@hienlh/ppm 0.17.16 → 0.17.18

package/nul/docs/project-overview-pdr.md

@@ -0,0 +1,205 @@
+# PPM Project Overview & Product Development Requirements
+
+## Project Description
+
+**PPM** (Personal Project Manager) is a full-stack, mobile-first web IDE designed for developers to manage code projects with AI-powered assistance. It combines a responsive web interface, real-time terminal access, AI chat with tool support, and Git integration into a cohesive development environment.
+
+Built on the **Bun runtime** for performance, PPM enables developers to:
+- Browse and edit project files with Monaco Editor syntax highlighting
+- Execute commands via xterm.js terminal with full PTY support
+- Chat with Claude AI with file attachments and slash commands
+- View Git status, diffs, and commit graphs in real-time
+- Manage multiple projects via a project registry
+- Access the IDE from mobile, tablet, or desktop browsers
+
+## Target Users
+
+- **Solo developers** managing multiple code projects
+- **Teams** requiring lightweight project collaboration
+- **Developers** seeking AI-assisted development workflow
+- **Researchers** prototyping with terminal + editor + AI
+- **DevOps/SRE** managing infrastructure code with AI guidance
+
+## Key Features
+
+### Core Features (Implemented v2)
+- **Project Management** — Create, switch, and manage multiple projects via CLI and web UI
+- **File Explorer** — Browse directory trees, create/edit/delete files with path traversal protection
+- **Code Editor** — Monaco Editor with syntax highlighting, IntelliSense, diff viewer, theme support (dark/light)
+- **Terminal** — Full xterm.js with Bun PTY, resize handling, multiple terminal sessions per project
+- **AI Chat** — Streaming Claude messages with tool use (file read/write, git commands), file attachments, slash commands, auto-generated session titles
+- **Git Integration** — Status, diffs, commit graphs, branch management, staging/committing
+- **PWA** — Installable web app with offline support
+- **Authentication** — Token-based auth with auto-generated tokens in config
+- **Multi-Session** — Independent terminal and chat sessions per project tab
+
+### Planned Features (v3+)
+- Collaborative editing (WebSocket sync)
+- Custom tool registry for AI
+- Plugin architecture for providers
+- Mobile-optimized git graph
+- Performance profiling UI
+
+## Product Decisions & Rationale
+
+### Runtime: Bun v1.3.6+
+- **Why:** Native TypeScript support, bundled HTTP server, PTY module, blazing-fast startup
+- **Trade-off:** Smaller ecosystem vs Deno/Node; mitigated by npm compatibility
+- **Impact:** Simplified tooling, single binary deployment
+
+### Framework: Hono 4.12.8
+- **Why:** Lightweight, Bun-compatible, edge-first HTTP framework, minimal overhead
+- **Trade-off:** Less middleware ecosystem than Express; sufficient for needs
+- **Impact:** Single-file server setup, WebSocket support built-in
+
+### Frontend: React 19.2.4 + Zustand 5.0
+- **Why:** React for component reusability, Zustand for simple state management (no Redux boilerplate)
+- **Trade-off:** Client-side routing vs server-side; mitigated by URL sync hook
+- **Impact:** Fast, responsive UI with minimal store complexity
+
+### UI Stack: Tailwind + Radix UI + shadcn/ui
+- **Why:** Utility-first CSS (Tailwind), accessible components (Radix), pre-built New York style (shadcn)
+- **Trade-off:** Larger CSS bundle; mitigated by tree-shaking, critical CSS extraction
+- **Impact:** Consistent, accessible, maintainable UI with dark/light theme support
+
+### Editor: Monaco Editor (@monaco-editor/react)
+- **Why:** Superior IntelliSense, syntax highlighting, built-in diff viewer, industry-standard code editor
+- **Trade-off:** Larger bundle size; justified by feature richness and developer experience
+- **Impact:** 50+ languages, IntelliSense, word wrap toggle (Alt+Z), Monaco diff viewer
+
+### Terminal: xterm.js + Bun PTY
+- **Why:** xterm.js is industry-standard terminal emulator; Bun PTY avoids node-pty complexity
+- **Trade-off:** Limited Windows support (PTY); justified by Linux/macOS target
+- **Impact:** Full terminal experience, proper signal handling, resize support
+
+### AI Provider: Anthropic Claude Agent SDK
+- **Why:** Native async/await streaming, tool use, built-in token tracking, multi-turn context
+- **Trade-off:** Anthropic-specific; can swap via provider registry pattern
+- **Impact:** Rich conversation capabilities, reliable streaming, tool approval flow
+
+### Database: SQLite (migrating from YAML)
+- **Why:** Richer persistence for sessions, usage tracking, audit logs; single-file DB suits single-machine design
+- **Trade-off:** Added dependency; mitigated by Bun's built-in SQLite support (bun:sqlite)
+- **Impact:** Session mapping, push subscriptions, usage history, config storage with YAML backward compat
+
+### Build: Vite 8.0
