "command=", "-p", String(pid)], { timeout: 2e3 }, (err, stdout2) => {
+      resolve5(err ? null : stdout2.trim() || null);
+    });
+  });
+}
 function makeLocalHandle(child) {
   const dataSubs = /* @__PURE__ */ new Set();
   const exitSubs = /* @__PURE__ */ new Set();
@@ -203160,6 +203322,10 @@ var localProcessBackend = {
     if (spec.env) Object.assign(env2, spec.env);
     const child = (0, import_child_process10.spawn)(file2, args, { cwd: spec.cwd, env: env2, detached: !isWin });
     return makeLocalHandle(child);
+  },
+  getCommandLine,
+  killByPid(pid, sig) {
+    killPidTree(pid, sig ?? "SIGTERM");
   }
 };
 var backend = localProcessBackend;
@@ -203202,7 +203368,10 @@ async function initProcessManagerWith(p2) {
       cwd: row.cwd,
       autoRestart: row.auto_restart === 1,
       status: "stopped",
-      pid: null,
+      // Carried over from the last spawn, if the app never got to clear it (an
+      // uncontrolled exit) — reapStaleIfNeeded() checks and clears it before the
+      // next restartProcess()/spawnProcess() actually spawns.
+      pid: row.pid,
       exitCode: null,
       logBuffer: [],
       handle: null,
@@ -203282,12 +203451,14 @@ function doSpawn(proc) {
   proc.exitCode = null;
   proc.processTitle = null;
   proc.oscTitleSet = false;
+  void persistence?.updatePid(proc.id, proc.pid);
   startTitlePolling2(proc);
   handle.onData((chunk) => handleProcessData(proc, chunk));
   handle.onExit(({ code }) => {
     if (proc.handle !== handle) return;
     stopTitlePolling2(proc);
     proc.pid = null;
+    void persistence?.updatePid(proc.id, null);
     proc.handle = null;
     proc.exitCode = code;
     proc.processTitle = null;
@@ -203307,6 +203478,46 @@ function doSpawn(proc) {
     }
   });
 }
+function sleep3(ms) {
+  return new Promise((resolve5) => setTimeout(resolve5, ms));
+}
+function commandsLikelyMatch(persisted, live) {
+  const p2 = persisted.trim();
+  const l = live.trim();
+  if (!p2 || !l) return false;
+  return l === p2 || l.endsWith(p2) || p2.endsWith(l);
+}
+var REAP_POLL_INTERVAL_MS = 200;
+var REAP_POLL_TIMEOUT_MS = 2e3;
+async function reapStaleIfNeeded(proc) {
+  const stalePid = proc.pid;
+  if (proc.handle || stalePid == null) return;
+  const backend2 = getProcessBackend();
+  const liveCommand = await backend2.getCommandLine(stalePid);
+  if (!liveCommand || !commandsLikelyMatch(proc.command, liveCommand)) {
+    if (liveCommand) {
+      pushLog(
+        proc,
+        `[pid ${stalePid} from a previous run no longer matches this command \u2014 leaving it running]`
+      );
+    }
+    proc.pid = null;
+    void persistence?.updatePid(proc.id, null);
+    return;
+  }
+  pushLog(proc, `[reaping leftover process from a previous run: pid ${stalePid}]`);
+  backend2.killByPid(stalePid, "SIGTERM");
+  const deadline = Date.now() + REAP_POLL_TIMEOUT_MS;
+  while (Date.now() < deadline && await backend2.getCommandLine(stalePid)) {
+    await sleep3(REAP_POLL_INTERVAL_MS);
+  }
+  if (await backend2.getCommandLine(stalePid)) {
+    backend2.killByPid(stalePid, "SIGKILL");
+    await sleep3(REAP_POLL_INTERVAL_MS);
+  }
+  proc.pid = null;
+  void persistence?.updatePid(proc.id, null);
+}
 function createProcess(projectId, taskId, label, command, cwd, autoRestart) {
   const id = (0, import_crypto15.randomUUID)();
   const proc = {
