@hienlh/ppm 0.8.90 → 0.8.91

package/src/server/routes/chat.ts

@@ -8,7 +8,7 @@ import { renameSession as sdkRenameSession } from "@anthropic-ai/claude-agent-sd
 import { listSlashItems } from "../../services/slash-items.service.ts";
 import { getCachedUsage, refreshUsageNow } from "../../services/claude-usage.service.ts";
 import { getSessionLog } from "../../services/session-log.service.ts";
-import { getSessionMapping, setSessionTitle, getPinnedSessionIds, pinSession, unpinSession } from "../../services/db.service.ts";
+import { getSessionMapping, setSessionMapping, setSessionTitle, getPinnedSessionIds, pinSession, unpinSession, deleteSessionMapping, deleteSessionTitle } from "../../services/db.service.ts";
 import { ok, err } from "../../types/api.ts";
 
 type Env = { Variables: { projectPath: string; projectName: string } };
@@ -125,7 +125,13 @@ chatRoutes.delete("/sessions/:id", async (c) => {
   try {
     const id = c.req.param("id");
     const providerId = c.req.query("providerId") ?? "claude";
+    const sdkId = getSessionMapping(id) ?? id;
+    // Provider-specific cleanup (JSONL, process, etc.)
     await chatService.deleteSession(providerId, id);
+    // Shared DB cleanup
+    deleteSessionMapping(id);
+    deleteSessionTitle(sdkId);
+    unpinSession(sdkId);
     return c.json(ok({ deleted: id }));
   } catch (e) {
     return c.json(err((e as Error).message), 404);
@@ -184,16 +190,31 @@ chatRoutes.post("/sessions/:id/fork", async (c) => {
     const projectName = c.get("projectName");
     const projectPath = c.get("projectPath");
     const providerId = c.req.query("providerId") ?? "claude";
-    // Create a new PPM session that will fork from sourceId on first message
-    const session = await chatService.createSession(providerId, {
-      projectName,
-      projectPath,
-      title: "Forked Chat",
-    });
-    // Store fork source so WS handler knows to use forkSession on first message
+    const body = await c.req.json<{ messageId?: string }>().catch(() => ({} as { messageId?: string }));
     const provider = providerRegistry.get(providerId);
-    provider?.setForkSource?.(session.id, sourceId);
-    return c.json(ok({ ...session, forkedFrom: sourceId }), 201);
+    if (!provider) return c.json(err("Provider not found"), 404);
+
+    if (body.messageId && provider.forkAtMessage) {
+      // Mid-fork: SDK fork first, then create PPM session only on success
+      const result = await provider.forkAtMessage(sourceId, body.messageId, {
+        title: "Forked Chat", dir: projectPath,
+      });
+      const session = await chatService.createSession(providerId, {
+        projectName, projectPath, title: "Forked Chat",
+      });
+      setSessionMapping(session.id, result.sessionId);
+      provider.markAsResumed?.(session.id);
+      return c.json(ok({ ...session, forkedFrom: sourceId }), 201);
+    } else if (provider.setForkSource) {
+      // Deferred fork from end (full history copy on first msg)
+      const session = await chatService.createSession(providerId, {
+        projectName, projectPath, title: "Forked Chat",
+      });
+      provider.setForkSource(session.id, sourceId);
+      return c.json(ok({ ...session, forkedFrom: sourceId }), 201);
+    } else {
+      return c.json(err("Provider does not support forking"), 400);
+    }
   } catch (e) {
     return c.json(err((e as Error).message), 500);
   }

package/src/server/routes/settings.ts

@@ -252,6 +252,33 @@ settingsRoutes.post("/telegram/test", async (c) => {
   }
 });
 
