handmux 0.22.1 → 0.24.0

package/{hooks → dist/hooks}/handmux-notify.sh

@@ -1,9 +1,7 @@
 #!/bin/sh
 # handmux 上报 hook. $1 = stop | notify | prompt | end | resume | permreq | compacting | compact | stopfail.
 # (compacting/compact/stopfail 是版本门控事件:PreCompact/PostCompact/StopFailure，只在够新的 Claude 上注册。)
-# $2 = agent id(留空=claude;
-# Codex 传 'codex')—— Claude 与 Codex 的 hook payload 字段一致(stdin JSON),所以共用这一个脚本。
-# stdin = agent 原始 payload(JSON).
+# stdin = Claude Code 原始 payload(JSON).
 # (resume  = PostToolUse on AskUserQuestion/ExitPlanMode:答完选项/批准计划 → 状态翻回进行中、带所选项。)
 # (permreq = PermissionRequest:真实弹框一出现就发、带 tool_name → 比 permission_prompt 早亮「需要你」。)
 # 只做一件事:把本次事件写进一个本地 JSON 状态文件(键=tmux pane,值=该 pane 最新事件)。不联网、
@@ -20,5 +18,5 @@ TS=$(perl -MTime::HiRes -e 'printf "%.0f", Time::HiRes::time()*1000' 2>/dev/null
 HOST=$(hostname 2>/dev/null || printf '')
 # payload 经 stdin 原样流给 node(不在 shell 里转义,避免坏数据);pane 含 '%' 直接进 JSON 字段,
 # 不再进 URL → 彻底告别旧的 "%110 被 url-decode 丢弃" 那类坑。
-node "$(dirname "$0")/handmux-write.cjs" "$FILE" "$PANE" "$1" "$TS" "$HOST" "$2" 2>/dev/null || true
+node "$(dirname "$0")/handmux-write.cjs" "$FILE" "$PANE" "$1" "$TS" "$HOST" 2>/dev/null || true
 exit 0

package/{hooks → dist/hooks}/handmux-statusline.cjs

@@ -21,6 +21,22 @@ const raw = (() => { try { return fs.readFileSync(0, 'utf8'); } catch { return '
 let j = {};
 try { j = JSON.parse(raw || '{}'); } catch { /* not JSON → leave j = {} */ }
 
+function ensurePrivateDirectory(directory) {
+  const resolved = path.resolve(directory);
+  const parsed = path.parse(resolved);
+  const parts = resolved.slice(parsed.root.length).split(path.sep).filter(Boolean);
+  const privateRoot = parts.indexOf('.handmux');
+  if (privateRoot < 0) {
+    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    return;
+  }
+  for (let i = privateRoot; i < parts.length; i++) {
+    const current = path.join(parsed.root, ...parts.slice(0, i + 1));
+    fs.mkdirSync(current, { recursive: true, mode: 0o700 });
+    fs.chmodSync(current, 0o700);
+  }
+}
+
 // One rate-limit window → our shape, or undefined if the field is absent (rate_limits only appears for
 // Pro/Max plans, and only after a session's first API response).
 function win(o) {
@@ -48,7 +64,8 @@ if (file) {
       rateLimits,
     };
     if (snap.context === undefined) delete snap.context;
-    fs.mkdirSync(path.dirname(file), { recursive: true });
+    ensurePrivateDirectory(path.dirname(file));
+    if (fs.existsSync(file)) fs.chmodSync(file, 0o600);
     let previousHasQuota = false;
     try {
       const previous = JSON.parse(fs.readFileSync(file, 'utf8'));
@@ -58,12 +75,13 @@ if (file) {
     // previous machine-wide quota until a real rate-limit payload refreshes it instead of flashing empty.
     if (Object.keys(rateLimits).length > 0) {
       const tmp = `${file}.${process.pid}.tmp`;
-      fs.writeFileSync(tmp, JSON.stringify(snap));
+      fs.writeFileSync(tmp, JSON.stringify(snap), { mode: 0o600 });
       fs.renameSync(tmp, file); // atomic: concurrent statuslines (multiple sessions) can't tear the snapshot
+      fs.chmodSync(file, 0o600);
     } else if (!previousHasQuota) {
       // Create the initial "capturer active, awaiting data" marker only if no concurrent session has
       // already published a real quota snapshot. An empty session can therefore never win that race.
-      try { fs.writeFileSync(file, JSON.stringify(snap), { flag: 'wx' }); } catch { /* file now exists */ }
+      try { fs.writeFileSync(file, JSON.stringify(snap), { flag: 'wx', mode: 0o600 }); } catch { /* file now exists */ }
     }
 