+- **Why:** ESM-native, fast hot reload, TypeScript support, PWA plugin
+- **Trade-off:** Requires modern JS support; justified by target audience
+- **Impact:** <1s dev refresh, optimized bundles
+
+## Non-Functional Requirements
+
+| Requirement | Target | Implementation |
+|---|---|---|
+| **Performance** | Page load <2s, terminal <100ms latency | Vite code splitting, streaming APIs |
+| **Availability** | 99.9% uptime for local deployments | Stateless server, git-based state |
+| **Scalability** | Support 10+ concurrent projects | Stateless, horizontal if needed |
+| **Security** | Token-based auth, path traversal protection | Middleware, filename validation |
+| **Accessibility** | WCAG 2.1 AA | Radix UI primitives, semantic HTML |
+| **Cross-platform** | macOS, Linux, Windows | Bun compatibility + PWA fallback |
+| **Mobile** | iOS Safari, Android Chrome | Responsive design, touch-friendly UI |
+| **Offline** | Basic file browsing, editor | Service worker caching (PWA) |
+
+## CLI Commands (v2+)
+
+### ppm start
+Start the server in **background daemon mode** (default) or foreground. Supports optional public URL sharing via Cloudflare Quick Tunnel.
+
+**Syntax:**
+```bash
+ppm start [options]
+```
+
+**Options:**
+- `-p, --port <port>` — Port to listen on (default: from SQLite config)
+- `-f, --foreground` — Run in foreground (blocking, shows logs). Default: background daemon.
+- `-d, --daemon` — Explicit daemon flag (kept for compatibility, no-op since daemon is default)
+- `-s, --share` — Enable public URL sharing via Cloudflare tunnel
+- `-c, --config <path>` — Path to legacy YAML config to import (migrates to SQLite on load)
+
+**Behavior:**
+- **Background (default):** Process exits immediately. Daemon runs with output to null. Status saved to `~/.ppm/status.json`. Parent polls for status (up to 30s).
+- **Foreground:** Blocks with logs displayed. All WebSocket and tunnel features work normally.
+- **--share flag:** Downloads cloudflared binary to `~/.ppm/bin/` if missing (shows progress). Spawns tunnel in separate child. URL extracted from stderr and saved to status.json.
+- **Auth warning:** If `--share` is used without auth enabled, warns user that IDE is publicly accessible.
+
+**Example:**
+```bash
+ppm start --share              # Daemon + tunnel
+ppm start --foreground         # Foreground for debugging
+ppm start -p 3000 -f           # Custom port + foreground
+```
+
+### ppm stop
+Stop the background daemon gracefully.
+
+**Syntax:**
+```bash
+ppm stop
+```
+
+**Behavior:**
+- Reads `~/.ppm/status.json` (new format) or falls back to `~/.ppm/ppm.pid` (legacy)
+- Sends SIGTERM to process
+- Cleans up status.json and ppm.pid files
+- Tunnel process (if running) killed via signal handler
+
+**Example:**
+```bash
+ppm stop                       # Stop daemon
+```
+
+## Architecture Highlights
+
+```
+┌─────────────────────────────────────┐
+│         CLI (Commander.js)          │  Start/stop daemon, manage projects
+│  ├─ ppm start [--foreground --share]│
+│  └─ ppm stop                        │
+├─────────────────────────────────────┤
+│  Hono Server (Bun.serve + WebSocket)│  REST API, WS for terminal/chat
+│  ├─ Tunnel Service (Cloudflare)     │  Optional public URL
+│  └─ Daemon Mode (background process)│
+├────────────────────┬────────────────┤
+│  Services Layer    │  Providers      │  Business logic, AI adapters
+├────────────────────┴────────────────┤
+│  Filesystem + Git  + Config          │  Project data, auth tokens
+├─────────────────────────────────────┤
+│   React UI (Vite)                   │  Frontend, installed as PWA
+└─────────────────────────────────────┘
+```
+
+## Success Metrics
+
+- **Adoption:** 10+ active users, 100+ GitHub stars
+- **Performance:** Server startup <500ms, API response <200ms
+- **Reliability:** <0.1% error rate in chat/git operations
+- **Developer Velocity:** New developers productive in <30 minutes
+- **Code Quality:** >80% test coverage, zero security vulnerabilities
+
+## Project Constraints
+
+- **Team Size:** Solo developer (open source, community contributions)
+- **Deployment:** Local/single-machine only (no cloud infrastructure required)
+- **State:** Stateless server (config stored locally on disk)
+- **Compatibility:** Linux/macOS primary, Windows secondary
+- **Scope:** Project IDE, not CI/CD platform or cloud collaboration
+
+## Version History
+
+| Version | Status | Focus | Date |
+|---------|--------|-------|------|
+| **v1** | Complete | Initial prototype (single project, basic chat, terminal) | Feb 2025 |
+| **v2** | Complete (v0.5.21) | Multi-project, Monaco Editor, auto-title sessions, daemon mode, --share flag, SQLite migration | Mar 2026 |
+| **v3** | Planned | Collaborative editing, plugin architecture | Q2 2026 |
+
+### v2 Changes (Mar 2026)
+- **Daemon Mode as Default:** `ppm start` runs background daemon by default. `--foreground/-f` flag for debugging.