+// ── Auth / Password ──────────────────────────────────────────────────
+
+/** PUT /settings/auth/password — change the access password (token) */
+settingsRoutes.put("/auth/password", async (c) => {
+  try {
+    const { password, confirm } = await c.req.json<{ password: string; confirm: string }>();
+    if (typeof password !== "string" || !password.trim()) {
+      return c.json(err("Password is required"), 400);
+    }
+    if (password !== confirm) {
+      return c.json(err("Passwords do not match"), 400);
+    }
+    const trimmed = password.trim();
+    if (trimmed.length < 4) {
+      return c.json(err("Password must be at least 4 characters"), 400);
+    }
+
+    const auth = configService.get("auth");
+    configService.set("auth", { ...auth, token: trimmed });
+    configService.save();
+
+    return c.json(ok({ token: trimmed }));
+  } catch (e) {
+    return c.json(err((e as Error).message), 400);
+  }
+});
+
 // ── Proxy ────────────────────────────────────────────────────────────
 
 /** GET /settings/proxy — proxy status */

package/src/server/ws/chat.ts

@@ -218,8 +218,14 @@ async function startSessionConsumer(sessionId: string, providerId: string, conte
         continue;
       }
 
-      // System events → transition connecting → thinking
+      // System events → transition connecting → thinking, forward compact events
       if (evType === "system") {
+        const sub = (ev as any).subtype;
+        if (sub === "compacting") {
+          broadcast(sessionId, { type: "compact_status", status: "compacting" });
+        } else if (sub === "compact_done") {
+          broadcast(sessionId, { type: "compact_status", status: "done" });
+        }
         if (!firstEventReceived) {
           if (heartbeat) clearInterval(heartbeat);
           setPhase(sessionId, "thinking");

package/src/services/cloud-ws.service.ts

@@ -21,6 +21,7 @@ interface HeartbeatMsg extends WsMessage {
   availableVersion: string | null;
   serverPid: number | null;
   uptime: number;
+  deviceName?: string;
 }
 
 interface StateChangeMsg extends WsMessage {

package/src/services/cloud.service.ts

@@ -354,6 +354,7 @@ export async function sendHeartbeat(tunnelUrl: string): Promise<boolean> {
         secret_key: device.secret_key,
         tunnel_url: tunnelUrl,
         status: "online",
+        name: device.name,
       }),
     });
     return res.ok;

package/src/services/db.service.ts

@@ -424,6 +424,14 @@ export function getPinnedSessionIds(): Set<string> {
   return new Set(rows.map((r) => r.session_id));
 }
 
+export function deleteSessionMapping(ppmId: string): void {
+  getDb().query("DELETE FROM session_map WHERE ppm_id = ?").run(ppmId);
+}
+
+export function deleteSessionTitle(sessionId: string): void {
+  getDb().query("DELETE FROM session_titles WHERE session_id = ?").run(sessionId);
+}
+
 // ---------------------------------------------------------------------------
 // Push subscription helpers
 // ---------------------------------------------------------------------------

package/src/services/supervisor.ts

@@ -506,6 +506,8 @@ async function connectCloud(opts: { port: number }, serverArgs: string[], logFd:
       secretKey: device.secret_key,
       heartbeatFn: () => {
         const status = readStatus();
+        // Re-read device file each heartbeat to pick up name changes
+        const currentDevice = getCloudDevice();
         return {
           type: "heartbeat" as const,
           tunnelUrl,
@@ -515,6 +517,7 @@ async function connectCloud(opts: { port: number }, serverArgs: string[], logFd:
           availableVersion: (status.availableVersion as string) || null,
           serverPid: serverChild?.pid ?? null,
           uptime: Math.floor((Date.now() - startTime) / 1000),
+          deviceName: currentDevice?.name ?? device.name,
           timestamp: new Date().toISOString(),
         };
       },

package/src/types/api.ts

@@ -44,4 +44,5 @@ export type ChatWsServerMessage =
   | { type: "session_state"; sessionId: string; phase: SessionPhase; pendingApproval: { requestId: string; tool: string; input: unknown } | null; sessionTitle: string | null }
   | { type: "turn_events"; events: unknown[] }
   | { type: "title_updated"; title: string }
+  | { type: "compact_status"; status: "compacting" | "done" }
   | { type: "ping" };

package/src/types/chat.ts

@@ -29,6 +29,8 @@ export interface AIProvider {
   listSessionsByDir?(dir: string): Promise<SessionInfo[]>;
   ensureProjectPath?(sessionId: string, path: string): void;
   setForkSource?(sessionId: string, sourceSessionId: string): void;
+  forkAtMessage?(sessionId: string, messageId: string, opts?: { title?: string; dir?: string }): Promise<{ sessionId: string }>;
+  markAsResumed?(sessionId: string): void;
   isAvailable?(): Promise<boolean>;
   listModels?(): Promise<ModelOption[]>;
 }