@@ -203333,7 +203544,7 @@ function createProcess(projectId, taskId, label, command, cwd, autoRestart) {
   void persistence?.insert({ id, taskId, projectId, label, command, cwd, autoRestart });
   return id;
 }
-function spawnProcess(projectId, taskId, label, command, cwd, autoRestart) {
+async function spawnProcess(projectId, taskId, label, command, cwd, autoRestart) {
   if (isShuttingDown3) throw new Error("Cannot spawn process while app is shutting down.");
   const id = (0, import_crypto15.randomUUID)();
   const proc = {
@@ -203358,6 +203569,7 @@ function spawnProcess(projectId, taskId, label, command, cwd, autoRestart) {
   };
   processes.set(id, proc);
   void persistence?.insert({ id, taskId, projectId, label, command, cwd, autoRestart });
+  await reapStaleIfNeeded(proc);
   doSpawn(proc);
   return id;
 }
@@ -203383,6 +203595,7 @@ function stopProcess(id) {
   const handle = proc.handle;
   proc.handle = null;
   proc.pid = null;
+  void persistence?.updatePid(proc.id, null);
   proc.spawnedAt = null;
   if (handle) handle.kill();
   setStatus(proc, "stopped");
@@ -203399,15 +203612,17 @@ function killProcess(id) {
   void persistence?.remove(id);
   return true;
 }
-function restartProcess(id) {
+async function restartProcess(id) {
   if (isShuttingDown3) return false;
   const proc = processes.get(id);
   if (!proc) return false;
   stopTitlePolling2(proc);
+  const hadLiveHandle = proc.handle != null;
   if (proc.handle) proc.handle.kill();
   proc.handle = null;
   proc.logBuffer.push("[restarting...]");
   setStatus(proc, "running");
+  if (!hadLiveHandle) await reapStaleIfNeeded(proc);
   setTimeout(() => doSpawn(proc), 500);
   return true;
 }
@@ -204881,6 +205096,16 @@ function createRoutingProcessBackend(options) {
         () => finalize2(entry, null, "spawn-failed")
       );
       return handle;
+    },
+    // Crash-reap (process-manager.ts's reapStaleIfNeeded) is a local-backend-only
+    // feature: it depends on inspecting/killing a bare OS pid, and a routed
+    // session only ever exposes the runner's own sessionId/key, not one the hub
+    // can act on independently. `getCommandLine` -> null is the same "can't
+    // verify, so don't touch it" signal `localProcessBackend` returns on win32.
+    getCommandLine() {
+      return Promise.resolve(null);
+    },
+    killByPid() {
     }
   };
 }
@@ -205337,7 +205562,7 @@ function composeServer(opts) {
     }
   });
   bootBestEffort("startup-purge", () => purgeStaleAndOrphanedTasks(db));
-  startArtifactWatcher((0, import_node_path20.join)(dataRoot, "artifacts"));
+  startArtifactWatcher((0, import_node_path19.join)(dataRoot, "artifacts"));
   const stubPtyWindow = {
     isDestroyed: () => false,
     webContents: { send: () => {
@@ -205520,7 +205745,7 @@ function composeServer(opts) {
       appGetVersion: () => "0.0.0-server",
       // Real directory (node os.homedir) — it is only a dialog default, and the
       // dialog itself is the stub that fails loud.
-      appGetDownloadsDir: async () => (0, import_node_path20.join)((0, import_node_os7.homedir)(), "Downloads"),
+      appGetDownloadsDir: async () => (0, import_node_path19.join)((0, import_node_os7.homedir)(), "Downloads"),
       appGetTrpcPort: async () => boundPort,
       // Graceful read-path defaults (flag getters / cosmetics) — a throwing stub
       // here would break harmless renderer reads post-flip for no gain.