+- **Public URL Sharing:** `ppm start --share` creates Cloudflare Quick Tunnel public URL. Auto-downloads cloudflared binary.
+- **Monaco Editor:** Migrated from CodeMirror 6 to Monaco Editor with IntelliSense and diff viewer.
+- **Auto-Title Sessions:** Chat sessions auto-generate titles from SDK summary after first message.
+- **SQLite Persistence:** Migrating from YAML to SQLite for config, sessions, usage, push subscriptions.
+- **Web Push Notifications:** Push notification support via Service Worker.
+- **Session Logging:** Audit trail with sensitive data redaction.
+- **Status File:** `~/.ppm/status.json` (new format) replaces `ppm.pid` with backward compatibility.
+

package/nul/docs/project-roadmap.md

@@ -0,0 +1,222 @@
+# PPM Project Roadmap
+
+**Last Updated:** April 4, 2026
+
+## Vision
+
+PPM is the **lightest path from phone to code** — a self-hosted, BYOK, multi-device web IDE with AI. No desktop app install needed. No subscription. Everything on your machine, accessible from any browser.
+
+---
+
+## Completed Milestones
+
+### v0.1–v0.5 — Foundation (Released)
+- Bun runtime, Hono server, React + Vite frontend
+- File explorer, Monaco editor, xterm.js terminal
+- AI chat (Claude Agent SDK), git integration, PWA
+- Multi-project, project-scoped API, CLI commands
+- Database management (SQLite/PostgreSQL)
+
+### v0.6 — Polish (Released)
+- Project Switcher Bar, keep-alive workspace switching
+- Auto-generate chat session titles, inline rename
+- Database adapters, connection UI, query execution
+
+### v0.7 — Multi-Account & Mobile (Current — v0.7.25)
+- Multi-account credential management (OAuth + API key)
+- Account routing (round-robin, fill-first)
+- Usage tracking per account with visual dashboard
+- Account import/export with encryption + clipboard fallback
+- Mobile UX: horizontal tab scroll, long-press context menus, touch optimization
+- Cloudflare tunnel, push notifications, Telegram alerts
+
+---
+
+## Upcoming Roadmap
+
+### v0.8.0 — "Always On" (Q2 2026)
+
+**Theme:** Multi-device access + AI chat improvements. Solve the "I can't reach my PPM from my phone" problem.
+
+| Feature | Priority | Status | Description |
+|---------|----------|--------|-------------|
+| **PPM Cloud** | Critical | — | Separate cloud service for device registry + tunnel URL sync. Google OAuth login. CLI `ppm cloud link` syncs tunnel URL. Open cloud dashboard on any device → see machines → tap to connect. NO code/data through cloud — only URLs + metadata. |
+| **Auto-start** | High | — | PPM starts on boot. macOS launchd, Linux systemd, Windows Task Scheduler. CLI: `ppm autostart enable/disable`. Required for "always accessible" story. |
+| **Auto-upgrade** | High | ✅ Done | Supervisor checks npm registry every 15min. UI banner shows when update available. One-click upgrade via API or CLI. Supervisor self-replaces after install (no OS autostart dependency). **Completed in v0.8.54** |
+| **Supervisor Always Alive** | High | ✅ Done | Soft stop (server shutdown, supervisor stays) vs full shutdown. New `stopped` state. Cloud WS + tunnel stay active when stopped. `ppm start` resumes without supervisor restart. Modularized: supervisor.ts, supervisor-state.ts, supervisor-stopped-page.ts. **Completed in v0.9.11** |
+| **AI Chat enhancements** | High | — | Tool allow/deny config per session. Chat modes (plan/code/ask). Model selector (opus/sonnet/haiku). Effort level. Max turns. System prompt customization. Better streaming UX (collapsible tool calls). |
+
+**PPM Cloud — scope guard:**
+- Cloud is OPTIONAL convenience, never a dependency. PPM works 100% without it.