package/src/web/components/chat/chat-history-bar.tsx

@@ -16,6 +16,7 @@ interface ChatHistoryBarProps {
   projectName: string;
   usageInfo: UsageInfo;
   contextWindowPct?: number | null;
+  compactStatus?: "compacting" | null;
   usageLoading?: boolean;
   refreshUsage?: () => void;
   lastFetchedAt?: string | null;
@@ -79,7 +80,7 @@ function DebugCopyButton({ sessionId, projectName }: { sessionId: string; projec
 }
 
 export function ChatHistoryBar({
-  projectName, usageInfo, contextWindowPct, usageLoading, refreshUsage, lastFetchedAt,
+  projectName, usageInfo, contextWindowPct, compactStatus, usageLoading, refreshUsage, lastFetchedAt,
   sessionId, providerId, onSelectSession, onBugReport, isConnected, onReconnect,
 }: ChatHistoryBarProps) {
   const [activePanel, setActivePanel] = useState<PanelType>(null);
@@ -240,14 +241,27 @@ export function ChatHistoryBar({
                 <span className={pctColor(contextWindowPct)}>Ctx:{contextWindowPct}%</span>
               </>
             )}
+            {compactStatus === "compacting" && (
+              <>
+                <span className="text-text-subtle">·</span>
+                <span className="text-blue-400 animate-pulse">compacting...</span>
+              </>
+            )}
           </button>
         ) : (
-          contextWindowPct != null && (
-            <span className={`flex items-center gap-1 px-1.5 py-0.5 text-[11px] font-medium tabular-nums ${pctColor(contextWindowPct)}`}>
-              <Activity className="size-3" />
-              <span>Ctx:{contextWindowPct}%</span>
-            </span>
-          )
+          <>
+            {contextWindowPct != null && (
+              <span className={`flex items-center gap-1 px-1.5 py-0.5 text-[11px] font-medium tabular-nums ${pctColor(contextWindowPct)}`}>
+                <Activity className="size-3" />
+                <span>Ctx:{contextWindowPct}%</span>
+              </span>
+            )}
+            {compactStatus === "compacting" && (
+              <span className="text-[11px] px-1.5 py-0.5 text-blue-400 animate-pulse">
+                compacting...
+              </span>
+            )}
+          </>
         )}
 
         {/* Spacer */}

package/src/web/components/chat/chat-tab.tsx

@@ -89,6 +89,7 @@ export function ChatTab({ metadata, tabId }: ChatTabProps) {
     connectingElapsed,
     pendingApproval,
     contextWindowPct,
+    compactStatus,
     sessionTitle,
     migratedSessionId,
     sendMessage,
@@ -162,12 +163,13 @@ export function ChatTab({ metadata, tabId }: ChatTabProps) {
   }, [tabId, updateTab]);
 
   /** Fork current session and open new tab with the forked session, resending userMessage */
-  const handleFork = useCallback(async (userMessage: string) => {
+  const handleFork = useCallback(async (userMessage: string, messageId?: string) => {
     if (!sessionId || !projectName) return;
     try {
       const { api, projectUrl } = await import("@/lib/api-client");
       const forked = await api.post<{ id: string; forkedFrom: string }>(
         `${projectUrl(projectName)}/chat/sessions/${sessionId}/fork?providerId=${providerId}`,
+        { messageId },
       );
       // Open new chat tab with forked session — it will send userMessage on connect
       useTabStore.getState().openTab({
@@ -350,6 +352,7 @@ export function ChatTab({ metadata, tabId }: ChatTabProps) {
           projectName={projectName}
           usageInfo={usageInfo}
           contextWindowPct={contextWindowPct}
+          compactStatus={compactStatus}
           usageLoading={usageLoading}
           refreshUsage={refreshUsage}
           lastFetchedAt={lastFetchedAt}

