@hienlh/ppm 0.23.5 → 0.23.7

package/dist/web/index.html

@@ -9,44 +9,44 @@
     <link rel="preconnect" href="https://fonts.googleapis.com" />
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
     <link href="https://fonts.googleapis.com/css2?family=Geist+Mono:wght@400;500;600;700&family=Geist:wght@400;500;600;700&display=swap" rel="stylesheet" />
-    <script type="module" crossorigin src="/assets/index-jG9mLs-J.js"></script>
+    <script type="module" crossorigin src="/assets/index-CtAvmybi.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C5c2KzVm.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-BEFjQwLd.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-markdown-QKPNiWEd.js">
-    <link rel="modulepreload" crossorigin href="/assets/vendor-ui-BHh12_0v.js">
+    <link rel="modulepreload" crossorigin href="/assets/vendor-ui-P9Ym7hCv.js">
     <link rel="modulepreload" crossorigin href="/assets/utils-btZ8C8-R.js">
-    <link rel="modulepreload" crossorigin href="/assets/button-Ci9EUgqd.js">
+    <link rel="modulepreload" crossorigin href="/assets/button-DeAyLH9U.js">
     <link rel="modulepreload" crossorigin href="/assets/createLucideIcon-DBXq3G0e.js">
-    <link rel="modulepreload" crossorigin href="/assets/api-client-c8YOpTlT.js">
+    <link rel="modulepreload" crossorigin href="/assets/api-client-D-SMbdiH.js">
     <link rel="modulepreload" crossorigin href="/assets/react-CzUPVyyG.js">
-    <link rel="modulepreload" crossorigin href="/assets/settings-store-Br5c1efC.js">
-    <link rel="modulepreload" crossorigin href="/assets/file-store-D9KE0kQC.js">
+    <link rel="modulepreload" crossorigin href="/assets/settings-store-DvftLqzy.js">
+    <link rel="modulepreload" crossorigin href="/assets/file-store-B0e7sLag.js">
     <link rel="modulepreload" crossorigin href="/assets/window-store-B4cbZ5rr.js">
     <link rel="modulepreload" crossorigin href="/assets/panel-store-BUQ-CPsd.js">
     <link rel="modulepreload" crossorigin href="/assets/window-pip-registry-BQ6LSr6d.js">
     <link rel="modulepreload" crossorigin href="/assets/portal-container-context-NFSuymMu.js">
     <link rel="modulepreload" crossorigin href="/assets/icons-CO_II6D-.js">
-    <link rel="modulepreload" crossorigin href="/assets/dialog-B8clVkyi.js">
+    <link rel="modulepreload" crossorigin href="/assets/dialog-Bocc0Fgb.js">
     <link rel="modulepreload" crossorigin href="/assets/use-is-mobile-BClDZJP5.js">
-    <link rel="modulepreload" crossorigin href="/assets/onboarding-quick-orientation-DIhWv1CN.js">
-    <link rel="modulepreload" crossorigin href="/assets/fs-api-DL36slbd.js">
-    <link rel="modulepreload" crossorigin href="/assets/format-file-meta-mQwA6SuY.js">
-    <link rel="modulepreload" crossorigin href="/assets/context-menu-CjYTq8DI.js">
+    <link rel="modulepreload" crossorigin href="/assets/onboarding-quick-orientation-DPHYFMbA.js">
+    <link rel="modulepreload" crossorigin href="/assets/fs-api-CeHKwx95.js">
+    <link rel="modulepreload" crossorigin href="/assets/format-file-meta-o1XBuoKS.js">
+    <link rel="modulepreload" crossorigin href="/assets/context-menu-7OX80HDB.js">
     <link rel="modulepreload" crossorigin href="/assets/input-CG8PS8mS.js">
     <link rel="modulepreload" crossorigin href="/assets/use-visual-viewport-BGpcMnIx.js">
-    <link rel="modulepreload" crossorigin href="/assets/mobile-bottom-sheet-CuNi2FRv.js">
-    <link rel="modulepreload" crossorigin href="/assets/scroll-area-XonvWYn_.js">
-    <link rel="modulepreload" crossorigin href="/assets/chat-preparation-cache-BSIQGiWx.js">
-    <link rel="modulepreload" crossorigin href="/assets/project-framework-store-XxFXcUpb.js">
-    <link rel="modulepreload" crossorigin href="/assets/file-icons-gx_FBOXY.js">
+    <link rel="modulepreload" crossorigin href="/assets/mobile-bottom-sheet-D4UyOatB.js">
+    <link rel="modulepreload" crossorigin href="/assets/scroll-area-sjOeAfoD.js">
+    <link rel="modulepreload" crossorigin href="/assets/chat-preparation-cache-CcCd2g7A.js">
+    <link rel="modulepreload" crossorigin href="/assets/project-framework-store-UDEMu28U.js">
+    <link rel="modulepreload" crossorigin href="/assets/file-icons-l7fNOmdS.js">
     <link rel="modulepreload" crossorigin href="/assets/format-date-BMtvCeb9.js">
-    <link rel="modulepreload" crossorigin href="/assets/git-repo-store-DSypNj19.js">
-    <link rel="modulepreload" crossorigin href="/assets/project-store-C5gJXkvb.js">
-    <link rel="modulepreload" crossorigin href="/assets/ws-auth-kXgsX2Js.js">
+    <link rel="modulepreload" crossorigin href="/assets/git-repo-store-BpPnah5l.js">
+    <link rel="modulepreload" crossorigin href="/assets/project-store-DGa31y5B.js">
+    <link rel="modulepreload" crossorigin href="/assets/ws-auth-CqI8-aoA.js">
     <link rel="modulepreload" crossorigin href="/assets/tab-store-DqeaGhhE.js">
     <link rel="modulepreload" crossorigin href="/assets/apply-theme-Cc_cmrD5.js">
     <link rel="modulepreload" crossorigin href="/assets/resolve-theme-STMsK2vc.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-DMA-So69.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-DeCJasyy.css">
   <link rel="manifest" href="/manifest.webmanifest"><script id="vite-plugin-pwa:register-sw" src="/registerSW.js"></script></head>
   <body class="text-text font-sans antialiased" style="background: var(--bg)">
     <!-- FOUC guard: apply the persisted theme mode before first paint.

package/dist/web/sw.js

@@ -1 +1 @@
-try{self[`workbox:core:7.3.0`]&&_()}catch{}var e=(e,...t)=>{let n=e;return t.length>0&&(n+=` :: ${JSON.stringify(t)}`),n},t=class extends Error{constructor(t,n){let r=e(t,n);super(r),this.name=t,this.details=n}},n={googleAnalytics:`googleAnalytics`,precache:`precache-v2`,prefix:`workbox`,runtime:`runtime`,suffix:typeof registration<`u`?registration.scope:``},r=e=>[n.prefix,e,n.suffix].filter(e=>e&&e.length>0).join(`-`),i=e=>{for(let t of Object.keys(n))e(t)},a={updateDetails:e=>{i(t=>{typeof e[t]==`string`&&(n[t]=e[t])})},getGoogleAnalyticsName:e=>e||r(n.googleAnalytics),getPrecacheName:e=>e||r(n.precache),getPrefix:()=>n.prefix,getRuntimeName:e=>e||r(n.runtime),getSuffix:()=>n.suffix};function o(e,t){let n=t();return e.waitUntil(n),n}try{self[`workbox:precaching:7.3.0`]&&_()}catch{}var s=`__WB_REVISION__`;function c(e){if(!e)throw new t(`add-to-cache-list-unexpected-type`,{entry:e});if(typeof e==`string`){let t=new URL(e,location.href);return{cacheKey:t.href,url:t.href}}let{revision:n,url:r}=e;if(!r)throw new t(`add-to-cache-list-unexpected-type`,{entry:e});if(!n){let e=new URL(r,location.href);return{cacheKey:e.href,url:e.href}}let i=new URL(r,location.href),a=new URL(r,location.href);return i.searchParams.set(s,n),{cacheKey:i.href,url:a.href}}var l=class{constructor(){this.updatedURLs=[],this.notUpdatedURLs=[],this.handlerWillStart=async({request:e,state:t})=>{t&&(t.originalRequest=e)},this.cachedResponseWillBeUsed=async({event:e,state:t,cachedResponse:n})=>{if(e.type===`install`&&t&&t.originalRequest&&t.originalRequest instanceof Request){let e=t.originalRequest.url;n?this.notUpdatedURLs.push(e):this.updatedURLs.push(e)}return n}}},u=class{constructor({precacheController:e}){this.cacheKeyWillBeUsed=async({request:e,params:t})=>{let n=t?.cacheKey||this._precacheController.getCacheKeyForURL(e.url);return n?new Request(n,{headers:e.headers}):e},this._precacheController=e}},d;function f(){if(d===void 0){let e=new Response(``);if(`body`in e)try{new Response(e.body),d=!0}catch{d=!1}d=!1}return d}async function p(e,n){let r=null;if(e.url&&(r=new URL(e.url).origin),r!