@@ -205856,7 +206081,7 @@ function composeServer(opts) {
   setRemoteMcpEnvProvider(createRemoteMcpEnvProvider({ getBoundPort: () => boundPort }));
   runnersReady = (async () => {
     const hubAuth = await createHubAuth({
-      dbPath: (0, import_node_path20.join)(dataRoot, "hub-auth.sqlite"),
+      dbPath: (0, import_node_path19.join)(dataRoot, "hub-auth.sqlite"),
       // better-auth baseURL: a fixed loopback constant. Runners authenticate via
       // api-key/bearer (not cookies/redirects), so this is internal plumbing and
       // never needs an operator override — the SLAYZONE_RUNNER_TRANSPORT_BASE_URL
@@ -205947,20 +206172,20 @@ function deriveRunnerHubUrl(opts) {
 // src/sidecar-socket.ts
 var import_node_net = require("node:net");
 var import_node_fs23 = require("node:fs");
-var import_node_path21 = require("node:path");
+var import_node_path20 = require("node:path");
 var import_node_os8 = require("node:os");
 init_src();
 var MAX_SOCKET_PATH = 100;
 var MAX_FRAME_BYTES = 1024 * 1024;
 function resolveSidecarSocketPath() {
-  const rootPath = (0, import_node_path21.join)(getSlayzoneHomeDir(), "run", "sidecar.sock");
+  const rootPath = (0, import_node_path20.join)(getSlayzoneHomeDir(), "run", "sidecar.sock");
   if (rootPath.length <= MAX_SOCKET_PATH) return rootPath;
   const xdg = process.env.XDG_RUNTIME_DIR;
-  if (xdg && xdg.trim()) return (0, import_node_path21.join)(xdg, "slayzone", "sidecar.sock");
+  if (xdg && xdg.trim()) return (0, import_node_path20.join)(xdg, "slayzone", "sidecar.sock");
   if (process.platform === "darwin") {
-    return (0, import_node_path21.join)((0, import_node_os8.homedir)(), "Library", "Application Support", "SlayZone", "run", "sidecar.sock");
+    return (0, import_node_path20.join)((0, import_node_os8.homedir)(), "Library", "Application Support", "SlayZone", "run", "sidecar.sock");
   }
-  return (0, import_node_path21.join)((0, import_node_os8.homedir)(), ".slayzone", "run", "sidecar.sock");
+  return (0, import_node_path20.join)((0, import_node_os8.homedir)(), ".slayzone", "run", "sidecar.sock");
 }
 function frame(message2) {
   const body = Buffer.from(JSON.stringify(message2), "utf8");
@@ -205974,8 +206199,8 @@ function startSidecarSocketServer(opts) {
   });
   const socketPath = resolveSidecarSocketPath();
   try {
-    (0, import_node_fs23.mkdirSync)((0, import_node_path21.dirname)(socketPath), { recursive: true, mode: 448 });
-    (0, import_node_fs23.chmodSync)((0, import_node_path21.dirname)(socketPath), 448);
+    (0, import_node_fs23.mkdirSync)((0, import_node_path20.dirname)(socketPath), { recursive: true, mode: 448 });
+    (0, import_node_fs23.chmodSync)((0, import_node_path20.dirname)(socketPath), 448);
   } catch {
   }
   try {
@@ -206143,12 +206368,12 @@ function handleHealth(state, req, res) {
 
 // src/log.ts
 var import_node_fs24 = require("node:fs");
-var import_node_path22 = __toESM(require("node:path"), 1);
+var import_node_path21 = __toESM(require("node:path"), 1);
 var MAX_BYTES = 5 * 1024 * 1024;
 function createLogger2(dataRoot) {
-  const dir = import_node_path22.default.join(dataRoot, "logs");
+  const dir = import_node_path21.default.join(dataRoot, "logs");
   (0, import_node_fs24.mkdirSync)(dir, { recursive: true });
-  const file2 = import_node_path22.default.join(dir, "sidecar.log");
+  const file2 = import_node_path21.default.join(dir, "sidecar.log");
   try {
     if ((0, import_node_fs24.existsSync)(file2) && (0, import_node_fs24.statSync)(file2).size > MAX_BYTES) {
       (0, import_node_fs24.renameSync)(file2, `${file2}.1`);
@@ -206528,7 +206753,7 @@ function applyStandaloneHubConfig() {
   if (!process.env.SLAYZONE_ROOT) {
     process.env.SLAYZONE_ROOT = process.cwd();
   }
-  const cfg = loadSlayzoneConfig();
+  const cfg = loadHubConfigFile();
   setIfUnset("SLAYZONE_MODE", cfg.mode);
   setIfUnset(
     "SLAYZONE_HUB_ADDRESS",
@@ -206546,11 +206771,12 @@ function applyStandaloneHubConfig() {
 // src/bin.ts
 async function maybeInteractiveSetup() {
   if (!canPrompt()) return;
-  const cfg = loadSlayzoneConfig();
+  const cfg = loadHubConfigFile();
   if ((process.env.SLAYZONE_HUB_PUBLIC_ADDRESS ?? cfg.publicAddress ?? cfg.publicUrl) !== void 0)
     return;
   await runInteractiveConfig({
-    title: "Hub setup \u2014 values to save to config.json:",
+    title: "Hub setup \u2014 values to save to hub.config.json:",
+    configPath: getHubConfigFilePath(),
     fields: [
       {
         configKey: "publicAddress",