handmux 0.12.1 → 0.12.3

package/public/index.html

@@ -5,17 +5,21 @@
     <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" />
     <title>handmux</title>
 
-    <!-- Installable PWA: "Add to Home Screen" + standalone (no browser address bar). -->
-    <link rel="manifest" href="/manifest.webmanifest" />
+    <!-- Installable PWA: "Add to Home Screen" + standalone (no browser address bar).
+         ?v=2 one-time cache-bust: pre-0.12.2 servers sent these stable-url assets as
+         `immutable, max-age=1y`, so returning browsers pinned the OLD icon/manifest for a year.
+         index.html is no-store (always fresh), so a new query on the refs escapes those poisoned
+         caches at once; staticCache.js now serves them `no-cache`, so no future bump is needed. -->
+    <link rel="manifest" href="/manifest.webmanifest?v=2" />
     <meta name="theme-color" content="#1a1b1e" />
-    <link rel="icon" type="image/png" href="/icons/icon-192.png" />
+    <link rel="icon" type="image/png" href="/icons/icon-192.png?v=2" />
     <!-- iOS Safari ignores the manifest's display mode, so these drive standalone + the
          home-screen icon/label. "black" keeps the white status-bar text readable on the dark topbar. -->
     <meta name="apple-mobile-web-app-capable" content="yes" />
     <meta name="mobile-web-app-capable" content="yes" />
     <meta name="apple-mobile-web-app-status-bar-style" content="black" />
     <meta name="apple-mobile-web-app-title" content="handmux" />
-    <link rel="apple-touch-icon" href="/icons/apple-touch-icon.png" />
+    <link rel="apple-touch-icon" href="/icons/apple-touch-icon.png?v=2" />
 
     <!-- Inline boot splash: paints instantly (before the JS bundle loads) so a cold launch shows the
          brand, not a blank dark screen. main.jsx calls window.__hideBootSplash() once React has painted;
@@ -44,8 +48,8 @@
       @keyframes bootDot { 0%,100% { opacity: .22; transform: translateY(0); } 40% { opacity: 1; transform: translateY(-3px); } }
       @media (prefers-reduced-motion: reduce) { .boot-glow, .boot-dots i { animation: none; opacity: .8; } }
     </style>
-    <script type="module" crossorigin src="/assets/index-C5v5QBzw.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-DJNPeU_h.css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" crossorigin href="/assets/index-DJNPeU_h.css"></noscript>
+    <script type="module" crossorigin src="/assets/index-yrOcjnt0.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-CpBDvLzi.css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" crossorigin href="/assets/index-CpBDvLzi.css"></noscript>
   </head>
   <body>
     <div id="boot-splash" aria-hidden="true">

package/public/manifest.webmanifest

@@ -9,10 +9,10 @@
   "background_color": "#1a1b1e",
   "theme_color": "#1a1b1e",
   "icons": [
-    { "src": "icons/icon-192.png", "sizes": "192x192", "type": "image/png", "purpose": "any" },
-    { "src": "icons/icon-512.png", "sizes": "512x512", "type": "image/png", "purpose": "any" },
-    { "src": "icons/icon-192-maskable.png", "sizes": "192x192", "type": "image/png", "purpose": "maskable" },
-    { "src": "icons/icon-512-maskable.png", "sizes": "512x512", "type": "image/png", "purpose": "maskable" }
+    { "src": "icons/icon-192.png?v=2", "sizes": "192x192", "type": "image/png", "purpose": "any" },
+    { "src": "icons/icon-512.png?v=2", "sizes": "512x512", "type": "image/png", "purpose": "any" },
+    { "src": "icons/icon-192-maskable.png?v=2", "sizes": "192x192", "type": "image/png", "purpose": "maskable" },
+    { "src": "icons/icon-512-maskable.png?v=2", "sizes": "512x512", "type": "image/png", "purpose": "maskable" }
   ],
   "share_target": {
     "action": "/share-target",

package/public/sw.js

@@ -81,11 +81,11 @@ self.addEventListener('push', (event) => {
     // icon = the large right-side logo. We MUST set it: HyperOS/MIUI always reserves that slot, and an
     // empty `icon` makes it back-fill the slot with the PWA's own icon at a stray size (the `>` reads as
     // a lone "v") plus leaves a gap. An explicit app icon fills the slot cleanly.
-    icon: '/icons/icon-192.png',
+    icon: '/icons/icon-192.png?v=2',
     // badge = the small monochrome status-bar icon. Android reads only its ALPHA and tints the
     // silhouette; an opaque image (icon-192 has no alpha) can't be used, so it falls back to the
     // browser's own Chrome logo. badge-96.png is a white `>▮` silhouette on transparent → our mark.
-    badge: '/icons/badge-96.png',
+    badge: '/icons/badge-96.png?v=2',
     data: d.data || {},
   }));
 });

package/src/agents/scanUtils.js

@@ -200,6 +200,23 @@ export function takeoverSessionName(cwdLabel, n, prefix = 'cc') {
   return `${prefix}-${base}-${n}`.slice(0, 16);
 }
 