==self.location.origin)throw new t(`cross-origin-copy-response`,{origin:r});let i=e.clone(),a={headers:new Headers(i.headers),status:i.status,statusText:i.statusText},o=n?n(a):a,s=f()?i.body:await i.blob();return new Response(s,o)}var m=e=>new URL(String(e),location.href).href.replace(RegExp(`^${location.origin}`),``);function h(e,t){let n=new URL(e);for(let e of t)n.searchParams.delete(e);return n.href}async function g(e,t,n,r){let i=h(t.url,n);if(t.url===i)return e.match(t,r);let a=Object.assign(Object.assign({},r),{ignoreSearch:!0}),o=await e.keys(t,a);for(let t of o)if(i===h(t.url,n))return e.match(t,r)}var v=class{constructor(){this.promise=new Promise((e,t)=>{this.resolve=e,this.reject=t})}},y=new Set;async function b(){for(let e of y)await e()}function x(e){return new Promise(t=>setTimeout(t,e))}try{self[`workbox:strategies:7.3.0`]&&_()}catch{}function S(e){return typeof e==`string`?new Request(e):e}var C=class{constructor(e,t){this._cacheKeys={},Object.assign(this,t),this.event=t.event,this._strategy=e,this._handlerDeferred=new v,this._extendLifetimePromises=[],this._plugins=[...e.plugins],this._pluginStateMap=new Map;for(let e of this._plugins)this._pluginStateMap.set(e,{});this.event.waitUntil(this._handlerDeferred.promise)}async fetch(e){let{event:n}=this,r=S(e);if(r.mode===`navigate`&&n instanceof FetchEvent&&n.preloadResponse){let e=await n.preloadResponse;if(e)return e}let i=this.hasCallback(`fetchDidFail`)?r.clone():null;try{for(let e of this.iterateCallbacks(`requestWillFetch`))r=await e({request:r.clone(),event:n})}catch(e){if(e instanceof Error)throw new t(`plugin-error-request-will-fetch`,{thrownErrorMessage:e.message})}let a=r.clone();try{let e;e=await fetch(r,r.mode===`navigate`?void 0:this._strategy.fetchOptions);for(let t of this.iterateCallbacks(`fetchDidSucceed`))e=await t({event:n,request:a,response:e});return e}catch(e){throw i&&await this.runCallbacks(`fetchDidFail`,{error:e,event:n,originalRequest:i.clone(),request:a.clone()}),e}}async fetchAndCachePut(e){let t=await this.fetch(e),n=t.clone();return this.waitUntil(this.cachePut(e,n)),t}async cacheMatch(e){let t=S(e),n,{cacheName:r,matchOptions:i}=this._strategy,a=await this.getCacheKey(t,`read`),o=Object.assign(Object.assign({},i),{cacheName:r});n=await caches.match(a,o);for(let e of this.iterateCallbacks(`cachedResponseWillBeUsed`))n=await e({cacheName:r,matchOptions:i,cachedResponse:n,request:a,event:this.event})||void 0;return n}async cachePut(e,n){let r=S(e);await x(0);let i=await this.getCacheKey(r,`write`);if(!n)throw new t(`cache-put-with-no-response`,{url:m(i.url)});let a=await this._ensureResponseSafeToCache(n);if(!a)return!1;let{cacheName:o,matchOptions:s}=this._strategy,c=await self.caches.open(o),l=this.hasCallback(`cacheDidUpdate`),u=l?await g(c,i.clone(),[`__WB_REVISION__`],s):null;try{await c.put(i,l?a.clone():a)}catch(e){if(e instanceof Error)throw e.name===`QuotaExceededError`&&await b(),e}for(let e of this.iterateCallbacks(`cacheDidUpdate`))await e({cacheName:o,oldResponse:u,newResponse:a.clone(),request:i,event:this.event});return!0}async getCacheKey(e,t){let n=`${e.url} | ${t}`;if(!this._cacheKeys[n]){let r=e;for(let e of this.iterateCallbacks(`cacheKeyWillBeUsed`))r=S(await e({mode:t,request:r,event:this.event,params:this.params}));this._cacheKeys[n]=r}return this._cacheKeys[n]}hasCallback(e){for(let t of this._strategy.plugins)if(e in t)return!0;return!1}async runCallbacks(e,t){for(let n of this.iterateCallbacks(e))await n(t)}*iterateCallbacks(e){for(let t of this._strategy.plugins)if(typeof t[e]==`function`){let n=this._pluginStateMap.get(t);yield r=>{let i=Object.assign(Object.assign({},r),{state:n});return t[e](i)}}}waitUntil(e){return this._extendLifetimePromises.push(e),e}async doneWaiting(){for(;this._extendLifetimePromises.length;){let e=this._extendLifetimePromises.splice(0),t=(await Promise.allSettled(e)).find(e=>e.status===`rejected`);if(t)throw t.reason}}destroy(){this._handlerDeferred.resolve(null)}async _ensureResponseSafeToCache(e){let t=e,n=!1;for(let e of this.iterateCallbacks(`cacheWillUpdate`))if(t=await e({request:this.request,response:t,event:this.event})||void 0,n=!0,!t)break;return n||t&&t.status!==200&&(t=void 0),t}},w=class{constructor(e={}){this.cacheName=a.getRuntimeName(e.cacheName),this.plugins=e.plugins||[],this.fetchOptions=e.fetchOptions,this.matchOptions=e.matchOptions}handle(e){let[t]=this.handleAll(e);return t}handleAll(e){e instanceof FetchEvent&&(e={event:e,request:e.request});let t=e.event,n=typeof e.request==`string`?new Request(e.request):e.request,r=`params`in e?e.params:void 0,i=new C(this,{event:t,request:n,params:r}),a=this._getResponse(i,n,t);return[a,this._awaitComplete(a,i,n,t)]}async _getResponse(e,n,r){await e.runCallbacks(`handlerWillStart`,{event:r,request:n});let i;try{if(i=await this._handle(n,e),!i||i.type===`error`)throw new t(`no-response`,{url:n.url})}catch(t){if(t instanceof Error){for(let a of e.iterateCallbacks(`handlerDidError`))if(i=await a({error:t,event:r,request:n}),i)break}if(!i)throw t}for(let t of e.iterateCallbacks(`handlerWillRespond`))i=await t({event:r,request:n,response:i});return i}async _awaitComplete(e,t,n,r){let i,a;try{i=await e}catch{}try{await t.runCallbacks(`handlerDidRespond`,{event:r,request:n,response:i}),await t.doneWaiting()}catch(e){e instanceof Error&&(a=e)}if(await t.runCallbacks(`handlerDidComplete`,{event:r,request:n,response:i,error:a}),t.destroy(),a)throw a}},T=class e extends w{constructor(t={}){t.cacheName=a.getPrecacheName(t.cacheName),super(t),this._fallbackToNetwork=t.fallbackToNetwork!==!1,this.plugins.push(e.copyRedirectedCacheableResponsesPlugin)}async _handle(e,t){return await t.cacheMatch(e)||(t.event&&t.event.type===`install`?await this._handleInstall(e,t):await this._handleFetch(e,t))}async _handleFetch(e,n){let r,i=n.params||{};if(this._fallbackToNetwork){let t=i.integrity,a=e.integrity,o=!a||a===t;r=await n.fetch(new Request(e,{integrity:e.mode===`no-cors`?void 0:a||t})),t&&o&&e.mode!==`no-cors`&&(this._useDefaultCacheabilityPluginIfNeeded(),await n.cachePut(e,r.clone()))}else throw new t(`missing-precache-entry`,{cacheName:this.cacheName,url:e.url});return r}async _handleInstall(e,n){this._useDefaultCacheabilityPluginIfNeeded();let r=await n.fetch(e);if(!await n.cachePut(e,r.clone()))throw new t(`bad-precaching-response`,{url:e.url,status:r.status});return r}_useDefaultCacheabilityPluginIfNeeded(){let t=null,n=0;for(let[r,i]of this.plugins.entries())i!==e.copyRedirectedCacheableResponsesPlugin&&(i===e.defaultPrecacheCacheabilityPlugin&&(t=r),i.cacheWillUpdate&&n++);n===0?this.plugins.push(e.defaultPrecacheCacheabilityPlugin):n>1&&t!==null&&this.plugins.splice(t,1)}};T.defaultPrecacheCacheabilityPlugin={async cacheWillUpdate({response:e}){return!e||e.status>=400?null:e}},T.copyRedirectedCacheableResponsesPlugin={async cacheWillUpdate({response:e}){return e.redirected?await p(e):e}};var E=class{constructor({cacheName:e,plugins:t=[],fallbackToNetwork:n=!0}={}){this._urlsToCacheKeys=new Map,this._urlsToCacheModes=new Map,this._cacheKeysToIntegrities=new Map,this._strategy=new T({cacheName:a.getPrecacheName(e),plugins:[...t,new u({precacheController:this})],fallbackToNetwork:n}),this.install=this.install.bind(this),this.activate=this.activate.bind(this)}get strategy(){return this._strategy}precache(e){this.addToCacheList(e),this._installAndActiveListenersAdded||=(self.addEventListener(`install`,this.install),self.addEventListener(`activate`,this.activate),!0)}addToCacheList(e){let n=[];for(let r of e){typeof r==`string`?n.push(r):r&&r.revision===void 0&&n.push(r.url);let{cacheKey:e,url:i}=c(r),a=typeof r!=`string`&&r.revision?`reload`:`default`;if(this._urlsToCacheKeys.has(i)&&this._urlsToCacheKeys.get(i)!==e)throw new t(`add-to-cache-list-conflicting-entries`,{firstEntry:this._urlsToCacheKeys.get(i),secondEntry:e});if(typeof r!=`string`&&r.integrity){if(this._cacheKeysToIntegrities.has(e)&&this._cacheKeysToIntegrities.get(e)!