     // Per-session context snapshot. The global file above is last-writer-wins across ALL sessions, so it
@@ -73,12 +91,13 @@ if (file) {
     const sid = typeof j.session_id === 'string' ? j.session_id : null;
     if (sid && /^[\w-]+$/.test(sid) && snap.context) {
       const cdir = path.join(path.dirname(file), 'context');
-      fs.mkdirSync(cdir, { recursive: true });
+      ensurePrivateDirectory(cdir);
       const cfile = path.join(cdir, `${sid}.json`);
       const csnap = { sessionId: sid, model: snap.model, usedPercent: snap.context.usedPercent, updatedAt: snap.updatedAt };
       const ctmp = `${cfile}.${process.pid}.tmp`;
-      fs.writeFileSync(ctmp, JSON.stringify(csnap));
+      fs.writeFileSync(ctmp, JSON.stringify(csnap), { mode: 0o600 });
       fs.renameSync(ctmp, cfile);
+      fs.chmodSync(cfile, 0o600);
       // Best-effort prune of stale session files (ended sessions never clean up after themselves) so the
       // dir can't grow without bound. A day is well past any live session's last statusLine render.
       try {
@@ -86,7 +105,10 @@ if (file) {
         for (const nm of fs.readdirSync(cdir)) {
           if (!nm.endsWith('.json')) continue;
           const fp = path.join(cdir, nm);
-          try { if (fs.statSync(fp).mtimeMs < cutoff) fs.unlinkSync(fp); } catch { /* skip */ }
+          try {
+            fs.chmodSync(fp, 0o600);
+            if (fs.statSync(fp).mtimeMs < cutoff) fs.unlinkSync(fp);
+          } catch { /* skip */ }
         }
       } catch { /* prune is best-effort */ }
     }

package/{hooks → dist/hooks}/handmux-write.cjs

@@ -16,7 +16,7 @@
 const fs = require('node:fs');
 const path = require('node:path');
 
-const [, , file, pane, src, ts, host = '', agent = ''] = process.argv;
+const [, , file, pane, src, ts, host = ''] = process.argv;
 if (!file || !pane || !src) process.exit(0);
 
 let payload = {};
@@ -35,7 +35,26 @@ const nap = (ms) => {
   catch { const end = Date.now() + ms; while (Date.now() < end) { /* spin */ } }
 };
 
-try { fs.mkdirSync(path.dirname(file), { recursive: true }); } catch { /* ignore */ }
+function ensurePrivateDirectory(directory) {
+  const resolved = path.resolve(directory);
+  const parsed = path.parse(resolved);
+  const parts = resolved.slice(parsed.root.length).split(path.sep).filter(Boolean);
+  const privateRoot = parts.indexOf('.handmux');
+  if (privateRoot < 0) {
+    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    return;
+  }
+  for (let i = privateRoot; i < parts.length; i++) {
+    const current = path.join(parsed.root, ...parts.slice(0, i + 1));
+    fs.mkdirSync(current, { recursive: true, mode: 0o700 });
+    fs.chmodSync(current, 0o700);
+  }
+}
+
+try {
+  ensurePrivateDirectory(path.dirname(file));
+  if (fs.existsSync(file)) fs.chmodSync(file, 0o600);
+} catch { /* ignore */ }
 