+- Razor-thin: device registry + tunnel URL sync + heartbeat. Nothing more.
+- Hosting: Cloudflare Workers or Fly.io
+- CLI: `ppm cloud link`, `ppm cloud unlink`, `ppm cloud status`
+- Dashboard: list machines, status (online/offline), click to open
+
+---
+
+### v0.9.0 — "Open Platform" (Q2–Q3 2026)
+
+**Theme:** Multi-provider AI (Claude + Cursor) + extension system. Ship a focused release, expand providers later.
+
+**Overall progress: 100%** (All 3 core features complete)
+
+| Feature | Priority | Status | Description |
+|---------|----------|--------|-------------|
+| **Multi-provider AI** | Critical | ✅ Done | ProviderInterface, registry, Cursor CLI, CLI provider base, UI provider/model selector, permission mode selector, system prompt customization, comprehensive tests — all on beta branch. |
+| **MCP Management** | Medium | ✅ Done | REST API (CRUD + import), SQLite storage, Settings UI, auto-import from `~/.claude.json`, validation, SDK integration. |
+| **Extension architecture (Phase 1-6)** | High | ✅ Done | VSCode-compatible npm extensions, Bun Worker isolation, RPC protocol, state persistence, contribution registry, CLI support, dev mode. @ppm/vscode-compat API shim (commands, window, workspace). UI components (StatusBar, TreeView, WebviewPanel, QuickPick, InputBox). WS bridge for real-time ext↔browser communication. First extension: ext-database with tree view + SQL query panel. Unit tests + extension dev guide. |
+
+**v0.9.x polish (post-release):**
+- File download feature (v0.9.2) — Single-file + folder-as-zip downloads with short-lived tokens, context menu + toolbar UI
+- Agent Team UI (v0.9.9) — Real-time team monitoring dashboard: REST API + fs.watch inbox events, team activity button with unread pulse, popover/drawer with members + messages, team management in Settings
+- Git-Graph UI Improvements (v0.9.85+) — ✅ Faithful SVG graph rendering (vscode-git-graph port), interactive git workflow (stage/unstage/commit/stash), branch filters, auto-fetch, mobile support, tab system safety guards, UX refinements (branch context menu, dblclick checkout, toast notifications, SVG icons)
+- Git Workflow Enhancements (v0.9.86+) — ✅ Stash management (popover with Apply/Pop/Drop), rebase from context menu, conflict detection (merge/rebase/cherry-pick states), inline conflict resolution editor (Monaco with visual highlighting + Accept buttons), worktree full CRUD (create/remove/prune with project integration)
+
+**Multi-provider — v0.9 scope (reduced):**
+- Tier 1 (full agentic): Claude Agent SDK — file edit, terminal, git, full autonomy
+- Tier 2 (agentic CLI): Cursor — agentic via its own tool system
+- Provider interface is clean enough to add more providers later without refactor
+
+**Deferred to v0.9.5+ (Multi-Provider Phase 2):**
+- Gemini CLI (Tier 2)
+- OpenAI Codex (Tier 2)
+- Tier 3 (chat-only): Any OpenAI-compatible API
+- Chinese providers (DeepSeek, Qwen) — v1.0+
+
+**Extension System — remaining for v0.10+:**
+- Settings UI auto-generation from manifest
+- Hot reload during dev (`ppm ext dev --watch`)
+- Extension template scaffold (`ppm ext create <name>`)
+- Extension marketplace (v1.0)
+
+**Extension architecture — design principles:**
+- Extensions are npm packages: `ppm ext install @ppm/ext-database`
+- Extension manifest defines: skills, UI panels, sidebar tabs, routes, settings schema
+- DB viewer = first official extension, proves the architecture
+- Keep PPM core lightweight, features are opt-in via extensions
+- No marketplace yet (just npm), marketplace comes in v1.0
+
+---
+
+### v0.10.0 — "Enhanced Workflow" (Q3 2026)
+
+**Theme:** Agent collaboration + advanced git workflow. High-impact, independent features that ship fast.
