@hienlh/ppm 0.9.75 → 0.9.77

package/output/pdf/ppm-app-summary.pdf

@@ -0,0 +1,80 @@
+%PDF-1.4
+%���� ReportLab Generated PDF document (opensource)
+1 0 obj
+<<
+/F1 2 0 R /F2 3 0 R /F3 4 0 R
+>>
+endobj
+2 0 obj
+<<
+/BaseFont /Helvetica /Encoding /WinAnsiEncoding /Name /F1 /Subtype /Type1 /Type /Font
+>>
+endobj
+3 0 obj
+<<
+/BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding /Name /F2 /Subtype /Type1 /Type /Font
+>>
+endobj
+4 0 obj
+<<
+/BaseFont /ZapfDingbats /Name /F3 /Subtype /Type1 /Type /Font
+>>
+endobj
+5 0 obj
+<<
+/Contents 9 0 R /MediaBox [ 0 0 612 792 ] /Parent 8 0 R /Resources <<
+/Font 1 0 R /ProcSet [ /PDF /Text /ImageB /ImageC /ImageI ]
+>> /Rotate 0 /Trans <<
+
+>> 
+  /Type /Page
+>>
+endobj
+6 0 obj
+<<
+/PageMode /UseNone /Pages 8 0 R /Type /Catalog
+>>
+endobj
+7 0 obj
+<<
+/Author (Codex) /CreationDate (D:20260410093008+07'00') /Creator (\(unspecified\)) /Keywords () /ModDate (D:20260410093008+07'00') /Producer (ReportLab PDF Library - \(opensource\)) 
+  /Subject (\(unspecified\)) /Title (PPM App Summary) /Trapped /False
+>>
+endobj
+8 0 obj
+<<
+/Count 1 /Kids [ 5 0 R ] /Type /Pages
+>>
+endobj
+9 0 obj
+<<
+/Filter [ /ASCII85Decode /FlateDecode ] /Length 2835
+>>
+stream
+Gau`V>Bedl&q9SYW2EcR$UQe6j?1DdPO\'OiYZ9JAklYNWA1\)[F-Wmr3F(cX'-=T_N5>SEJWY*]";/'=-p*o=CC.3df5%N^r7"Bmjt\ZR*NNg%2YnV_q"DGl^:b6F?RM\K4g7)d28e>'uM$e^?pM\#,W,o_6Cq^B9#:7S`+TiCVbR9MQ>K>"gkjXe(VL)Rh)]1H4SJ3aj)8]F_mJ^g6V.%Y%*%AkW`IbQK=)r*F!\ub5uP'ZF$Tl)'@r+NW[IG:h?(Nq$;1,j,t->K"2RE8=g4Ib;eKaa:E+2*kV'Fg0!:d,<#TIn4b:7l*kRmH=IgfELjAnK09PM)[=h3a^P0!Y"13/Wk)ApFPQ8'VRBacVImp!2eI:/n\IZNr#_]RDQ2;k[eG'`$Fn*jl<,6WE5iCU>$K`ngG(6_eM8X&U.tO)LmBtNgDZ%Rg5Ur2JjF='g6HgdpsQd:igto/quZZ.O=LJV=GG&A0<ZL!^d.F#5$/)E]_*E_ZT-orGq;tCm'O7]1Ut03)Wp]jBsdrbauCh8A8kCX#2NQ5dTN)["nfr["gs5GE"Q`,I2io?i)*bCG6O=IS?W3!8:0[?qm_/CLdYU0=M\TC[Ed6*`dG`O%V&WEDlt6/=Q9hY@OB&dEB0]N&ZgY5:cSooYn-8b=2Fjr@s?G,n?\Vm"Q`tth?g`*)g:-VNTWOLk&,t,E.l4iORH9V@u`O*N1GS6M1CC8Gp;H.=Q-\<"sGR^,0gi3M$R84U0P%&1s.>7'aXJ_.2A&-BPa^LcPIeca<@$!]]d90/pe13%u&(6\>:/VM%J92'\_YO&Ym7BPU-X!cVih%ElFFT(CdY:.[PPY0iu97m1kl,XkH:Bm<]S*:HnJA`Xh4_r;h9ppq@<J7qS#?lJ*$%h"Z#4fuuV(X9"coC`5W`SaAGNMO)OkNVT-b^Yb7%Y4J/2I3@tq1dU#R'OWIFRKuFSma*QHA&%hMTL/:W22Q6hY3U<YmirW8InJ@g.#\%W,#p:M@qGKn.)