 function update() {
   let obj = {};
@@ -58,30 +77,19 @@ function update() {
     const curSid = obj[pane] && obj[pane].payload && obj[pane].payload.session_id;
     const endSid = payload && payload.session_id;
     if (!curSid || !endSid || curSid === endSid) delete obj[pane];
-  } else if (src === 'resume' && agent === 'codex') {
-    // Codex fires PostToolUse on EVERY tool call, so its resume exists purely to un-stick a pane from 需要你
-    // back to 进行中 after the user approved a PermissionRequest. Apply it ONLY as that transition — a mid-
-    // turn tool call (pane already 进行中 / 已完成) is a no-op, so we don't rewrite the entry on every
-    // command (the load Claude's matcher avoids). Claude's resume — no agent arg — is unaffected.
-    const prev = obj[pane];
-    const prevPerm = prev && (prev.src === 'permreq'
-      || (prev.src === 'notify' && (prev.payload || {}).notification_type === 'permission_prompt'));
-    if (!prevPerm) { return; }
-    obj[pane] = { ts: Number(ts) || 0, src, host, payload, agent };
   } else {
-    // agent tag lets the server dispatch classify + liveness per agent (Codex passes 'codex'); omitted for
-    // Claude so legacy entries stay byte-identical and default to claude server-side.
-    obj[pane] = { ts: Number(ts) || 0, src, host, payload, ...(agent ? { agent } : {}) };
+    obj[pane] = { ts: Number(ts) || 0, src, host, payload };
   }
   const tmp = `${file}.${process.pid}.tmp`;
-  fs.writeFileSync(tmp, JSON.stringify(obj));
+  fs.writeFileSync(tmp, JSON.stringify(obj), { mode: 0o600 });
   fs.renameSync(tmp, file);                                   // atomic: a torn write can't corrupt the file
+  fs.chmodSync(file, 0o600);
 }
 
 const lock = `${file}.lock`;
 let held = false;
 for (let i = 0; i < 60 && !held; i++) {                       // ~0.9s budget, then write lockless (best-effort)
-  try { fs.closeSync(fs.openSync(lock, 'wx')); held = true; } // O_EXCL → atomic "I hold it"
+  try { fs.closeSync(fs.openSync(lock, 'wx', 0o600)); held = true; } // O_EXCL → atomic "I hold it"
   catch {
     try { if (Date.now() - fs.statSync(lock).mtimeMs > 3000) fs.unlinkSync(lock); } catch { /* steal a stale lock */ }
     nap(15);
@@ -89,12 +97,3 @@ for (let i = 0; i < 60 && !held; i++) {                       // ~0.9s budget, t
 }
 try { update(); } catch { /* best effort */ }
 if (held) { try { fs.unlinkSync(lock); } catch { /* ignore */ } }
-
-// Codex hook payloads include the exact rollout transcript_path. Capture its latest token_count into a
-// machine-wide snapshot after the inbox update; failures are isolated so usage can never break the hook.
-if (agent === 'codex' && typeof payload.transcript_path === 'string') {
-  try {
-    const { captureTranscript } = require('./handmux-codex-usage.cjs');
-    captureTranscript(payload.transcript_path, path.join(path.dirname(file), 'codex-usage.json'));
-  } catch { /* best effort */ }
-}