package/src/web/components/chat/message-list.tsx

@@ -43,7 +43,7 @@ interface MessageListProps {
   connectingElapsed?: number;
   projectName?: string;
   /** Called when user clicks Fork/Rewind — opens new forked chat tab */
-  onFork?: (userMessage: string) => void;
+  onFork?: (userMessage: string, messageId?: string) => void;
 }
 
 export function MessageList({
@@ -96,7 +96,7 @@ export function MessageList({
                 message={msg}
                 isStreaming={isStreaming && msg.id.startsWith("streaming-")}
                 projectName={projectName}
-                onFork={msg.role === "user" && onFork ? () => onFork(msg.content) : undefined}
+                onFork={msg.role === "user" && onFork ? () => onFork(msg.content, msg.id) : undefined}
               />
             ))}
 

package/src/web/components/chat/session-picker.tsx

@@ -47,6 +47,7 @@ export function SessionPicker({
 
   const handleDelete = async (e: React.MouseEvent, session: SessionInfo) => {
     e.stopPropagation();
+    if (!window.confirm("Delete this session? This cannot be undone.")) return;
     try {
       if (!projectName) return;
       await api.del(

package/src/web/components/settings/change-password-section.tsx

@@ -0,0 +1,128 @@
+import { useState, useCallback } from "react";
+import { KeyRound, Check, Eye, EyeOff } from "lucide-react";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { api } from "@/lib/api-client";
+import { setAuthToken } from "@/lib/api-client";
+
+export function ChangePasswordSection() {
+  const [open, setOpen] = useState(false);
+  const [password, setPassword] = useState("");
+  const [confirm, setConfirm] = useState("");
+  const [showPw, setShowPw] = useState(false);
+  const [saving, setSaving] = useState(false);
+  const [saved, setSaved] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  const mismatch = confirm.length > 0 && password !== confirm;
+  const canSubmit = password.trim().length >= 4 && password === confirm && !saving;
+
+  const handleSubmit = useCallback(async () => {
+    if (!canSubmit) return;
+    setSaving(true);
+    setError(null);
+    try {
+      const { token } = await api.put<{ token: string }>("/api/settings/auth/password", {
+        password: password.trim(),
+        confirm: confirm.trim(),
+      });
+      // Update localStorage so current session stays authenticated
+      setAuthToken(token);
+      setSaved(true);
+      setPassword("");
+      setConfirm("");
+      setTimeout(() => {
+        setSaved(false);
+        setOpen(false);
+      }, 1500);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Failed to change password");
+    } finally {
+      setSaving(false);
+    }
+  }, [canSubmit, password, confirm]);
+
+  if (!open) {
+    return (
+      <section className="space-y-2">
+        <h3 className="text-xs font-medium text-muted-foreground">Security</h3>
+        <Button
+          variant="outline"
+          size="sm"
+          className="h-8 text-xs gap-1.5 cursor-pointer"
+          onClick={() => setOpen(true)}
+        >
+          <KeyRound className="size-3.5" />
+          Change Password
+        </Button>
+      </section>
+    );
+  }
+
+  return (
+    <section className="space-y-2">
+      <h3 className="text-xs font-medium text-muted-foreground">Change Password</h3>
+      <div className="space-y-2">
+        <div className="relative">
+          <Input
+            type={showPw ? "text" : "password"}
+            placeholder="New password"
+            value={password}
+            onChange={(e) => setPassword(e.target.value)}
+            className="h-8 text-xs pr-8"
+            autoFocus
+          />
+          <button
+            type="button"
+            className="absolute right-2 top-1/2 -translate-y-1/2 text-muted-foreground cursor-pointer"
+            onClick={() => setShowPw(!showPw)}
+            tabIndex={-1}
+          >
+            {showPw ? <EyeOff className="size-3.5" /> : <Eye className="size-3.5" />}
+          </button>
+        </div>
+        <Input
+          type={showPw ? "text" : "password"}
+          placeholder="Confirm password"
+          value={confirm}
+          onChange={(e) => setConfirm(e.target.value)}
+          onKeyDown={(e) => { if (e.key === "Enter") handleSubmit(); }}
+          className="h-8 text-xs"
+        />
+        {mismatch && (
+          <p className="text-[11px] text-destructive">Passwords do not match</p>
+        )}
+        {error && (
+          <p className="text-[11px] text-destructive">{error}</p>
+        )}
+        <div className="flex gap-1.5">
+          <Button
+            variant="outline"
+            size="sm"
+            className="h-8 text-xs flex-1 cursor-pointer"
+            onClick={() => {
+              setOpen(false);
+              setPassword("");
+              setConfirm("");
+              setError(null);
+            }}
+          >
+            Cancel
+          </Button>
+          <Button
+            variant={saved ? "default" : "outline"}
+            size="sm"
+            className="h-8 text-xs flex-1 cursor-pointer"
+            disabled={!canSubmit}
+            onClick={handleSubmit}
+          >
+            {saving ? "..." : saved ? <Check className="size-3.5" /> : "Save"}
+          </Button>
+        </div>
+        <p className="text-[11px] text-muted-foreground">
+          Min 4 characters. You'll stay logged in on this device.
+        </p>
+      </div>
+    </section>
+  );
+}