*TH$N+,"#`0ud:J+<r(mgqp;\c,q+YhTfo/TeGXl"^hPFP(8/CRa]iS2I]#W/H!qnTOi3jlX(I')qf!-l[i1+;.HYDWQr*!Kf.G^ee]M$P2JJJeM^#(31#`dO,`YUm1QhG!sh8gfr[QC5G-H"?ZGODBfI#.[<VmZS879rVqqQUI7;b)ZR]q7*V$/g]17#s,_Zfm<%>F)k\i'J*Kc!j>m,,tonhjC9p$p1*C=(%+LEFapp6m_b:]$)PLaJpINq8!oMQ+fl#OPc>(#e^q%`a?.N7"oNZ%7t&7[E7%"p2"!5aZlW,a+_MZgp-WPR?`q,M`_Q]u"j+dcWjbI[28Tmd6Ghg4mr?1!2^hAg,fb+bBpS9-\$`M0h2p4Y:MWE$oP;QG!V((j/8=lC5QgVSd&\djW)R]VG1';L@MCIUH<q?W2kSu8Q^6f$U/%27U(HQS/N@)foGln\9Cg0:`3@NT&^TL!D0W&$km_4]&p[$&@3S>1oJl]\gm:t,0pRBTF],u2($VsK,Y&?sFM-P1]OOkZp2fjift`f+cF+2NLkb>g'H,&kkT".k-4or2r.Q;g>OXDCKO4,mDAMOe)%Nou)n+L=/lZ`Y:Pie$6Z=PT,.sqH(m-UR-WNXa!D*Hjho_4](@-ut*KEiBpT_4BeDf$(_m(nj9;43_EYQR%O".rC,H]Y7Bh4_dkhu"OIM8-r<+3Yuack-TLG:R[bpZPX1),j;+[*;9PA(E76ljN&Jss,b$i;UlV(UGf(O_rC^6(M/V"CA)YuX<7Rh"afY\tt:W,'s-!q!cdW^JjHVb]Td]7JENUQGK)ne4s_ik.9bd,?Zp($S&@#Lud%XCEj%W'T#Z<?395V7NAs\iU"Jg48PYE"d)qC@;mp&e]^uRpb!Z+;rd6$V`gk<"EU&HqmuC7R&*$+(;1sJ<JNnN4-5?<s$)]M0RB=guB<;dlE9NSarik"ZH(]'^)U0DE;:/\"^\<Y[#$!KU!.)alS#]%Q["_i3JoQFtcZTdU'uB9?Ra*is_\=H?d^G.fNGm8KS^]1nb'0C4+98SE[\k+\m1.(a?H\p^VPW"NBLcGs'$F'c^:o:W@.]J^^iLM:HF@UZWV30F0=[k,i-N8NJrN]GY/Dc5Ld_M0l;$9rcLF)e&R_Xcg7WF2S$47\6MFr%XpKG<0@7LbCKlmkVR:QS3R-J).QOeaXV"&CPE()!_jOVZh^A+$.rUrT<Z[;j/;H%]=Y?='tO#e""jK31L>c>rVc/D.`ELIFOGiI,1pqf:H`,f3,lLP(,&nKoU93ob4>l&jmS\QiWO97hNkLn.Aq9rA[rPr79^%H.NZ.&-[rM;J-C)!se(6?Dt3a14Kkkn&b_Skm9_s=-,1`MLjF\_<bWaObW)<70e=,b7"<nKK?<8c!Ch52"45sg6"%gLd)0ZFkhf].Gp>^D`KoNY[msX8EbXK+>\`bC8Z!qO:29R]Fn'^cjkVLjB:`HYR5O]Oe72>hDU8;@YJ+H%g2KF8#+i4:NL.=&[NV!-.([H.d<[RX*\T]Wg,Z^QRX%HQKNX@[=0I&eMN8hrK:'1U,CZg4Tss#X_t%`A^kmr5?A?fe$lAF:Z*amc/FTp+I4&cm`5i2)iTn@1'>:,cs&_doEaM<!^,%7hn6`#@lc?mkV]eBi<-)Zj'IT/[=/V<4@C7;nNB%T)!$gTZ0NV;)PnKT_:&EJ(.:2M3b$MFmV%j:1Ue=&\uVgmcln55d=rURe+V#!np5/@e5EE-NV^>n]ANDprnO+`?9g[]L@:)*1WA8DAHiBWhk-UOY;X,COFeE2mFN*dR-8<tqmj91RCP2X):;^l8QiIYLnFd<hi490TC`N:rX\QP\5!~>endstream
+endobj
+xref
+0 10
+0000000000 65535 f 
+0000000061 00000 n 
+0000000112 00000 n 
+0000000219 00000 n 
+0000000331 00000 n 
+0000000414 00000 n 
+0000000607 00000 n 
+0000000675 00000 n 
+0000000949 00000 n 
+0000001008 00000 n 
+trailer
+<<
+/ID 
+[<ed781e36a58178ba295c4b649581811a><ed781e36a58178ba295c4b649581811a>]
+% ReportLab generated PDF document -- digest (opensource)
+
+/Info 7 0 R
+/Root 6 0 R
+/Size 10
+>>
+startxref
+3934
+%%EOF