package/dist/package.json

@@ -0,0 +1,126 @@
+{
+  "name": "handmux",
+  "version": "0.24.0",
+  "description": "A mobile vibe-coding cockpit — built on tmux: drive your live session, Claude Code / Codex — anything a terminal can run — from your phone.",
+  "type": "module",
+  "license": "AGPL-3.0-only",
+  "author": "yuanyuanzijin",
+  "homepage": "https://handmux.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/handmux/handmux.git"
+  },
+  "bugs": {
+    "url": "https://github.com/handmux/handmux/issues"
+  },
+  "keywords": [
+    "tmux",
+    "mobile",
+    "terminal",
+    "claude-code",
+    "remote",
+    "pwa"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "bin": {
+    "handmux": "bin/handmux.js"
+  },
+  "files": [
+    "bin/handmux.js",
+    "dist",
+    "README.md",
+    "README.zh-CN.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "start": "npm run build:server && node dist/bin/handmux.js start",
+    "dev": "npm run build:server && node dist/bin/handmux.js start --foreground",
+    "handmux": "npm run build:server && node dist/bin/handmux.js",
+    "build:server": "node scripts/build-server.mjs",
+    "bundle": "node scripts/bundle-web.mjs",
+    "prepack": "npm run bundle && npm run build:server",
+    "typecheck:source": "node scripts/check-typescript-product-source.mjs",
+    "typecheck": "tsc --project tsconfig.json",
+    "test": "npm run build:server && vitest run",
+    "test:pack": "node scripts/pack-smoke.mjs",
+    "test:workspace-host": "npm run build:server && HANDMUX_WORKSPACE_HOST=1 vitest run test/workspaceHost.test.js",
+    "test:workspace-docker": "npm run build:server && HANDMUX_WORKSPACE_DOCKER=1 vitest run test/workspaceDocker.test.js"
+  },
+  "dependencies": {
+    "@clack/prompts": "0.11.0",
+    "busboy": "^1.6.0",
+    "compression": "^1.8.1",
+    "express": "^4.19.2",
+    "testcafe-hammerhead": "31.7.8",
+    "tunlite": "^0.10.0",
+    "web-push": "^3.6.7",
+    "ws": "^8.21.0"
+  },
+  "optionalDependencies": {
+    "qrcode-terminal": "^0.12.0"
+  },
+  "devDependencies": {
+    "@types/busboy": "^1.5.4",
+    "@types/compression": "^1.8.1",
+    "@types/express": "4.17.25",
+    "@types/node": "20.19.43",
+    "@types/supertest": "7.2.1",
+    "@types/web-push": "^3.6.4",
+    "@types/ws": "^8.18.1",
+    "supertest": "^7.0.0",
+    "typescript": "6.0.3",
+    "vitest": "^2.0.0"
+  },
+  "whatsNew": [
+    {
+      "version": "0.24.0",
+      "date": "2026-08-11",
+      "zh": "Codex 任务进度与 Goal 原生上线",
+      "en": "Native Codex task progress and Goals"
+    },
+    {
+      "version": "0.23.0",
+      "date": "2026-08-09",
+      "zh": "Codex 托管对话正式上线",
+      "en": "Managed Codex chat is here"
+    },
+    {
+      "version": "0.22.1",
+      "date": "2026-08-04",
+      "zh": "网页宽度与网站版本分开控制",
+      "en": "Separate page width and site-version controls"
+    },
+    {
+      "version": "0.22.0",
+      "date": "2026-08-03",
+      "zh": "全屏设置 · 窗口与分屏管理更清晰",
+      "en": "Full-screen Settings · clearer window and pane management"
+    },
+    {
+      "version": "0.21.0",
+      "date": "2026-08-03",
+      "zh": "网页预览：手机直连、电脑代理与静态目录",
+      "en": "Web preview: direct, computer proxy, and static folders"
+    },
+    {
+      "version": "0.20.3",
+      "date": "2026-08-01",
+      "zh": "实时终端显示更稳定流畅",
+      "en": "More stable, smoother live terminals"
+    },
+    {
+      "version": "0.20.2",
+      "date": "2026-07-27",
+      "zh": "实时终端长时间运行更流畅",
+      "en": "Smoother long-running live terminals"
+    },
+    {
+      "version": "0.20.1",
+      "date": "2026-07-26",
+      "zh": "聊天发送修复 · 电脑键盘不中断",
+      "en": "Reliable chat sending · uninterrupted desktop input"
+    }
+  ]
+}