+
+| Feature | Priority | Description |
+|---------|----------|-------------|
+| **Agent Team** | High | Multi-agent collaboration within PPM. Spawn agent teams for parallel task execution — lead agent delegates to specialist agents (coder, tester, reviewer). Task coordination, file ownership, progress tracking. |
+| **Advanced Git Operations** | Medium | Interactive rebase UI, cherry-pick workflow, merge strategy selection. (Worktree management completed in v0.9.86) |
+
+---
+
+### v0.11.0 — "Intelligence" (Q3–Q4 2026)
+
+**Theme:** Event system + PPM's own AI layer + Telegram bot. Hooks → Skills API → Clawbot dependency chain.
+
+| Feature | Priority | Status | Description |
+|---------|----------|--------|-------------|
+| **Telegram Bot (PPMBot Coordinator)** | High | ✅ Done (v0.9.11) | Redesigned: Coordinator session per chat delegates project tasks to subagents. Single persistent identity in `~/.ppm/bot/coordinator.md`. Task execution in isolation. CLI-driven delegation via `ppm bot` commands. Cross-provider support. **Completed in v0.9.11**. |
+| **Hooks system** | High | — | Event hooks for PPM lifecycle (file save, git commit, chat message, etc.). Foundation for Skills API and deeper extension integration. |
+| **PPM Skills API** | High | — | Stable internal API for AI to control PPM: file.read/write/search, terminal.run, git.status/commit/diff, db.query, editor.open/goto, project.switch. Skills are the bridge between AI and PPM features. |
+| **Built-in Clawbot** | High | — | Lightweight AI agent built into PPM using Anthropic Messages API (not Agent SDK). Uses Skills API + MCP tools. Instant response, no external CLI deps. For quick tasks: file search, code explanation, simple refactors. |
+| **More providers** | Medium | — | Gemini CLI (Tier 2), OpenAI Codex (Tier 2), Tier 3 chat-only (any OpenAI-compatible API). Provider interface already clean from v0.9. |
+
+**Built-in Clawbot — why it matters:**
+- Claude Agent SDK spawns subprocess — heavy, slow startup, requires CLI installed
+- Clawbot = instant, lightweight, works with any LLM via Messages API
+- Users can use Clawbot to create extensions → zero-friction extension authoring
+- Foundation for "AI creates extensions on demand" vision
+
+**Telegram Bot — why it matters:**
+- Extends PPM beyond the web UI → reach users on mobile, messaging apps
+- Long-polling avoids webhooks — simpler for self-hosted, no public URL needed
+- Paired devices enable secure multi-user access — owner controls who can use the bot
+- Persistent memory in FTS5 — bot learns conversation context over time
+
+---
+
+### v1.0.0 — "Production Ready" (Q4 2026)
+
+**Theme:** Enterprise, marketplace, stability.
+
+| Feature | Priority | Description |
+|---------|----------|-------------|
+| **Self-hosted PPM Cloud** | High | Docker image of PPM Cloud for enterprise/team. Same codebase, self-hosted config flag. `docker-compose up` and it works. LDAP/SSO integration. |
+| **PPM Marketplace** | High | Publish/install/update extensions. Browse community extensions. Revenue sharing for paid extensions. Clawbot can create extension → test → publish in minutes. |
+| **Stability & hardening** | Critical | Security audit, performance optimization, comprehensive test coverage (>80%), documentation for contributors, CI/CD pipeline. |
+| **Inline SQL** | Medium | Select text in Monaco → run as SQL. Connection picker in editor context menu. Results panel below editor. Leverages existing DB service. |
+
+---
+
+## Post-v1.0 — Feature Backlog (To Be Prioritized)
+
+Features to pick from after v1.0. Will be reviewed and scheduled based on user feedback and strategic priorities.