==r.integrity)throw new t(`add-to-cache-list-conflicting-integrities`,{url:i});this._cacheKeysToIntegrities.set(e,r.integrity)}if(this._urlsToCacheKeys.set(i,e),this._urlsToCacheModes.set(i,a),n.length>0){let e=`Workbox is precaching URLs without revision info: ${n.join(`, `)}\nThis is generally NOT safe. Learn more at https://bit.ly/wb-precache`;console.warn(e)}}}install(e){return o(e,async()=>{let t=new l;this.strategy.plugins.push(t);for(let[t,n]of this._urlsToCacheKeys){let r=this._cacheKeysToIntegrities.get(n),i=this._urlsToCacheModes.get(t),a=new Request(t,{integrity:r,cache:i,credentials:`same-origin`});await Promise.all(this.strategy.handleAll({params:{cacheKey:n},request:a,event:e}))}let{updatedURLs:n,notUpdatedURLs:r}=t;return{updatedURLs:n,notUpdatedURLs:r}})}activate(e){return o(e,async()=>{let e=await self.caches.open(this.strategy.cacheName),t=await e.keys(),n=new Set(this._urlsToCacheKeys.values()),r=[];for(let i of t)n.has(i.url)||(await e.delete(i),r.push(i.url));return{deletedURLs:r}})}getURLsToCacheKeys(){return this._urlsToCacheKeys}getCachedURLs(){return[...this._urlsToCacheKeys.keys()]}getCacheKeyForURL(e){let t=new URL(e,location.href);return this._urlsToCacheKeys.get(t.href)}getIntegrityForCacheKey(e){return this._cacheKeysToIntegrities.get(e)}async matchPrecache(e){let t=e instanceof Request?e.url:e,n=this.getCacheKeyForURL(t);if(n)return(await self.caches.open(this.strategy.cacheName)).match(n)}createHandlerBoundToURL(e){let n=this.getCacheKeyForURL(e);if(!n)throw new t(`non-precached-url`,{url:e});return t=>(t.request=new Request(e),t.params=Object.assign({cacheKey:n},t.params),this.strategy.handle(t))}},D,O=()=>(D||=new E,D);try{self[`workbox:routing:7.3.0`]&&_()}catch{}var k=e=>e&&typeof e==`object`?e:{handle:e},A=class{constructor(e,t,n=`GET`){this.handler=k(t),this.match=e,this.method=n}setCatchHandler(e){this.catchHandler=k(e)}},j=class extends A{constructor(e,t,n){super(({url:t})=>{let n=e.exec(t.href);if(n&&!(t.origin!==location.origin&&n.index!==0))return n.slice(1)},t,n)}},M=class{constructor(){this._routes=new Map,this._defaultHandlerMap=new Map}get routes(){return this._routes}addFetchListener(){self.addEventListener(`fetch`,(e=>{let{request:t}=e,n=this.handleRequest({request:t,event:e});n&&e.respondWith(n)}))}addCacheListener(){self.addEventListener(`message`,(e=>{if(e.data&&e.data.type===`CACHE_URLS`){let{payload:t}=e.data,n=Promise.all(t.urlsToCache.map(t=>{typeof t==`string`&&(t=[t]);let n=new Request(...t);return this.handleRequest({request:n,event:e})}));e.waitUntil(n),e.ports&&e.ports[0]&&n.then(()=>e.ports[0].postMessage(!0))}}))}handleRequest({request:e,event:t}){let n=new URL(e.url,location.href);if(!n.protocol.startsWith(`http`))return;let r=n.origin===location.origin,{params:i,route:a}=this.findMatchingRoute({event:t,request:e,sameOrigin:r,url:n}),o=a&&a.handler,s=e.method;if(!o&&this._defaultHandlerMap.has(s)&&(o=this._defaultHandlerMap.get(s)),!o)return;let c;try{c=o.handle({url:n,request:e,event:t,params:i})}catch(e){c=Promise.reject(e)}let l=a&&a.catchHandler;return c instanceof Promise&&(this._catchHandler||l)&&(c=c.catch(async r=>{if(l)try{return await l.handle({url:n,request:e,event:t,params:i})}catch(e){e instanceof Error&&(r=e)}if(this._catchHandler)return this._catchHandler.handle({url:n,request:e,event:t});throw r})),c}findMatchingRoute({url:e,sameOrigin:t,request:n,event:r}){let i=this._routes.get(n.method)||[];for(let a of i){let i,o=a.match({url:e,sameOrigin:t,request:n,event:r});if(o)return i=o,(Array.isArray(i)&&i.length===0||o.constructor===Object&&Object.keys(o).length===0||typeof o==`boolean`)&&(i=void 0),{route:a,params:i}}return{}}setDefaultHandler(e,t=`GET`){this._defaultHandlerMap.set(t,k(e))}setCatchHandler(e){this._catchHandler=k(e)}registerRoute(e){this._routes.has(e.method)||this._routes.set(e.method,[]),this._routes.get(e.method).push(e)}unregisterRoute(e){if(!this._routes.has(e.method))throw new t(`unregister-route-but-not-found-with-method`,{method:e.method});let n=this._routes.get(e.method).indexOf(e);if(n>-1)this._routes.get(e.method).splice(n,1);else throw new t(`unregister-route-route-not-registered`)}},N,P=()=>(N||(N=new M,N.addFetchListener(),N.addCacheListener()),N);function F(e,n,r){let i;if(typeof e==`string`){let t=new URL(e,location.href);i=new A(({url:e})=>e.href===t.href,n,r)}else if(e instanceof RegExp)i=new j(e,n,r);else if(typeof e==`function`)i=new A(e,n,r);else if(e instanceof A)i=e;else throw new t(`unsupported-route-type`,{moduleName:`workbox-routing`,funcName:`registerRoute`,paramName:`capture`});return P().registerRoute(i),i}function I(e,t=[]){for(let n of[...e.searchParams.keys()])t.some(e=>e.test(n))&&e.searchParams.delete(n);return e}function*L(e,{ignoreURLParametersMatching:t=[/^utm_/,/^fbclid$/],directoryIndex:n=`index.html`,cleanURLs:r=!0,urlManipulation:i}={}){let a=new URL(e,location.href);a.hash=``,yield a.href;let o=I(a,t);if(yield o.href,n&&o.pathname.endsWith(`/`)){let e=new URL(o.href);e.pathname+=n,yield e.href}if(r){let e=new URL(o.href);e.pathname+=`.html`,yield e.href}if(i){let e=i({url:a});for(let t of e)yield t.href}}var R=class extends A{constructor(e,t){super(({request:n})=>{let r=e.getURLsToCacheKeys();for(let i of L(n.url,t)){let t=r.get(i);if(t)return{cacheKey:t,integrity:e.getIntegrityForCacheKey(t)}}},e.strategy)}};function z(e){F(new R(O(),e))}var B=`-precache-`,V=async(e,t=B)=>{let n=(await self.caches.keys()).filter(n=>n.includes(t)&&n.includes(self.registration.scope)&&n!==e);return await Promise.all(n.map(e=>self.caches.delete(e))),n};function H(){self.addEventListener(`activate`,(e=>{let t=a.getPrecacheName();e.waitUntil(V(t).then(e=>{}))}))}function U(e){O().precache(e)}function W(e,t){U(e),z(t)}var G=class extends w{async _handle(e,n){let r=await n.cacheMatch(e),i;if(!r)try{r=await n.fetchAndCachePut(e)}catch(e){e instanceof Error&&(i=e)}if(!r)throw new t(`no-response`,{url:e.url,error:i});return r}};W([{"revision":"2450b5f40cc2844c131d6cca139560c5","url":"index.html"},{"revision":"26dccd02a2ef7522892015154f5e3680","url":"manifest.webmanifest"},{"revision":"a0fb34fc84eb148d51812cd62669f20d","url":"icon-512.svg"},{"revision":"a0fb34fc84eb148d51812cd62669f20d","url":"icon-192.svg"},{"revision":null,"url":"assets/index-jG9mLs-J.js"},{"revision":null,"url":"assets/index-DMA-So69.css"},{"revision":"a0fb34fc84eb148d51812cd62669f20d","url":"icon-192.svg"},{"revision":"a0fb34fc84eb148d51812cd62669f20d","url":"icon-512.svg"},{"revision":"26dccd02a2ef7522892015154f5e3680","url":"manifest.webmanifest"}]),H();var K=e=>(e.headers.get(`content-type`)??``).startsWith(`text/html`);F(({url:e})=>e.pathname.startsWith(`/assets/`),new G({cacheName:`ppm-assets`,plugins:[{cacheWillUpdate:async({response:e})=>K(e)?null:e,cachedResponseWillBeUsed:async({cachedResponse:e})=>e&&K(e)?null:e}]})),self.skipWaiting(),self.addEventListener(`activate`,()=>{self.clients.claim()});
+try{self[`workbox:core:7.3.0`]&&_()}catch{}var e=(e,...t)=>{let n=e;return t.length>0&&(n+=` :: ${JSON.stringify(t)}`),n},t=class extends Error{constructor(t,n){let r=e(t,n);super(r),this.name=t,this.details=n}},n={googleAnalytics:`googleAnalytics`,precache:`precache-v2`,prefix:`workbox`,runtime:`runtime`,suffix:typeof registration<`u`?registration.scope:``},r=e=>[n.prefix,e,n.suffix].filter(e=>e&&e.length>0).join(`-`),i=e=>{for(let t of Object.keys(n))e(t)},a={updateDetails:e=>{i(t=>{typeof e[t]==`string`&&(n[t]=e[t])})},getGoogleAnalyticsName:e=>e||r(n.googleAnalytics),getPrecacheName:e=>e||r(n.precache),getPrefix:()=>n.prefix,getRuntimeName:e=>e||r(n.runtime),getSuffix:()=>n.suffix};function o(e,t){let n=t();return e.waitUntil(n),n}try{self[`workbox:precaching:7.3.0`]&&_()}catch{}var s=`__WB_REVISION__`;function c(e){if(!e)throw new t(`add-to-cache-list-unexpected-type`,{entry:e});if(typeof e==`string`){let t=new URL(e,location.href);return{cacheKey:t.href,url:t.href}}let{revision:n,url:r}=e;if(!r)throw new t(`add-to-cache-list-unexpected-type`,{entry:e});if(!n){let e=new URL(r,location.href);return{cacheKey:e.href,url:e.href}}let i=new URL(r,location.href),a=new URL(r,location.href);return i.searchParams.set(s,n),{cacheKey:i.href,url:a.href}}var l=class{constructor(){this.updatedURLs=[],this.notUpdatedURLs=[],this.handlerWillStart=async({request:e,state:t})=>{t&&(t.originalRequest=e)},this.cachedResponseWillBeUsed=async({event:e,state:t,cachedResponse:n})=>{if(e.type===`install`&&t&&t.originalRequest&&t.originalRequest instanceof Request){let e=t.originalRequest.url;n?this.notUpdatedURLs.push(e):this.updatedURLs.push(e)}return n}}},u=class{constructor({precacheController:e}){this.cacheKeyWillBeUsed=async({request:e,params:t})=>{let n=t?.cacheKey||this._precacheController.getCacheKeyForURL(e.url);return n?new Request(n,{headers:e.headers}):e},this._precacheController=e}},d;function f(){if(d===void 0){let e=new Response(``);if(`body`in e)try{new Response(e.body),d=!0}catch{d=!1}d=!1}return d}async function p(e,n){let r=null;if(e.url&&(r=new URL(e.url).origin),r!