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hienlh/ppm",
-  "version": "0.9.75",
+  "version": "0.9.77",
   "description": "Personal Project Manager — mobile-first web IDE with AI assistance",
   "author": "hienlh",
   "license": "MIT",

package/src/cli/commands/restart.ts

@@ -1,6 +1,6 @@
 import { resolve } from "node:path";
 import { homedir } from "node:os";
-import { readFileSync, writeFileSync, existsSync, openSync, unlinkSync } from "node:fs";
+import { readFileSync, writeFileSync, existsSync, openSync, unlinkSync, renameSync } from "node:fs";
 
 const PPM_DIR = resolve(homedir(), ".ppm");
 const STATUS_FILE = resolve(PPM_DIR, "status.json");
@@ -237,12 +237,14 @@ async function main() {
     childPid = child.pid;
   }
 
-  // Update status.json with new PID, keep tunnel info
+  // Update status.json with new PID, keep tunnel info (atomic write to avoid cross-process races)
   try {
     const status = JSON.parse(readFileSync(P.statusFile, "utf-8"));
     status.pid = childPid;
     status.serverScript = P.serverScript;
-    writeFileSync(P.statusFile, JSON.stringify(status));
+    const tmp = P.statusFile + ".tmp." + process.pid;
+    writeFileSync(tmp, JSON.stringify(status));
+    renameSync(tmp, P.statusFile);
     writeFileSync(P.pidFile, String(childPid));
   } catch {}
 

package/src/providers/claude-agent-sdk.ts

@@ -688,18 +688,9 @@ export class ClaudeAgentSdkProvider implements AIProvider {
           const expiresIn = account.expiresAt ? account.expiresAt - nowS : null;
           console.log(`[sdk] Using account ${account.id} (${account.email ?? "no-email"}) token_expires_in=${expiresIn}s`);
 