package/src/web/components/settings/settings-tab.tsx

@@ -14,6 +14,7 @@ import { KeyboardShortcutsSection } from "./keyboard-shortcuts-section";
 import { TelegramSettingsSection } from "./telegram-settings-section";
 import { ProxySettingsSection } from "./proxy-settings-section";
 import { McpSettingsSection } from "./mcp-settings-section";
+import { ChangePasswordSection } from "./change-password-section";
 import { usePushNotification } from "@/hooks/use-push-notification";
 
 const THEME_OPTIONS: { value: Theme; label: string; icon: React.ElementType }[] = [
@@ -128,6 +129,9 @@ export function SettingsTab() {
             </p>
           </section>
 
+          {/* Security: Change Password */}
+          <ChangePasswordSection />
+
           {/* Quick: Theme */}
           <section className="space-y-2">
             <h3 className="text-xs font-medium text-muted-foreground">Theme</h3>

package/src/web/hooks/use-chat.ts

@@ -22,6 +22,7 @@ interface UseChatReturn {
   connectingElapsed: number;
   pendingApproval: ApprovalRequest | null;
   contextWindowPct: number | null;
+  compactStatus: "compacting" | null;
   sessionTitle: string | null;
   /** When CLI provider assigns a different session ID, this holds the new ID */
   migratedSessionId: string | null;
@@ -51,6 +52,7 @@ export function useChat(sessionId: string | null, providerId = "claude", project
   const [connectingElapsed, setConnectingElapsed] = useState(0);
   const [pendingApproval, setPendingApproval] = useState<ApprovalRequest | null>(null);
   const [contextWindowPct, setContextWindowPct] = useState<number | null>(null);
+  const [compactStatus, setCompactStatus] = useState<"compacting" | null>(null);
   const [sessionTitle, setSessionTitle] = useState<string | null>(null);
   const [isConnected, setIsConnected] = useState(false);
   const [migratedSessionId, setMigratedSessionId] = useState<string | null>(null);
@@ -270,6 +272,19 @@ export function useChat(sessionId: string | null, providerId = "claude", project
       return;
     }
 
+    // Handle compact status events
+    if ((data as any).type === "compact_status") {
+      const status = (data as any).status;
+      if (status === "compacting") {
+        setCompactStatus("compacting");
+      } else if (status === "done") {
+        setCompactStatus(null);
+        // Refresh messages to show compacted history
+        refetchRef.current?.();
+      }
+      return;
+    }
+
     // Handle phase transitions from BE
     if ((data as any).type === "phase_changed") {
       const p = (data as any).phase as SessionPhase;
@@ -362,6 +377,7 @@ export function useChat(sessionId: string | null, providerId = "claude", project
     setPhase("idle");
     phaseRef.current = "idle";
     setPendingApproval(null);
+    setCompactStatus(null);
     streamingContentRef.current = "";
     streamingEventsRef.current = [];
     setIsConnected(false);
@@ -550,6 +566,7 @@ export function useChat(sessionId: string | null, providerId = "claude", project
     connectingElapsed,
     pendingApproval,
     contextWindowPct,
+    compactStatus,
     sessionTitle,
     migratedSessionId,
     sendMessage,