==self.location.origin)throw new t(`cross-origin-copy-response`,{origin:r});let i=e.clone(),a={headers:new Headers(i.headers),status:i.status,statusText:i.statusText},o=n?n(a):a,s=f()?i.body:await i.blob();return new Response(s,o)}var m=e=>new URL(String(e),location.href).href.replace(RegExp(`^${location.origin}`),``);function h(e,t){let n=new URL(e);for(let e of t)n.searchParams.delete(e);return n.href}async function g(e,t,n,r){let i=h(t.url,n);if(t.url===i)return e.match(t,r);let a=Object.assign(Object.assign({},r),{ignoreSearch:!0}),o=await e.keys(t,a);for(let t of o)if(i===h(t.url,n))return e.match(t,r)}var v=class{constructor(){this.promise=new Promise((e,t)=>{this.resolve=e,this.reject=t})}},y=new Set;async function b(){for(let e of y)await e()}function x(e){return new Promise(t=>setTimeout(t,e))}try{self[`workbox:strategies:7.3.0`]&&_()}catch{}function S(e){return typeof e==`string`?new Request(e):e}var C=class{constructor(e,t){this._cacheKeys={},Object.assign(this,t),this.event=t.event,this._strategy=e,this._handlerDeferred=new v,this._extendLifetimePromises=[],this._plugins=[...e.plugins],this._pluginStateMap=new Map;for(let e of this._plugins)this._pluginStateMap.set(e,{});this.event.waitUntil(this._handlerDeferred.promise)}async fetch(e){let{event:n}=this,r=S(e);if(r.mode===`navigate`&&n instanceof FetchEvent&&n.preloadResponse){let e=await n.preloadResponse;if(e)return e}let i=this.hasCallback(`fetchDidFail`)?r.clone():null;try{for(let e of this.iterateCallbacks(`requestWillFetch`))r=await e({request:r.clone(),event:n})}catch(e){if(e instanceof Error)throw new t(`plugin-error-request-will-fetch`,{thrownErrorMessage:e.message})}let a=r.clone();try{let e;e=await fetch(r,r.mode===`navigate`?void 0:this._strategy.fetchOptions);for(let t of this.iterateCallbacks(`fetchDidSucceed`))e=await t({event:n,request:a,response:e});return e}catch(e){throw i&&await this.runCallbacks(`fetchDidFail`,{error:e,event:n,originalRequest:i.clone(),request:a.clone()}),e}}async fetchAndCachePut(e){let t=await this.fetch(e),n=t.clone();return this.waitUntil(this.cachePut(e,n)),t}async cacheMatch(e){let t=S(e),n,{cacheName:r,matchOptions:i}=this._strategy,a=await this.getCacheKey(t,`read`),o=Object.assign(Object.assign({},i),{cacheName:r});n=await caches.match(a,o);for(let e of this.iterateCallbacks(`cachedResponseWillBeUsed`))n=await e({cacheName:r,matchOptions:i,cachedResponse:n,request:a,event:this.event})||void 0;return n}async cachePut(e,n){let r=S(e);await x(0);let i=await this.getCacheKey(r,`write`);if(!n)throw new t(`cache-put-with-no-response`,{url:m(i.url)});let a=await this._ensureResponseSafeToCache(n);if(!a)return!1;let{cacheName:o,matchOptions:s}=this._strategy,c=await self.caches.open(o),l=this.hasCallback(`cacheDidUpdate`),u=l?await g(c,i.clone(),[`__WB_REVISION__`],s):null;try{await c.put(i,l?a.clone():a)}catch(e){if(e instanceof Error)throw e.name===`QuotaExceededError`&&await b(),e}for(let e of this.iterateCallbacks(`cacheDidUpdate`))await e({cacheName:o,oldResponse:u,newResponse:a.clone(),request:i,event:this.event});return!0}async getCacheKey(e,t){let n=`${e.url} | ${t}`;if(!this._cacheKeys[n]){let r=e;for(let e of this.iterateCallbacks(`cacheKeyWillBeUsed`))r=S(await e({mode:t,request:r,event:this.event,params:this.params}));this._cacheKeys[n]=r}return this._cacheKeys[n]}hasCallback(e){for(let t of this._strategy.plugins)if(e in t)return!0;return!1}async runCallbacks(e,t){for(let n of this.iterateCallbacks(e))await n(t)}*iterateCallbacks(e){for(let t of this._strategy.plugins)if(typeof t[e]==`function`){let n=this._pluginStateMap.get(t);yield r=>{let i=Object.assign(Object.assign({},r),{state:n});return t[e](i)}}}waitUntil(e){return this._extendLifetimePromises.push(e),e}async doneWaiting(){for(;this._extendLifetimePromises.length;){let e=this._extendLifetimePromises.splice(0),t=(await Promise.allSettled(e)).find(e=>e.status===`rejected`);if(t)throw t.reason}}destroy(){this._handlerDeferred.resolve(null)}async _ensureResponseSafeToCache(e){let t=e,n=!1;for(let e of this.iterateCallbacks(`cacheWillUpdate`))if(t=await e({request:this.request,response:t,event:this.event})||void 0,n=!0,!t)break;return n||t&&t.status!==200&&(t=void 0),t}},w=class{constructor(e={}){this.cacheName=a.getRuntimeName(e.cacheName),this.plugins=e.plugins||[],this.fetchOptions=e.fetchOptions,this.matchOptions=e.matchOptions}handle(e){let[t]=this.handleAll(e);return t}handleAll(e){e instanceof FetchEvent&&(e={event:e,request:e.request});let t=e.event,n=typeof e.request==`string`?new Request(e.request):e.request,r=`params`in e?e.params:void 0,i=new C(this,{event:t,request:n,params:r}),a=this._getResponse(i,n,t);return[a,this._awaitComplete(a,i,n,t)]}async _getResponse(e,n,r){await e.runCallbacks(`handlerWillStart`,{event:r,request:n});let i;try{if(i=await this._handle(n,e),!i||i.type===`error`)throw new t(`no-response`,{url:n.url})}catch(t){if(t instanceof Error){for(let a of e.iterateCallbacks(`handlerDidError`))if(i=await a({error:t,event:r,request:n}),i)break}if(!i)throw t}for(let t of e.iterateCallbacks(`handlerWillRespond`))i=await t({event:r,request:n,response:i});return i}async _awaitComplete(e,t,n,r){let i,a;try{i=await e}catch{}try{await t.runCallbacks(`handlerDidRespond`,{event:r,request:n,response:i}),await t.doneWaiting()}catch(e){e instanceof Error&&(a=e)}if(await t.runCallbacks(`handlerDidComplete`,{event:r,request:n,response:i,error:a}),t.destroy(),a)throw a}},T=class e extends w{constructor(t={}){t.cacheName=a.getPrecacheName(t.cacheName),super(t),this._fallbackToNetwork=t.fallbackToNetwork!==!1,this.plugins.push(e.copyRedirectedCacheableResponsesPlugin)}async _handle(e,t){return await t.cacheMatch(e)||(t.event&&t.event.type===`install`?await this._handleInstall(e,t):await this._handleFetch(e,t))}async _handleFetch(e,n){let r,i=n.params||{};if(this._fallbackToNetwork){let t=i.integrity,a=e.integrity,o=!a||a===t;r=await n.fetch(new Request(e,{integrity:e.mode===`no-cors`?void 0:a||t})),t&&o&&e.mode!==`no-cors`&&(this._useDefaultCacheabilityPluginIfNeeded(),await n.cachePut(e,r.clone()))}else throw new t(`missing-precache-entry`,{cacheName:this.cacheName,url:e.url});return r}async _handleInstall(e,n){this._useDefaultCacheabilityPluginIfNeeded();let r=await n.fetch(e);if(!await n.cachePut(e,r.clone()))throw new t(`bad-precaching-response`,{url:e.url,status:r.status});return r}_useDefaultCacheabilityPluginIfNeeded(){let t=null,n=0;for(let[r,i]of this.plugins.entries())i!==e.copyRedirectedCacheableResponsesPlugin&&(i===e.defaultPrecacheCacheabilityPlugin&&(t=r),i.cacheWillUpdate&&n++);n===0?this.plugins.push(e.defaultPrecacheCacheabilityPlugin):n>1&&t!==null&&this.plugins.splice(t,1)}};T.defaultPrecacheCacheabilityPlugin={async cacheWillUpdate({response:e}){return!e||e.status>=400?null:e}},T.copyRedirectedCacheableResponsesPlugin={async cacheWillUpdate({response:e}){return e.redirected?await p(e):e}};var E=class{constructor({cacheName:e,plugins:t=[],fallbackToNetwork:n=!0}={}){this._urlsToCacheKeys=new Map,this._urlsToCacheModes=new Map,this._cacheKeysToIntegrities=new Map,this._strategy=new T({cacheName:a.getPrecacheName(e),plugins:[...t,new u({precacheController:this})],fallbackToNetwork:n}),this.install=this.install.bind(this),this.activate=this.activate.bind(this)}get strategy(){return this._strategy}precache(e){this.addToCacheList(e),this._installAndActiveListenersAdded||=(self.addEventListener(`install`,this.install),self.addEventListener(`activate`,this.activate),!0)}addToCacheList(e){let n=[];for(let r of e){typeof r==`string`?n.push(r):r&&r.revision===void 0&&n.push(r.url);let{cacheKey:e,url:i}=c(r),a=typeof r!