-          // Check if token needs refresh
-          const isOAuth = account.accessToken.startsWith("sk-ant-oat");
-          const needsRefresh = isOAuth && account.expiresAt && (account.expiresAt - nowS <= 3600);
-
-          if (!needsRefresh) {
-            // Token fresh or API key — proceed
-            yield { type: "account_info" as const, accountId: account.id, accountLabel };
-            break;
-          }
-
-          // Token expiring — attempt refresh
-          yield { type: "status_update" as const, phase: "refreshing" as const, message: `Refreshing token for ${accountLabel}...`, accountLabel };
+          // ensureFreshToken re-reads DB (picks up concurrent refreshes) and
+          // only refreshes if truly needed — safe to call unconditionally.
+          yield { type: "status_update" as const, phase: "refreshing" as const, message: `Checking token for ${accountLabel}...`, accountLabel };
           const fresh = await accountService.ensureFreshToken(account.id);
 
           if (fresh) {
@@ -929,10 +920,9 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                 const retryEnv = this.buildQueryEnv(meta.projectPath, refreshedAccount);
                 closeCurrentStream();
                 const { generator: earlyAuthGen, controller: earlyAuthCtrl } = createMessageChannel();
-                const currentSdkId = getSessionMapping(sessionId);
-                const canResume = !!currentSdkId;
-                if (!canResume) earlyAuthCtrl.push(firstMsg);
-                const retryOpts = { ...queryOptions, sessionId: undefined, resume: canResume ? currentSdkId : undefined, env: retryEnv };
+                const hasHistory = (this.messageCount.get(sessionId) ?? 0) > 0;
+                if (!hasHistory) earlyAuthCtrl.push(firstMsg);
+                const retryOpts = { ...queryOptions, sessionId: undefined, resume: hasHistory ? getSdkSessionId(sessionId) : undefined, env: retryEnv };
                 const rq = query({
                   prompt: earlyAuthGen,
                   options: { ...retryOpts, ...(permissionHooks && { hooks: permissionHooks }), canUseTool } as any,
@@ -956,10 +946,9 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                 const switchEnv = this.buildQueryEnv(meta.projectPath, nextAcc);
                 closeCurrentStream();
                 const { generator: switchGen, controller: switchCtrl } = createMessageChannel();
-                const currentSdkId = getSessionMapping(sessionId);
-                const canResume = !!currentSdkId;
-                if (!canResume) switchCtrl.push(firstMsg);
-                const retryOpts = { ...queryOptions, sessionId: undefined, resume: canResume ? currentSdkId : undefined, env: switchEnv };
+                const hasHistory = (this.messageCount.get(sessionId) ?? 0) > 0;
+                if (!hasHistory) switchCtrl.push(firstMsg);
+                const retryOpts = { ...queryOptions, sessionId: undefined, resume: hasHistory ? getSdkSessionId(sessionId) : undefined, env: switchEnv };
                 const rq = query({
                   prompt: switchGen,
                   options: { ...retryOpts, ...(permissionHooks && { hooks: permissionHooks }), canUseTool } as any,
@@ -1108,10 +1097,9 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                   // resume a non-existent session, causing the SDK to hang forever.
                   closeCurrentStream();
                   const { generator: authRetryGen, controller: authRetryCtrl } = createMessageChannel();
-                  const currentSdkId = getSessionMapping(sessionId);
-                  const canResume = !!currentSdkId;
-                  if (!canResume) authRetryCtrl.push(firstMsg);
-                  const retryOpts = { ...queryOptions, sessionId: undefined, resume: canResume ? currentSdkId : undefined, env: retryEnv };
+                  const hasHistory = (this.messageCount.get(sessionId) ?? 0) > 0;
