@hienlh/ppm 0.17.40 → 0.17.41

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## [0.17.41] - 2026-08-30
+
+### Fixed
+- **Upgrading no longer changes the public tunnel URL when a leftover dev server is holding the port** — processes started from chat (like `bun run dev:web`) could keep the dead server's port reserved, forcing the new server onto another port and rotating the tunnel address. They are now cleaned up during startup.
+
 ## [0.17.40] - 2026-08-30
 
 ### Fixed

package/assets/skills/ppm/SKILL.md

@@ -71,4 +71,4 @@ This skill covers the `ppm` CLI, its HTTP API, and its config DB. It does **not*
 - Third-party extensions (inspect via `ppm ext list`).
 - The Claude Agent SDK internals (separate skill).
 
-<!-- Generated for PPM v0.17.40 at build time. Re-run `ppm export skill --install` to refresh. -->
+<!-- Generated for PPM v0.17.41 at build time. Re-run `ppm export skill --install` to refresh. -->

package/assets/skills/ppm/references/http-api.md

@@ -288,4 +288,4 @@ _Base URL: `http://localhost:8080` (default; override via `ppm config set port <
 - `ws://<host>/ws/terminal` — PTY terminal multiplexer
 - `ws://<host>/ws/extensions` — extension host channel
 
-<!-- Generated from src/server/routes/ for PPM v0.17.40 -->
+<!-- Generated from src/server/routes/ for PPM v0.17.41 -->

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hienlh/ppm",
-  "version": "0.17.40",
+  "version": "0.17.41",
   "description": "Personal Project Manager — mobile-first web IDE with AI assistance",
   "author": "hienlh",
   "license": "SEE LICENSE IN LICENSE",

package/src/services/windows-zombie-port-reaper.ts

@@ -51,6 +51,12 @@ export function isDebrisOrphan(name: string, cmd: string): boolean {
   if (c.includes("shell-snapshots")) return true;
   // Claude SDK node/bun children (chat tool subprocesses)
   if ((n === "node.exe" || n === "bun.exe") && c.includes("claude")) return true;
+  // Dev-server trees launched from chat bash sessions (`bun run dev:web` →
+  // `bun run vite` → `node vite.js`) inherit the server's listening-socket
+  // handle and outlive their bash parent — verified holder of a zombied prod
+  // port. `__serve__`/`__supervise__` processes never match these patterns.
+  if (n === "bun.exe" && /\brun\s+(dev\b|dev:|vite\b)/.test(c)) return true;
+  if (n === "node.exe" && c.includes("\\vite\\bin\\vite.js")) return true;
   return false;
 }