=`string`&&r.revision?`reload`:`default`;if(this._urlsToCacheKeys.has(i)&&this._urlsToCacheKeys.get(i)!==e)throw new t(`add-to-cache-list-conflicting-entries`,{firstEntry:this._urlsToCacheKeys.get(i),secondEntry:e});if(typeof r!=`string`&&r.integrity){if(this._cacheKeysToIntegrities.has(e)&&this._cacheKeysToIntegrities.get(e)!==r.integrity)throw new t(`add-to-cache-list-conflicting-integrities`,{url:i});this._cacheKeysToIntegrities.set(e,r.integrity)}if(this._urlsToCacheKeys.set(i,e),this._urlsToCacheModes.set(i,a),n.length>0){let e=`Workbox is precaching URLs without revision info: ${n.join(`, `)}\nThis is generally NOT safe. Learn more at https://bit.ly/wb-precache`;console.warn(e)}}}install(e){return o(e,async()=>{let t=new l;this.strategy.plugins.push(t);for(let[t,n]of this._urlsToCacheKeys){let r=this._cacheKeysToIntegrities.get(n),i=this._urlsToCacheModes.get(t),a=new Request(t,{integrity:r,cache:i,credentials:`same-origin`});await Promise.all(this.strategy.handleAll({params:{cacheKey:n},request:a,event:e}))}let{updatedURLs:n,notUpdatedURLs:r}=t;return{updatedURLs:n,notUpdatedURLs:r}})}activate(e){return o(e,async()=>{let e=await self.caches.open(this.strategy.cacheName),t=await e.keys(),n=new Set(this._urlsToCacheKeys.values()),r=[];for(let i of t)n.has(i.url)||(await e.delete(i),r.push(i.url));return{deletedURLs:r}})}getURLsToCacheKeys(){return this._urlsToCacheKeys}getCachedURLs(){return[...this._urlsToCacheKeys.keys()]}getCacheKeyForURL(e){let t=new URL(e,location.href);return this._urlsToCacheKeys.get(t.href)}getIntegrityForCacheKey(e){return this._cacheKeysToIntegrities.get(e)}async matchPrecache(e){let t=e instanceof Request?e.url:e,n=this.getCacheKeyForURL(t);if(n)return(await self.caches.open(this.strategy.cacheName)).match(n)}createHandlerBoundToURL(e){let n=this.getCacheKeyForURL(e);if(!n)throw new t(`non-precached-url`,{url:e});return t=>(t.request=new Request(e),t.params=Object.assign({cacheKey:n},t.params),this.strategy.handle(t))}},D,O=()=>(D||=new E,D);try{self[`workbox:routing:7.3.0`]&&_()}catch{}var k=e=>e&&typeof e==`object`?e:{handle:e},A=class{constructor(e,t,n=`GET`){this.handler=k(t),this.match=e,this.method=n}setCatchHandler(e){this.catchHandler=k(e)}},j=class extends A{constructor(e,t,n){super(({url:t})=>{let n=e.exec(t.href);if(n&&!(t.origin!==location.origin&&n.index!==0))return n.slice(1)},t,n)}},M=class{constructor(){this._routes=new Map,this._defaultHandlerMap=new Map}get routes(){return this._routes}addFetchListener(){self.addEventListener(`fetch`,(e=>{let{request:t}=e,n=this.handleRequest({request:t,event:e});n&&e.respondWith(n)}))}addCacheListener(){self.addEventListener(`message`,(e=>{if(e.data&&e.data.type===`CACHE_URLS`){let{payload:t}=e.data,n=Promise.all(t.urlsToCache.map(t=>{typeof t==`string`&&(t=[t]);let n=new Request(...t);return this.handleRequest({request:n,event:e})}));e.waitUntil(n),e.ports&&e.ports[0]&&n.then(()=>e.ports[0].postMessage(!0))}}))}handleRequest({request:e,event:t}){let n=new URL(e.url,location.href);if(!n.protocol.startsWith(`http`))return;let r=n.origin===location.origin,{params:i,route:a}=this.findMatchingRoute({event:t,request:e,sameOrigin:r,url:n}),o=a&&a.handler,s=e.method;if(!o&&this._defaultHandlerMap.has(s)&&(o=this._defaultHandlerMap.get(s)),!o)return;let c;try{c=o.handle({url:n,request:e,event:t,params:i})}catch(e){c=Promise.reject(e)}let l=a&&a.catchHandler;return c instanceof Promise&&(this._catchHandler||l)&&(c=c.catch(async r=>{if(l)try{return await l.handle({url:n,request:e,event:t,params:i})}catch(e){e instanceof Error&&(r=e)}if(this._catchHandler)return this._catchHandler.handle({url:n,request:e,event:t});throw r})),c}findMatchingRoute({url:e,sameOrigin:t,request:n,event:r}){let i=this._routes.get(n.method)||[];for(let a of i){let i,o=a.match({url:e,sameOrigin:t,request:n,event:r});if(o)return i=o,(Array.isArray(i)&&i.length===0||o.constructor===Object&&Object.keys(o).length===0||typeof o==`boolean`)&&(i=void 0),{route:a,params:i}}return{}}setDefaultHandler(e,t=`GET`){this._defaultHandlerMap.set(t,k(e))}setCatchHandler(e){this._catchHandler=k(e)}registerRoute(e){this._routes.has(e.method)||this._routes.set(e.method,[]),this._routes.get(e.method).push(e)}unregisterRoute(e){if(!this._routes.has(e.method))throw new t(`unregister-route-but-not-found-with-method`,{method:e.method});let n=this._routes.get(e.method).indexOf(e);if(n>-1)this._routes.get(e.method).splice(n,1);else throw new t(`unregister-route-route-not-registered`)}},N,P=()=>(N||(N=new M,N.addFetchListener(),N.addCacheListener()),N);function F(e,n,r){let i;if(typeof e==`string`){let t=new URL(e,location.href);i=new A(({url:e})=>e.href===t.href,n,r)}else if(e instanceof RegExp)i=new j(e,n,r);else if(typeof e==`function`)i=new A(e,n,r);else if(e instanceof A)i=e;else throw new t(`unsupported-route-type`,{moduleName:`workbox-routing`,funcName:`registerRoute`,paramName:`capture`});return P().registerRoute(i),i}function I(e,t=[]){for(let n of[...e.searchParams.keys()])t.some(e=>e.test(n))&&e.searchParams.delete(n);return e}function*L(e,{ignoreURLParametersMatching:t=[/^utm_/,/^fbclid$/],directoryIndex:n=`index.html`,cleanURLs:r=!0,urlManipulation:i}={}){let a=new URL(e,location.href);a.hash=``,yield a.href;let o=I(a,t);if(yield o.href,n&&o.pathname.endsWith(`/`)){let e=new URL(o.href);e.pathname+=n,yield e.href}if(r){let e=new URL(o.href);e.pathname+=`.html`,yield e.href}if(i){let e=i({url:a});for(let t of e)yield t.href}}var R=class extends A{constructor(e,t){super(({request:n})=>{let r=e.getURLsToCacheKeys();for(let i of L(n.url,t)){let t=r.get(i);if(t)return{cacheKey:t,integrity:e.getIntegrityForCacheKey(t)}}},e.strategy)}};function z(e){F(new R(O(),e))}var B=`-precache-`,V=async(e,t=B)=>{let n=(await self.caches.keys()).filter(n=>n.includes(t)&&n.includes(self.registration.scope)&&n!==e);return await Promise.all(n.map(e=>self.caches.delete(e))),n};function H(){self.addEventListener(`activate`,(e=>{let t=a.getPrecacheName();e.waitUntil(V(t).then(e=>{}))}))}function U(e){O().precache(e)}function W(e,t){U(e),z(t)}var G=class extends w{async _handle(e,n){let r=await n.cacheMatch(e),i;if(!r)try{r=await n.fetchAndCachePut(e)}catch(e){e instanceof Error&&(i=e)}if(!r)throw new t(`no-response`,{url:e.url,error:i});return r}};W([{"revision":"0073462ee089f4ef150ae7a31e51d570","url":"index.html"},{"revision":"26dccd02a2ef7522892015154f5e3680","url":"manifest.webmanifest"},{"revision":"a0fb34fc84eb148d51812cd62669f20d","url":"icon-512.svg"},{"revision":"a0fb34fc84eb148d51812cd62669f20d","url":"icon-192.svg"},{"revision":null,"url":"assets/index-DeCJasyy.css"},{"revision":null,"url":"assets/index-CtAvmybi.js"},{"revision":"a0fb34fc84eb148d51812cd62669f20d","url":"icon-192.svg"},{"revision":"a0fb34fc84eb148d51812cd62669f20d","url":"icon-512.svg"},{"revision":"26dccd02a2ef7522892015154f5e3680","url":"manifest.webmanifest"}]),H();var K=e=>(e.headers.get(`content-type`)??``).startsWith(`text/html`);F(({url:e})=>e.pathname.startsWith(`/assets/`),new G({cacheName:`ppm-assets`,plugins:[{cacheWillUpdate:async({response:e})=>K(e)?null:e,cachedResponseWillBeUsed:async({cachedResponse:e})=>e&&K(e)?null:e}]})),self.skipWaiting(),self.addEventListener(`activate`,()=>{self.clients.claim()});

package/docs/deployment-guide.md

@@ -526,6 +526,29 @@ light and a full tier with leases. It is the backend for the System Monitor wind
 PPM auth. On Windows a single long-lived PowerShell collector serves every tick — never spawn one
 per tick.