+                  if (!hasHistory) authRetryCtrl.push(firstMsg);
+                  const retryOpts = { ...queryOptions, sessionId: undefined, resume: hasHistory ? getSdkSessionId(sessionId) : undefined, env: retryEnv };
                   const rq = query({
                     prompt: authRetryGen,
                     options: { ...retryOpts, ...(permissionHooks && { hooks: permissionHooks }), canUseTool } as any,
@@ -1162,10 +1150,9 @@ export class ClaudeAgentSdkProvider implements AIProvider {
               closeCurrentStream();
               const rlRetryEnv = this.buildQueryEnv(meta.projectPath, account);
               const { generator: rlRetryGen, controller: rlRetryCtrl } = createMessageChannel();
-              const rlCurrentSdkId = getSessionMapping(sessionId);
-              const rlCanResume = !!rlCurrentSdkId;
-              if (!rlCanResume) rlRetryCtrl.push(firstMsg);
-              const retryOpts = { ...queryOptions, sessionId: undefined, resume: rlCanResume ? rlCurrentSdkId : undefined, env: rlRetryEnv };
+              const rlHasHistory = (this.messageCount.get(sessionId) ?? 0) > 0;
+              if (!rlHasHistory) rlRetryCtrl.push(firstMsg);
+              const retryOpts = { ...queryOptions, sessionId: undefined, resume: rlHasHistory ? getSdkSessionId(sessionId) : undefined, env: rlRetryEnv };
               const rq = query({
                 prompt: rlRetryGen,
                 options: { ...retryOpts, ...(permissionHooks && { hooks: permissionHooks }), canUseTool } as any,
@@ -1260,10 +1247,9 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                 closeCurrentStream();
                 const rlRetryEnv = this.buildQueryEnv(meta.projectPath, account);
                 const { generator: rlRetryGen, controller: rlRetryCtrl } = createMessageChannel();
-                const rlCurrentSdkId2 = getSessionMapping(sessionId);
-                const rlCanResume2 = !!rlCurrentSdkId2;
-                if (!rlCanResume2) rlRetryCtrl.push(firstMsg);
-                const retryOpts = { ...queryOptions, sessionId: undefined, resume: rlCanResume2 ? rlCurrentSdkId2 : undefined, env: rlRetryEnv };
+                const rlHasHistory2 = (this.messageCount.get(sessionId) ?? 0) > 0;
+                if (!rlHasHistory2) rlRetryCtrl.push(firstMsg);
+                const retryOpts = { ...queryOptions, sessionId: undefined, resume: rlHasHistory2 ? getSdkSessionId(sessionId) : undefined, env: rlRetryEnv };
                 const rq = query({
                   prompt: rlRetryGen,
                   options: { ...retryOpts, ...(permissionHooks && { hooks: permissionHooks }), canUseTool } as any,
@@ -1292,10 +1278,9 @@ export class ClaudeAgentSdkProvider implements AIProvider {
                     closeCurrentStream();
                     const retryEnv = this.buildQueryEnv(meta.projectPath, refreshedAccount);
                     const { generator: authRetryGen2, controller: authRetryCtrl2 } = createMessageChannel();
-                    const authCurrentSdkId2 = getSessionMapping(sessionId);
-                    const authCanResume2 = !!authCurrentSdkId2;
-                    if (!authCanResume2) authRetryCtrl2.push(firstMsg);
-                    const retryOpts = { ...queryOptions, sessionId: undefined, resume: authCanResume2 ? authCurrentSdkId2 : undefined, env: retryEnv };
+                    const authHasHistory2 = (this.messageCount.get(sessionId) ?? 0) > 0;
+                    if (!authHasHistory2) authRetryCtrl2.push(firstMsg);
+                    const retryOpts = { ...queryOptions, sessionId: undefined, resume: authHasHistory2 ? getSdkSessionId(sessionId) : undefined, env: retryEnv };
                     const rq = query({
                       prompt: authRetryGen2,
                       options: { ...retryOpts, ...(permissionHooks && { hooks: permissionHooks }), canUseTool } as any,