+// Coerce a user-typed takeover name into a valid tmux session name (isValidSessionName: [A-Za-z0-9-], ≤16):
+// non-alnum runs → a single '-', trimmed of edge hyphens, capped at 16. Returns '' if nothing usable is
+// left (caller then falls back to the generated name).
+export function sanitizeSessionName(s) {
+  return String(s || '').replace(/[^A-Za-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 16).replace(/-+$/, '');
+}
+
+// First name in `<base>, base-2, base-3, …` (each capped at 16) that isn't already taken. null if none free.
+export function freeSessionName(base, taken) {
+  if (!taken.has(base)) return base;
+  for (let i = 2; i < 1000; i++) {
+    const cand = `${base}-${i}`.slice(0, 16);
+    if (!taken.has(cand)) return cand;
+  }
+  return null;
+}
+
 export const isShell = (c) => /^-?(zsh|bash|sh|fish|dash|tcsh|csh|ksh)$/.test(String(c || ''));
 
 export async function lsofCwd(run, pid) {

package/src/orphans.js

@@ -21,7 +21,7 @@ import { AGENTS, getAgent } from './agents/index.js';
 import { isSessionId } from './tmux/commands.js';
 import {
   defaultRun, parseAgentProcs, parsePaneMembership, findOrphans,
-  takeoverSessionName, isShell, lsofCwd, isSessionUuid,
+  takeoverSessionName, sanitizeSessionName, freeSessionName, isShell, lsofCwd, isSessionUuid,
 } from './agents/scanUtils.js';
 
 // Back-compat re-exports: these were originally defined here and are imported by tests and callers by this
@@ -53,7 +53,7 @@ export async function takeoverOrphan(
     delay = (ms) => new Promise((r) => setTimeout(r, ms)),
     pollTries = 16, pollMs = 400,
   },
-  { pid, sessionId, target = { mode: 'new' }, kill = true } = {},
+  { pid, sessionId, target = { mode: 'new' }, kill = true, name: wantName } = {},
 ) {
   if (!Number.isInteger(pid) || pid <= 0) return { error: 'bad pid', status: 400 };
   // Both agents use UUID session ids; validate up front (takeover types the id into a shell via send-keys).
@@ -76,10 +76,18 @@ export async function takeoverOrphan(
     wid = await commands.newWindow(sid, o.cwd, agent.procName, cmd);
   } else {
     const existing = new Set((await commands.listSessions()).map((s) => s.name));
-    for (let i = 1; i < 1000 && !name; i++) {
-      const cand = takeoverSessionName(o.cwdLabel, i, agent.takeoverPrefix);
-      if (!existing.has(cand)) name = cand;
+    // Honour a user-typed name (sanitized to tmux rules, deduped with a numeric suffix); fall back to the
+    // generated `<prefix>-<dir>-<n>` when the client sent nothing.
+    const wanted = sanitizeSessionName(wantName);
+    if (wanted) {
+      name = freeSessionName(wanted, existing);
+    } else {
+      for (let i = 1; i < 1000 && !name; i++) {
+        const cand = takeoverSessionName(o.cwdLabel, i, agent.takeoverPrefix);
+        if (!existing.has(cand)) name = cand;
+      }
     }
+    if (!name) return { error: 'no free session name', status: 409 };
     sid = await commands.newSession(name, o.cwd, cmd);
     wid = (await commands.listWindows(sid))[0]?.id;
   }
@@ -121,12 +129,15 @@ export async function scanOrphans({
     const cwd = await lsofCwd(run, o.pid);
     const dir = dirOverrides[agent.sessions.dirOptKey] || agent.sessions.dir(home);
     const meta = cwd ? await agent.sessions.resolve(dir, cwd, { busyMs, now }) : {};
+    const cwdLabel = cwd ? path.basename(cwd) : '';
     results.push({
       pid: o.pid,
       agent: agent.id,
       agentLabel: agent.label,
       cwd: cwd || '',
-      cwdLabel: cwd ? path.basename(cwd) : '',
+      cwdLabel,
+      // Default name the takeover sheet prefills (the same `<prefix>-<dir>-1` the server would auto-pick).
+      suggestedName: takeoverSessionName(cwdLabel, 1, agent.takeoverPrefix),
       sessionId: meta.sessionId || null,
       state: meta.state || 'unknown',
       snippet: meta.snippet || '',

package/src/staticCache.js

@@ -1,8 +1,17 @@
-// Cache-Control policy for the static web bundle. index.html and the service worker must NEVER be
-// HTTP-cached — an installed PWA would otherwise keep loading a stale shell (pointing at missing
-// hashed assets) or a stale SW. Everything else under dist carries a content hash in its name, so
-// it's safe to cache forever. Pure so it unit-tests on its own.
+// Cache-Control policy for the static web bundle.
+//   • index.html + the service worker must NEVER be HTTP-cached — an installed PWA would otherwise
+//     keep loading a stale shell (pointing at missing hashed assets) or a stale service worker.
+//   • Vite build output under /assets/ carries a content hash in its filename, so the URL itself
+//     changes whenever the bytes change → safe to pin forever (immutable).
+//   • Everything else is a hand-authored public/ file served at a STABLE url whose bytes change in
+//     place across releases (icons, manifest.webmanifest, favicon, og cards, offline assets). Those
+//     must NOT be immutable — pinning them would freeze an old copy in every returning browser for a
+//     year (a changed app icon / manifest would never reach anyone who had visited before). They get
+//     `no-cache` = store but always revalidate; the ETag/Last-Modified express.static already sends
+//     make the recheck a cheap 304 when nothing changed, and an actual change is picked up at once.
+// Pure so it unit-tests on its own.
 export function cacheControlFor(filePath) {
   if (filePath.endsWith('.html') || filePath.endsWith('/sw.js')) return 'no-store';
-  return 'public, max-age=31536000, immutable';
+  if (/[\\/]assets[\\/]/.test(filePath)) return 'public, max-age=31536000, immutable';
+  return 'no-cache';
 }