 
+The full tier also carries the per-device rows the Performance page draws (one entry per disk, NIC
+and GPU) plus the static hardware inventory those pages label themselves with — DIMM slots, disk
+models and serials, link speeds, driver and API versions. On Linux all of it comes from `/proc`,
+`/sys`, `/run/udev/data`, DRM fdinfo, RAPL and hwmon, so nothing here needs root or a helper
+daemon; a field the host cannot measure is omitted rather than sent as `0`, and the UI renders an
+omitted field as an em dash.
+
+`/api/system/services*` is the Services page: `systemctl list-units` + one bulk `systemctl show`
+per scope (two spawns, not one per unit), with `journalctl -o json` behind the per-unit log. Unit
+actions (start/stop/restart/enable/disable) are separate authenticated routes and are confirmed in
+the UI before they run. `/api/system/app-icon/:id` serves an application's own desktop-entry icon;
+it accepts `?token=` because an `<img>` cannot send an `Authorization` header, and it is safe to
+widen to because it takes an app id, never a path.
+
+Each Linux process row also carries its swapped memory (`VmSwap` from `/proc/<pid>/status`) and a
+`unitKey` of `"<scope>:<unit>"` read from `/proc/<pid>/cgroup` — about 4.5 ms per full tick for 560
+processes, beside the 1.7 ms `/proc/<pid>/io` already costs. The Services page's per-unit CPU,
+memory, swap, drive and GPU are summed from those rows **in the browser**, not in the services
+route: the route has no counter state and computing rates there would give the same process two
+different figures on two pages of one window. The scope is part of the key because a unit name
+alone is ambiguous — `dbus-broker.service` commonly exists in both scopes — and a user unit
+belonging to another uid is deliberately dropped, since it is not on this page at all.
+
 ### Daemon state
 ```bash
 ppm status --json      # pid, port, host, shareUrl, tunnel state

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hienlh/ppm",
-  "version": "0.23.5",
+  "version": "0.23.7",
   "description": "Personal Project Manager — mobile-first web IDE with AI assistance",
   "author": "hienlh",
   "license": "SEE LICENSE IN LICENSE",

package/release-from-worktree.sh

@@ -0,0 +1,224 @@
+#!/bin/bash
+set -uo pipefail
+
+# release.sh — full PPM release from a local machine.
+#
+# GitHub Actions release is disabled (billing), so binaries are built and
+# uploaded here instead. Run this AFTER you have committed & pushed your source
+# changes + the version bump in package.json. This script itself does NOT commit
+# source; it performs the release steps:
+#   1. regenerate skill assets + build frontend
+#   2. publish the npm package (skipped if the version is already on npm)
+#   3. compile binaries for every platform
+#   4. package each binary with web assets + the matching Claude CLI + SHA256SUMS
+#   5. create + push the git tag
+#   6. create/update the GitHub release and upload the archives + SHA256SUMS
+#
+# The npm version and the GitHub binary release always share the same version,
+# so `curl … | sh` installs stay in sync with `bunx @hienlh/ppm`.
+#
+# Usage:
+#   bash scripts/release.sh            # version from package.json
+#   bash scripts/release.sh 0.17.8     # explicit version (must match package.json)
+
+REPO_DEFAULT="hienlh/ppm"
+
+VERSION="${1:-}"
+if [ -z "$VERSION" ]; then
+  VERSION=$(node -p "require('./package.json').version")
+fi
+VERSION="${VERSION#v}"          # strip leading 'v' if provided
+TAG="v$VERSION"
+PKG_VERSION=$(node -p "require('./package.json').version")
+PKG_NAME=$(node -p "require('./package.json').name")
+
+echo "=== PPM release $TAG ($PKG_NAME) ==="
+
+fail() { echo "✗ $1" >&2; exit 1; }
+
+# ---------------------------------------------------------------------------
+# Preflight — refuse to release from an inconsistent state
+# ---------------------------------------------------------------------------
+echo "[preflight] validating repository state..."
+
+[ "$VERSION" = "$PKG_VERSION" ] || \
+  fail "requested $VERSION but package.json is $PKG_VERSION — bump + commit first."
+
+BRANCH=$(git rev-parse --abbrev-ref HEAD)
+[ "$BRANCH" = "main" ] || echo "  ! worktree branch '$BRANCH'; HEAD vs origin/main is checked below"
+
+# No uncommitted TRACKED changes (untracked files are fine — dist/, etc.)
+if [ -n "$(git status --porcelain --untracked-files=no)" ]; then
+  git status --short >&2
+  fail "working tree has uncommitted tracked changes — commit or stash first."
+fi
+
+# Guard the concurrent multi-device release race: never release while behind,
+# never tag commits the remote has not seen.
+git fetch origin --tags --quiet || fail "git fetch failed."
+BEHIND=$(git rev-list --count "HEAD..origin/main")
+AHEAD=$(git rev-list --count "origin/main..HEAD")
+[ "$BEHIND" = "0" ] || fail "local is $BEHIND commit(s) behind origin/main — pull/rebase first."
+[ "$AHEAD" = "0" ] || fail "local is $AHEAD commit(s) ahead of origin/main — push your source first."
+
+echo "  ✓ on main · clean · in sync with origin · version $VERSION"
+
+# ---------------------------------------------------------------------------
+# 1. Skill assets + frontend
+# ---------------------------------------------------------------------------
+echo "[1/6] Regenerating skill assets + building frontend..."
+bun run generate:skill || fail "generate:skill failed."
+bun run build:web      || fail "build:web failed."
+# `npm publish --ignore-scripts` below deliberately skips `prepublishOnly`, so
+# the release path must run the two post-build steps itself. Monaco is loaded
+# dynamically from `dist/web/assets/monaco/vs`; without this copy an editor
+# receives its file contents but spins forever waiting for the AMD loader.
+bun scripts/copy-monaco.ts || fail "copy-monaco failed."
+bun scripts/precompress-web.ts || fail "precompress-web failed."
+
+# Skill assets are generated artifacts kept in git (mirrors the published pkg).
+# Commit + push them if regeneration changed anything, so the tag we cut below
+# matches exactly what npm ships.
+if [ -n "$(git status --porcelain assets/skills)" ]; then
+  echo "  -> skill assets changed — committing"
+  git add assets/skills
+  git commit -q -m "chore: regenerate skill assets for $TAG"
+  git push origin HEAD:main || fail "pushing skill-asset commit failed (remote moved?)."
+fi
+
+# ---------------------------------------------------------------------------
+# 2. npm publish (idempotent)
+# ---------------------------------------------------------------------------
+echo "[2/6] Publishing to npm..."
+PUBLISHED=$(npm view "${PKG_NAME}@${VERSION}" version 2>/dev/null || true)
+if [ "$PUBLISHED" = "$VERSION" ]; then
+  echo "  -> ${PKG_NAME}@${VERSION} already published — skipping"
+else
+  # generate:skill + build:web already ran above; --ignore-scripts avoids a
+  # redundant second frontend build via prepublishOnly.