package/src/server/index.ts

@@ -491,12 +491,15 @@ if (process.argv.includes("__serve__")) {
   try {
     const { resolve: r } = await import("node:path");
     const { homedir: h } = await import("node:os");
-    const { readFileSync: rf, writeFileSync: wf } = await import("node:fs");
+    const { readFileSync: rf, writeFileSync: wf, renameSync: rn } = await import("node:fs");
     const statusFile = r(h(), ".ppm", "status.json");
     const status = JSON.parse(rf(statusFile, "utf-8"));
     // Write running server version — source of truth for heartbeat
     status.serverVersion = VERSION;
-    wf(statusFile, JSON.stringify(status));
+    // Atomic write: tmp + rename to avoid cross-process partial-read races
+    const tmp = statusFile + ".tmp." + process.pid;
+    wf(tmp, JSON.stringify(status));
+    rn(tmp, statusFile);
     if (status.shareUrl) {
       const { tunnelService } = await import("../services/tunnel.service.ts");
       if (status.tunnelPid) tunnelService.setExternalPid(status.tunnelPid);

package/src/server/ws/chat.ts

@@ -241,7 +241,8 @@ async function startSessionConsumer(sessionId: string, providerId: string, conte
       }
 
       // First content event — stop heartbeat, transition phase
-      const isMetadataEvent = evType === "account_info" || evType === "account_retry" || evType === "streaming_status";
+      // status_update is PPM's pre-flight account selection — not actual SDK content
+      const isMetadataEvent = evType === "account_info" || evType === "account_retry" || evType === "streaming_status" || evType === "status_update";
       if (!firstEventReceived && !isMetadataEvent) {
         firstEventReceived = true;
         const waitMs = Date.now() - startTime;

package/src/services/cloud-ws.service.ts

@@ -204,6 +204,12 @@ function doConnect(): void {
     reconnecting = false;
     ws = null;
     if (heartbeatTimer) { clearInterval(heartbeatTimer); heartbeatTimer = null; }
+    // 4010 = server replaced this connection (another is already active) or reconnecting
+    // too fast — do NOT reconnect to avoid feedback loop
+    if (event.code === 4010) {
+      log("INFO", "Cloud WS closed with 4010 (replaced/throttled), not reconnecting");
+      return;
+    }
     if (shouldConnect) scheduleReconnect("onclose");
   };
 

package/src/services/supervisor-state.ts

@@ -37,6 +37,14 @@ export function triggerResume(): void {
 }
 
 // ─── Status file helpers ───────────────────────────────────────────────
+
+/** Atomic write: write to tmp file then rename (prevents partial-read races across processes) */
+function atomicWriteJson(filePath: string, data: unknown) {
+  const tmp = filePath + ".tmp." + process.pid;
+  writeFileSync(tmp, JSON.stringify(data));
+  renameSync(tmp, filePath);
+}
+
 export function readStatus(): Record<string, unknown> {
   try {
     if (existsSync(STATUS_FILE)) return JSON.parse(readFileSync(STATUS_FILE, "utf-8"));
@@ -47,7 +55,7 @@ export function readStatus(): Record<string, unknown> {
 export function updateStatus(patch: Record<string, unknown>) {
   try {
     const data = { ...readStatus(), ...patch };
-    writeFileSync(STATUS_FILE, JSON.stringify(data));
+    atomicWriteJson(STATUS_FILE, data);
   } catch {}
 }
 

package/src/services/supervisor.ts

@@ -27,8 +27,8 @@ const BACKOFF_MAX_MS = 60_000;
 const STABLE_WINDOW_MS = 300_000;       // 5min stable → reset restart counter
 const SERVER_HEALTH_INTERVAL_MS = 30_000;
 const SERVER_HEALTH_FAIL_THRESHOLD = 3;
-const TUNNEL_PROBE_INTERVAL_MS = 120_000;
-const TUNNEL_PROBE_FAIL_THRESHOLD = 2;
+const TUNNEL_PROBE_INTERVAL_MS = 30_000;    // 30s — adopted tunnels have no `exited` promise
+const TUNNEL_PROBE_FAIL_THRESHOLD = 3;      // 3 HTTP failures before regenerating (PID check is instant)
 const TUNNEL_URL_REGEX = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/;
 const UPGRADE_CHECK_INTERVAL_MS = 900_000;  // 15min
 const UPGRADE_SKIP_INITIAL_MS = 300_000;    // 5min delay before first check
@@ -415,12 +415,25 @@ async function selfReplace(): Promise<{ success: boolean; error?: string }> {
     // Set restarting flag so server child's stopTunnel() skips killing the tunnel
     try { writeFileSync(RESTARTING_FLAG, ""); } catch {}
 