+
+| Feature | Category | Description |
+|---------|----------|-------------|
+| **Collaborative viewing** | Social | Read-only live session sharing via tunnel. Others watch terminal/editor real-time. High demo value. |
+| **Workspace snapshots** | UX | Save/restore full state (open files, terminals, chat). Critical for mobile where browser kills tabs. |
+| **Ollama / local models** | AI | Run AI offline with local models. No API cost, privacy-first. Plugs into Clawbot as a provider. |
+| **Project templates** | DX | `ppm init --template react/nest/go`. Community templates from Marketplace. |
+| **AI command palette** | AI | Natural language commands ("deploy production", "run tests") → Skills API. |
+| **Notification hub** | UX | Push notification "AI task finished" on mobile. Webhook integrations (Slack, Discord). |
+| **Layout customization** | UX | User arranges panels freely. Save separate desktop vs mobile layouts. |
+| **Git advanced** | Git | Interactive rebase UI, cherry-pick, stash management, conflict resolution. |
+| **Performance profiling** | DevTools | Flamegraph viewer, memory tracking, network waterfall. |
+| **Multi-user workspace** | Enterprise | Shared project access, role-based permissions, team features. |
+| **Mobile terminal UX** | Mobile | Virtual keyboard shortcuts, gesture controls, better touch input. |
+| **CI/CD integration** | DevOps | GitHub Actions / pipeline status in PPM, trigger builds from UI. |
+| **Cross-platform binaries** | Distribution | Compile macOS/Linux/Windows binaries via `bun build --compile`. `npx ppm` without Bun. |
+| **OLED dark mode** | UX | True black background for OLED screens. |
+| **Collaborative editing** | Social | Real-time multi-user file editing with CRDT (yjs/automerge). |
+| **Custom domain** | Cloud | Map custom domain to PPM Cloud tunnel URL. DNS CNAME + SSL via Let's Encrypt or Cloudflare. Access PPM at `code.yourdomain.com`. |
+
+---
+
+## Release Schedule
+
+| Version | Theme | Key Features | Target |
+|---------|-------|-------------|--------|
+| **v0.7** | Multi-Account & Mobile | Account management, usage tracking, mobile UX | ✅ Current |
+| **v0.8** | Always On | PPM Cloud, auto-start, AI chat enhancements | Q2 2026 |
+| **v0.9** | Open Platform | Multi-provider (Claude + Cursor), extension architecture, MCP | Q2–Q3 2026 |
+| **v0.10** | Enhanced Workflow | Agent Team, worktree management | Q3 2026 |
+| **v0.11** | Intelligence | Hooks, Skills API, Clawbot, more providers (Gemini/Codex/Tier 3) | Q3–Q4 2026 |
+| **v1.0** | Production Ready | Self-hosted Cloud, Marketplace, stability, inline SQL | Q4 2026 |
+
+---
+
+## Strategic Principles
+
+1. **Own "phone to code"** — PPM wins on multi-device access. Don't chase Cursor/Windsurf feature parity.
+2. **PPM Cloud stays razor-thin** — Device registry + tunnel URLs only. No code storage. No cloud execution.
+3. **Multi-provider is tiered** — v0.9: Claude SDK (Tier 1) + Cursor (Tier 2). v0.11: Gemini, Codex, Tier 3. Clean interface for future providers.
+4. **Extensions keep core lightweight** — Features are opt-in. DB viewer, future tools = extensions. Core stays fast.
+5. **Clawbot enables the ecosystem** — Users create extensions with AI, publish to Marketplace. Zero-friction.
+6. **Self-hosted first, always** — Cloud is optional convenience. PPM works 100% offline/local.
+
+---
+
+## Technical Debt
+
+| Item | Priority | Notes |
+|------|----------|-------|
+| ~~Refactor ProviderInterface for multi-provider~~ | ~~High~~ | ✅ Done on beta branch (v0.9.0-beta.5) |
+| Simplify ChatService streaming | Medium | Reduce async generator complexity |
+| Extract WebSocket common logic | Low | DRY for chat/terminal WS |
+| Round-robin cursor bug in AccountSelector | Medium | Positional cursor not advancing correctly |
+| Windows terminal support | Medium | Evaluate node-pty or WSL fallback |
+
+---
+
+## Dependencies to Monitor
+
+| Dependency | Version | Risk | Notes |
+|-----------|---------|------|-------|
+| Bun | 1.3.6+ | Medium | Check security advisories weekly |
+| Claude Agent SDK | 0.2.76+ | Medium | Follow for API changes, new features |
+| React | 19.2.4 | Low | Monitor breaking changes |
+| TypeScript | 5.9.3+ | Low | Quarterly upgrades |
+| xterm.js | 6.0 | Low | Terminal rendering bugs |
+| Monaco Editor | 4.7.0+ | Low | Accessibility improvements |