+  npm publish --access public --ignore-scripts || fail "npm publish failed."
+  echo "  -> published ${PKG_NAME}@${VERSION}"
+fi
+
+# ---------------------------------------------------------------------------
+# 3. Compile binaries (reuse dist/web from step 1)
+# ---------------------------------------------------------------------------
+echo "[3/6] Compiling binaries..."
+mkdir -p dist
+TARGETS=(
+  "bun-darwin-arm64:ppm-darwin-arm64"
+  "bun-darwin-x64-baseline:ppm-darwin-x64"
+  "bun-linux-x64-baseline:ppm-linux-x64"
+  "bun-linux-arm64:ppm-linux-arm64"
+  "bun-windows-x64-baseline:ppm-windows-x64.exe"
+)
+for entry in "${TARGETS[@]}"; do
+  target="${entry%%:*}"; artifact="${entry##*:}"
+  echo "  -> $artifact ($target)"
+  bun build src/index.ts --compile --target="$target" --outfile="dist/$artifact" \
+    || fail "compile failed for $target."
+done
+
+# ---------------------------------------------------------------------------
+# 3b. Fetch each platform's Claude CLI (version-matched to the SDK dep).
+# The SDK spawns a native `claude`; a compiled binary has no node_modules, so we
+# ship the matching CLI in each archive as a fallback (runtime prefers a system
+# claude). `npm pack` downloads a platform package regardless of the host's
+# os/cpu, so all 5 can be fetched on one machine.
+# ---------------------------------------------------------------------------
+echo "[3b] Fetching per-platform Claude CLI..."
+SDK_VER=$(node -p "require('./package.json').dependencies['@anthropic-ai/claude-agent-sdk']" | tr -d '^~')
+[ -n "$SDK_VER" ] || fail "could not read claude-agent-sdk version from package.json."
+CLI_CACHE="dist/.cli-cache"
+rm -rf "$CLI_CACHE"; mkdir -p "$CLI_CACHE"
+for plat in darwin-arm64 darwin-x64 linux-x64 linux-arm64 win32-x64; do
+  pkg="@anthropic-ai/claude-agent-sdk-$plat"
+  tgz=$( cd "$CLI_CACHE" && npm pack "$pkg@$SDK_VER" 2>/dev/null | tail -1 )
+  [ -n "$tgz" ] || fail "npm pack $pkg@$SDK_VER produced no tarball."
+  mkdir -p "$CLI_CACHE/$plat"
+  tar xzf "$CLI_CACHE/$tgz" -C "$CLI_CACHE/$plat" || fail "extract $pkg failed."
+  if [ "$plat" = "win32-x64" ]; then
+    [ -f "$CLI_CACHE/$plat/package/claude.exe" ] || fail "$pkg missing package/claude.exe."
+  else
+    [ -f "$CLI_CACHE/$plat/package/claude" ] || fail "$pkg missing package/claude."
+  fi
+  echo "  -> $pkg@$SDK_VER"
+done
+
+# Map a packaged artifact name (ppm-<os>-<arch>[.exe]) → SDK platform pkg dir.
+cli_plat_for() {
+  local p="${1#ppm-}"; p="${p%.exe}"
+  case "$p" in windows-x64) echo "win32-x64";; *) echo "$p";; esac
+}
+
+# ---------------------------------------------------------------------------
+# 4. Package binaries with web assets + Claude CLI
+# ---------------------------------------------------------------------------
+echo "[4/6] Packaging..."
+rm -f dist/ppm-*.tar.gz dist/ppm-*.zip
+for entry in "${TARGETS[@]}"; do
+  artifact="${entry##*:}"
+  plat=$(cli_plat_for "$artifact")
+  if [[ "$artifact" == *.exe ]]; then
+    name="${artifact%.exe}"
+    mkdir -p "dist/$name/cli"
+    cp "dist/$artifact" "dist/$name/ppm.exe"
+    cp -r dist/web "dist/$name/web"
+    cp "$CLI_CACHE/$plat/package/claude.exe" "dist/$name/cli/claude.exe" || fail "cli copy failed for $name."
+    (cd dist && zip -qr "${name}.zip" "$name") || fail "zip failed for $name."
+    rm -rf "dist/$name"
+    echo "  -> ${name}.zip"
+  else
+    mkdir -p "dist/$artifact-pkg/cli"
+    cp "dist/$artifact" "dist/$artifact-pkg/ppm"
+    cp -r dist/web "dist/$artifact-pkg/web"
+    cp "$CLI_CACHE/$plat/package/claude" "dist/$artifact-pkg/cli/claude" || fail "cli copy failed for $artifact."
+    chmod +x "dist/$artifact-pkg/cli/claude"
+    tar -czf "dist/${artifact}.tar.gz" -C "dist/$artifact-pkg" . || fail "tar failed for $artifact."
+    rm -rf "dist/$artifact-pkg"
+    echo "  -> ${artifact}.tar.gz"
+  fi
+done
+
+# SHA256SUMS — bare filenames (hash from inside dist/) so the upgrade client can
+# match on "<artifact>.<ext>". Standard sha256sum 2-space format. macOS lacks
+# sha256sum but has shasum; prefer it, fall back to sha256sum.
+if command -v shasum >/dev/null 2>&1; then
+  HASH_CMD="shasum -a 256"
+elif command -v sha256sum >/dev/null 2>&1; then
+  HASH_CMD="sha256sum"
+else
+  fail "neither shasum nor sha256sum found — cannot generate SHA256SUMS."
+fi
+( cd dist && $HASH_CMD ppm-*.tar.gz ppm-*.zip > SHA256SUMS ) || fail "SHA256SUMS generation failed."
+[ -s dist/SHA256SUMS ] || fail "SHA256SUMS empty — no archives to hash."
+echo "  -> SHA256SUMS"
+
+# ---------------------------------------------------------------------------
+# 5. Tag
+# ---------------------------------------------------------------------------
+echo "[5/6] Tagging $TAG..."
+if git rev-parse "$TAG" >/dev/null 2>&1; then
+  echo "  -> tag exists locally"
+else
+  git tag "$TAG" || fail "git tag failed."
+fi
+git push origin "$TAG" || fail "pushing tag failed."
+
+# ---------------------------------------------------------------------------
+# 6. GitHub release + upload archives
+# ---------------------------------------------------------------------------
+echo "[6/6] Uploading binaries to GitHub release..."
+ARCHIVES=(dist/ppm-*.tar.gz dist/ppm-*.zip dist/SHA256SUMS)
+if gh release view "$TAG" >/dev/null 2>&1; then
+  gh release upload "$TAG" "${ARCHIVES[@]}" --clobber || fail "gh release upload failed."
+else
+  gh release create "$TAG" "${ARCHIVES[@]}" --title "$TAG" --generate-notes \
+    || fail "gh release create failed."
+fi
+
+REPO=$(gh repo view --json nameWithOwner -q .nameWithOwner 2>/dev/null || echo "$REPO_DEFAULT")
+echo ""
+echo "=== Done: $TAG ==="
+echo "  npm:    https://www.npmjs.com/package/${PKG_NAME}/v/${VERSION}"
+echo "  github: https://github.com/${REPO}/releases/tag/${TAG}"

package/src/cli/commands/config-cmd.ts

@@ -122,6 +122,18 @@ export function registerConfigCommands(program: Command): void {
 
         console.log(`${C.green}Updated:${C.reset} ${key} = ${value}`);
         console.log(`${C.cyan}Saved to:${C.reset} ${configService.getConfigPath()}`);
+
+        // The supervisor owns cloudflared and caches its own copy of the config,
+        // so a write alone would sit there until the next restart. Nudge it the
+        // same way the HTTP switch does; a machine with no supervisor running
+        // just keeps the persisted choice for its next start.
+        if (key === "tunnel.enabled") {
+          const { requestTunnelReload } = await import("../../services/supervisor-state.ts");
+          const reload = requestTunnelReload();
+          console.log(reload === "sent"
+            ? `${C.cyan}Applied:${C.reset} asked the running PPM to ${all.tunnel && (all.tunnel as { enabled?: boolean }).enabled ? "start" : "stop"} its tunnel`
+            : `${C.cyan}Note:${C.reset} no running supervisor to apply it to (${reload}) — takes effect on next start`);
+        }
       } catch (err) {
         console.error(`${C.red}Error:${C.reset}`, (err as Error).message);
         process.exit(1);

package/src/providers/claude-agent-sdk.ts

@@ -26,12 +26,13 @@ import { listInheritedClaudeMcpServers } from "../services/claude-code-mcp.servi
 import { updateFromSdkEvent } from "../services/claude-usage.service.ts";
 import { getSessionProjectPath, setSessionMetadata, getSessionTitle, setSessionTitle, getSessionTitles, insertTurnUsage, getSessionAccount } from "../services/db.service.ts";
 import { SUBSCRIPTION_PROMPT_CACHE_TTL_MS, API_KEY_PROMPT_CACHE_TTL_MS } from "../services/subprocess-retention.ts";
-import { buildTurnUsage, formatTurnUsageLog } from "../shared/turn-usage.ts";
+import { buildTurnUsage, formatTurnUsageLog, messageContextTokens, messageCacheTtl } from "../shared/turn-usage.ts";
 import { accountSelector } from "../services/account-selector.service.ts";
 import { accountService, type AccountWithTokens } from "../services/account.service.ts";
 import { parseSessionMessage, nestChildEventsAcrossMessages, parseJsonlTranscript, fullParseWindow } from "../services/jsonl-transcript-parser.ts";
 import { applyBackgroundAgentStatus } from "../shared/background-agent-status.ts";
 import { mergeSubagentChildren, resolveSessionDir } from "../services/subagent-transcript-merger.ts";
+import { readCompactions, applyCompactions } from "../services/compaction-savings.ts";
 import { stringifyToolResultContent } from "../shared/tool-result-content.ts";
 import { isCompiledBinary } from "../services/autostart-generator.ts";
 import { resolveClaudeCliPath } from "../services/claude-cli-resolver.ts";
@@ -396,7 +397,13 @@ export class ClaudeAgentSdkProvider implements AIProvider {
     _projectPath: string | undefined,
     account: { id: string; accessToken: string } | null,
   ): Record<string, string | undefined> {
-    const base: Record<string, string | undefined> = { ...process.env };
+    // Terminal `/resume` and the IDE session pickers list with includeProgrammatic: false,
+    // which drops every transcript whose entrypoint is sdk-cli/sdk-ts/sdk-py — and sdk-ts is
+    // what the SDK stamps when the environment names no entrypoint. That is why sessions
+    // started here were invisible to the CLI and the VS Code extension even in the same
+    // project. The value reaches the transcript verbatim; telemetry maps unknown ones to
+    // "other", so naming ourselves beats borrowing another client's label.