+    // Clear probe timer FIRST to prevent race between flush check and queued callback
+    if (tunnelProbeTimer) { clearInterval(tunnelProbeTimer); tunnelProbeTimer = null; }
+
+    // Final tunnel liveness check before handing off to new supervisor —
+    // if the adopted tunnel died since the last probe, clear status so the
+    // new supervisor spawns fresh instead of discovering ESRCH.
+    if (adoptedTunnelPid && !tunnelChild) {
+      try { process.kill(adoptedTunnelPid, 0); } catch {
+        log("WARN", "Pre-upgrade: adopted tunnel dead, clearing for new supervisor to spawn fresh");
+        adoptedTunnelPid = null;
+        tunnelUrl = null;
+        updateStatus({ shareUrl: null, tunnelPid: null });
+      }
+    }
+
     // Kill server child to free the port; keep tunnel alive for domain continuity
     log("INFO", "Stopping server before spawning new supervisor (tunnel kept alive)");
     if (serverChild) { try { serverChild.kill(); } catch {} serverChild = null; }
-    // Clear health timers so we don't try to respawn killed children
     if (healthTimer) { clearInterval(healthTimer); healthTimer = null; }
-    if (tunnelProbeTimer) { clearInterval(tunnelProbeTimer); tunnelProbeTimer = null; }
     // Brief wait for port release
     await Bun.sleep(500);
 

package/src/services/tunnel.service.ts

@@ -1,7 +1,7 @@
 import type { Subprocess } from "bun";
 import { resolve } from "node:path";
 import { homedir } from "node:os";
-import { existsSync, unlinkSync, readFileSync, writeFileSync } from "node:fs";
+import { existsSync, unlinkSync, readFileSync, writeFileSync, renameSync } from "node:fs";
 import { ensureCloudflared } from "./cloudflared.service.ts";
 
 const TUNNEL_URL_REGEX = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/;
@@ -19,6 +19,8 @@ class TunnelService {
   private externalPid: number | null = null;
   private url: string | null = null;
   private cleanupHandler: (() => void) | null = null;
+  /** True when tunnel is owned by the supervisor (adopted), not by this server process */
+  private supervisorManaged = false;
 
   /** Spawn cloudflared Quick Tunnel and return public URL */
   async startTunnel(port: number): Promise<string> {
@@ -81,12 +83,13 @@ class TunnelService {
     });
 
     this.url = url;
+    this.supervisorManaged = false; // this process owns the tunnel now
     this.persistToStatusFile();
     this.syncToCloud();
     return url;
   }
 
-  /** Kill the cloudflared child process (skipped during restart) */
+  /** Kill the cloudflared child process (skipped during restart or when supervisor-managed) */
   stopTunnel(): void {
     if (this.cleanupHandler) {
       process.off("SIGINT", this.cleanupHandler);
@@ -101,16 +104,22 @@ class TunnelService {
       this.url = null;
       return;
     }
+    // Only kill tunnels this process spawned; externally-managed tunnels (set via
+    // setExternalPid) belong to the supervisor — killing them causes silent URL resets
     if (this.childProcess) {
       try { this.childProcess.kill(); } catch {}
       this.childProcess = null;
     }
     if (this.externalPid) {
-      try { process.kill(this.externalPid); } catch {}
+      // Don't kill — supervisor owns this process and monitors it via probe
       this.externalPid = null;
     }
     this.url = null;
-    this.persistToStatusFile();
+    // Don't persist nulls to status.json when tunnel is supervisor-managed;
+    // the supervisor is the source of truth for tunnel state
+    if (!this.supervisorManaged) {
+      this.persistToStatusFile();
+    }
     this.stopCloudSync();
   }
 
@@ -131,12 +140,13 @@ class TunnelService {
     this.syncToCloud();
   }
 
-  /** Adopt an externally-started tunnel by PID (for stop management after restart) */
+  /** Adopt an externally-started tunnel by PID (supervisor-managed, don't kill on exit) */
   setExternalPid(pid: number): void {
     this.externalPid = pid;
+    this.supervisorManaged = true;
   }
 
-  /** Persist shareUrl + tunnelPid to status.json (central write point) */
+  /** Persist shareUrl + tunnelPid to status.json (atomic write to avoid cross-process races) */
   private persistToStatusFile(): void {
     const statusFile = resolve(homedir(), ".ppm", "status.json");
     if (!existsSync(statusFile)) return;
@@ -144,7 +154,9 @@ class TunnelService {
       const data = JSON.parse(readFileSync(statusFile, "utf-8"));
       data.shareUrl = this.url;
       data.tunnelPid = this.getTunnelPid() ?? null;
-      writeFileSync(statusFile, JSON.stringify(data));
+      const tmp = statusFile + ".tmp." + process.pid;
+      writeFileSync(tmp, JSON.stringify(data));
+      renameSync(tmp, statusFile);
     } catch {}
   }
 

package/src/types/config.ts

@@ -90,7 +90,7 @@ export const DEFAULT_CONFIG: PpmConfig = {
         api_key_env: "ANTHROPIC_API_KEY",
         model: "claude-sonnet-4-6",
         effort: "high",
-        max_turns: 100,
+        max_turns: 1000,
         permission_mode: "bypassPermissions",
       },
     },

package/src/web/components/chat/message-list.tsx

@@ -719,12 +719,20 @@ function InterleavedEvents({ events, isStreaming, projectName }: { events: ChatE
 /** Collapsible thinking block — shows Claude's reasoning, collapsed by default when done */
 function ThinkingBlock({ content, isStreaming }: { content: string; isStreaming: boolean }) {
   const [expanded, setExpanded] = useState(isStreaming);
+  const scrollRef = useRef<HTMLDivElement>(null);
 
   // Auto-collapse when streaming finishes
   useEffect(() => {
     if (!isStreaming && content.length > 0) setExpanded(false);
   }, [isStreaming, content.length]);
 
+  // Auto-scroll to bottom during streaming
+  useEffect(() => {
+    if (isStreaming && expanded && scrollRef.current) {
+      scrollRef.current.scrollTop = scrollRef.current.scrollHeight;
+    }
+  }, [content, isStreaming, expanded]);
+
   return (
     <div className="rounded border border-border/50 bg-surface/30 text-xs">
       <button
@@ -736,11 +744,11 @@ function ThinkingBlock({ content, isStreaming }: { content: string; isStreaming:
         {!isStreaming && <span className="text-text-subtle/50 ml-auto">{content.length > 100 ? `${Math.round(content.length / 4)} tokens` : ""}</span>}
       </button>
       {expanded && (
-        <StickToBottom className="max-h-60 overflow-y-auto" resize="smooth" initial="instant">
-          <StickToBottom.Content className="px-2 pb-2 text-text-subtle/80 whitespace-pre-wrap text-[11px] leading-relaxed">
+        <div ref={scrollRef} className="max-h-60 overflow-y-auto">
+          <div className="px-2 pb-2 text-text-subtle/80 whitespace-pre-wrap text-[11px] leading-relaxed">
             {content}
-          </StickToBottom.Content>
-        </StickToBottom>
+          </div>
+        </div>
       )}
     </div>
   );

package/dist/web/assets/keybindings-store-A0Ag0ZYI.js

@@ -1 +0,0 @@
-import"./react-nm2Ru1Pt.js";import"./api-client-BfBM3I7n.js";import{G as e}from"./index-_YxJ4vi1.js";export{e as useKeybindingsStore};