+    const base: Record<string, string | undefined> = { ...process.env, CLAUDE_CODE_ENTRYPOINT: "ppm" };
 
     // Settings base_url has highest priority
     const providerConfig = this.getProviderConfig();
@@ -1009,6 +1016,31 @@ export class ClaudeAgentSdkProvider implements AIProvider {
     let resultContextWindowPct: number | undefined;
     let resultCostUsd: number | undefined;
     let lastAssistantUuid: string | undefined;
+    /**
+     * Context held by the turn's most recent top-level API call.
+     *
+     * Subagent frames are excluded by `parent_tool_use_id`: an agent runs its own
+     * conversation against its own prefix, so folding its usage in here would report a
+     * context this session does not have. Last rather than first, because a turn that ran
+     * tools grew between its calls and the next message replays the grown transcript.
+     */
+    let lastContextTokens: number | undefined;
+    /**
+     * Cache window the API reported, rather than the one `promptCacheTtlMs` infers from the
+     * credential. Sticky across turns for the same reason as `lastContextTokens`: a turn that
+     * only reads the cache names no window, and that is silence rather than a change.
+     */
+    let lastCacheTtlMs: number | undefined;
+    /**
+     * When this session was compacted, while that still invalidates the cache.
+     *
+     * Set at the boundary and cleared by the next top-level API call, which caches the new
+     * prefix — so an auto-compact mid-turn clears itself before the turn even ends, and only
+     * a compaction nothing followed (an explicit `/compact`) survives to be reported. That
+     * is Claude Code's own rule: it drops the flag on the first message to arrive after the
+     * boundary.
+     */
+    let compactedAt: number | undefined;
     let yieldedDone = false;
     /**
      * Only the first turn of this query resumes onto a fresh subprocess and replays the
@@ -1381,6 +1413,7 @@ export class ClaudeAgentSdkProvider implements AIProvider {
           if (subtype === "compact_boundary") {
             const meta = (msg as any).compact_metadata;
             console.log(`[sdk] session=${sessionId} COMPACT_BOUNDARY trigger=${meta?.trigger} pre_tokens=${meta?.pre_tokens}`);
+            compactedAt = Date.now();
             yield { type: "system" as const, subtype: "compact_done" } as ChatEvent;
             continue;
           }
@@ -1542,6 +1575,20 @@ export class ClaudeAgentSdkProvider implements AIProvider {
         if (msg.type === "assistant") {
           // Track assistant UUID from top-level messages (not subagent children)
           if (!parentId && (msg as any).uuid) lastAssistantUuid = (msg as any).uuid;
+          // The one place a real context size passes through. With partial messages on, a
+          // single API call emits several assistant frames carrying the same input side, so
+          // overwriting is correct — it is the *call* being measured, not the frame.
+          if (!parentId) {
+            const usage = (msg as any).message?.usage;
+            const ctx = messageContextTokens(usage);
+            if (ctx != null) lastContextTokens = ctx;
+            const ttl = messageCacheTtl(usage);
+            if (ttl) lastCacheTtlMs = ttl === "1h" ? SUBSCRIPTION_PROMPT_CACHE_TTL_MS : API_KEY_PROMPT_CACHE_TTL_MS;
+            // This call ran against the post-compaction prefix and cached it, so the
+            // boundary no longer says anything about the cache. Gated on `ctx` rather than
+            // on the message alone: a frame carrying no input side cached nothing.
+            if (ctx != null) compactedAt = undefined;
+          }
           // SDK assistant messages can carry an error field for auth/billing/rate-limit failures
           let assistantError = (msg as any).error as string | undefined;
           // Human-readable reset time + parsed timestamp for a hard usage/session limit
@@ -2015,6 +2062,9 @@ export class ClaudeAgentSdkProvider implements AIProvider {
               accountId: account.id,
               accountLabel: account.label ?? account.email ?? undefined,
             }),
+            ...(lastContextTokens != null && { contextTokens: lastContextTokens }),
+            ...(lastCacheTtlMs != null && { cacheTtlMs: lastCacheTtlMs }),
+            ...(compactedAt != null && { compactedAt }),
           });
           coldReasonForNextResult = undefined;
           if (turnUsage) {
@@ -2033,6 +2083,9 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                 coldReason: turnUsage.coldReason,
                 accountId: turnUsage.accountId,
                 accountLabel: turnUsage.accountLabel,
+                contextTokens: turnUsage.contextTokens,
+                cacheTtlMs: turnUsage.cacheTtlMs,
+                compactedAt: turnUsage.compactedAt,
               });
             } catch (err) {
               // Accounting must never break a turn that already succeeded.
@@ -2063,6 +2116,10 @@ export class ClaudeAgentSdkProvider implements AIProvider {
           resultCostUsd = undefined;
           lastAssistantUuid = undefined;
           sdkEventCount = 0;
+          // `lastContextTokens` deliberately survives the reset: a context does not shrink
+          // between turns of one subprocess, so the last measurement stays true until a new
+          // call replaces it. Clearing it would report "cannot measure" for a turn that
+          // errored before its first assistant message, losing a figure that is still valid.
           // Reset auth retry budget on successful turn — each new turn gets a fresh
           // budget so OAuth tokens rotated mid-conversation can still trigger refresh
           if (!subtype || subtype === "success") authRetryCount = 0;
@@ -2311,6 +2368,12 @@ export class ClaudeAgentSdkProvider implements AIProvider {
       const sessionDir = resolveSessionDir(sessionId, getSessionProjectPath(sessionId));
       if (sessionDir) mergeSubagentChildren(sessionDir, merged);
 
+      // The SDK walk stops at the `compact_boundary` record and never yields it, so what
+      // each compaction cost has to come from the file the walk read.
+      if (sessionDir) {
+        applyCompactions(merged, await readCompactions(`${sessionDir}.jsonl`).catch(() => new Map()));
+      }
+
       // A backgrounded Agent's tool result is only a launch ack; its real outcome arrives
       // later as a <task-notification>. Stamp that onto the tool_use so the card can tell
       // "spawned" from "finished" instead of showing a check the moment the ack lands.

package/src/providers/codex-app-server/codex-jsonrpc-client.ts

@@ -1,4 +1,5 @@
 import { spawn, type ChildProcess } from "node:child_process";
+import { resolveBunPath } from "../../services/autostart-generator.ts";
 import { redactTruncate } from "./codex-redact.ts";
 import type { JsonRpcResponse, ServerRequest, JsonRpcNotification } from "./codex-protocol.ts";
 
@@ -38,6 +39,19 @@ function buildSpawnEnv(): NodeJS.ProcessEnv {
   return out;
 }
 
+/**
+ * The argv that runs the scoped `@openai/codex` package through bun's resolver.
+ *
+ * Not `process.execPath`: that is bun only when PPM runs from source. A compiled PPM is
+ * its own executable, so `<ppm> x @openai/codex app-server` reached PPM's CLI, which
+ * rejects `x` — every spawn ended as "codex subprocess exited". The availability probe
+ * hid it, because `<ppm> x @openai/codex --version` is answered by PPM's own `--version`
+ * with exit 0, so the provider registered as installed on exactly those hosts.
+ */
+export function codexCommand(...args: string[]): string[] {
+  return [resolveBunPath(), "x", "@openai/codex", ...args];
+}
+
 function validId(id: unknown): id is number | string {
   return typeof id === "number" || typeof id === "string";
 }
@@ -63,7 +77,8 @@ export class CodexJsonRpcClient {
   start(opts?: { cwd?: string; codexHome?: string; env?: Record<string, string> }): void {
     const env = { ...buildSpawnEnv(), ...(opts?.env ?? {}) };
     if (opts?.codexHome) env.CODEX_HOME = opts.codexHome;
-    this.proc = spawn(process.execPath, ["x", "@openai/codex", "app-server"], {
+    const [cmd, ...args] = codexCommand("app-server");
+    this.proc = spawn(cmd!, args, {
       cwd: opts?.cwd,
       stdio: ["pipe", "pipe", "pipe"],
       env,