handmux 0.23.0 → 0.24.0

package/{hooks → dist/hooks}/handmux-statusline.cjs

@@ -21,6 +21,22 @@ const raw = (() => { try { return fs.readFileSync(0, 'utf8'); } catch { return '
 let j = {};
 try { j = JSON.parse(raw || '{}'); } catch { /* not JSON → leave j = {} */ }
 
+function ensurePrivateDirectory(directory) {
+  const resolved = path.resolve(directory);
+  const parsed = path.parse(resolved);
+  const parts = resolved.slice(parsed.root.length).split(path.sep).filter(Boolean);
+  const privateRoot = parts.indexOf('.handmux');
+  if (privateRoot < 0) {
+    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    return;
+  }
+  for (let i = privateRoot; i < parts.length; i++) {
+    const current = path.join(parsed.root, ...parts.slice(0, i + 1));
+    fs.mkdirSync(current, { recursive: true, mode: 0o700 });
+    fs.chmodSync(current, 0o700);
+  }
+}
+
 // One rate-limit window → our shape, or undefined if the field is absent (rate_limits only appears for
 // Pro/Max plans, and only after a session's first API response).
 function win(o) {
@@ -48,7 +64,8 @@ if (file) {
       rateLimits,
     };
     if (snap.context === undefined) delete snap.context;
-    fs.mkdirSync(path.dirname(file), { recursive: true });
+    ensurePrivateDirectory(path.dirname(file));
+    if (fs.existsSync(file)) fs.chmodSync(file, 0o600);
     let previousHasQuota = false;
     try {
       const previous = JSON.parse(fs.readFileSync(file, 'utf8'));
@@ -58,12 +75,13 @@ if (file) {
     // previous machine-wide quota until a real rate-limit payload refreshes it instead of flashing empty.
     if (Object.keys(rateLimits).length > 0) {
       const tmp = `${file}.${process.pid}.tmp`;
-      fs.writeFileSync(tmp, JSON.stringify(snap));
+      fs.writeFileSync(tmp, JSON.stringify(snap), { mode: 0o600 });
       fs.renameSync(tmp, file); // atomic: concurrent statuslines (multiple sessions) can't tear the snapshot
+      fs.chmodSync(file, 0o600);
     } else if (!previousHasQuota) {
       // Create the initial "capturer active, awaiting data" marker only if no concurrent session has
       // already published a real quota snapshot. An empty session can therefore never win that race.
-      try { fs.writeFileSync(file, JSON.stringify(snap), { flag: 'wx' }); } catch { /* file now exists */ }
+      try { fs.writeFileSync(file, JSON.stringify(snap), { flag: 'wx', mode: 0o600 }); } catch { /* file now exists */ }
     }
 
     // Per-session context snapshot. The global file above is last-writer-wins across ALL sessions, so it
@@ -73,12 +91,13 @@ if (file) {
     const sid = typeof j.session_id === 'string' ? j.session_id : null;
     if (sid && /^[\w-]+$/.test(sid) && snap.context) {
       const cdir = path.join(path.dirname(file), 'context');
-      fs.mkdirSync(cdir, { recursive: true });
+      ensurePrivateDirectory(cdir);
       const cfile = path.join(cdir, `${sid}.json`);
       const csnap = { sessionId: sid, model: snap.model, usedPercent: snap.context.usedPercent, updatedAt: snap.updatedAt };
       const ctmp = `${cfile}.${process.pid}.tmp`;
-      fs.writeFileSync(ctmp, JSON.stringify(csnap));
+      fs.writeFileSync(ctmp, JSON.stringify(csnap), { mode: 0o600 });
       fs.renameSync(ctmp, cfile);
+      fs.chmodSync(cfile, 0o600);
       // Best-effort prune of stale session files (ended sessions never clean up after themselves) so the
       // dir can't grow without bound. A day is well past any live session's last statusLine render.
       try {
@@ -86,7 +105,10 @@ if (file) {
         for (const nm of fs.readdirSync(cdir)) {
           if (!nm.endsWith('.json')) continue;
           const fp = path.join(cdir, nm);
-          try { if (fs.statSync(fp).mtimeMs < cutoff) fs.unlinkSync(fp); } catch { /* skip */ }
+          try {
+            fs.chmodSync(fp, 0o600);
+            if (fs.statSync(fp).mtimeMs < cutoff) fs.unlinkSync(fp);
+          } catch { /* skip */ }
         }
       } catch { /* prune is best-effort */ }
     }

package/{hooks → dist/hooks}/handmux-write.cjs

@@ -14,6 +14,7 @@
 // or corrupt the file. Best-effort throughout and silent — the hook is fire-and-forget and must never
 // fail Claude (the shell wrapper swallows errors and always exits 0).
 const fs = require('node:fs');
+const path = require('node:path');
 
 const [, , file, pane, src, ts, host = ''] = process.argv;
 if (!file || !pane || !src) process.exit(0);
@@ -34,7 +35,26 @@ const nap = (ms) => {
   catch { const end = Date.now() + ms; while (Date.now() < end) { /* spin */ } }
 };
 
-try { fs.mkdirSync(path.dirname(file), { recursive: true }); } catch { /* ignore */ }
+function ensurePrivateDirectory(directory) {
+  const resolved = path.resolve(directory);
+  const parsed = path.parse(resolved);
+  const parts = resolved.slice(parsed.root.length).split(path.sep).filter(Boolean);
+  const privateRoot = parts.indexOf('.handmux');
+  if (privateRoot < 0) {
+    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    return;
+  }
+  for (let i = privateRoot; i < parts.length; i++) {
+    const current = path.join(parsed.root, ...parts.slice(0, i + 1));
+    fs.mkdirSync(current, { recursive: true, mode: 0o700 });
+    fs.chmodSync(current, 0o700);
+  }
+}
+
+try {
+  ensurePrivateDirectory(path.dirname(file));
+  if (fs.existsSync(file)) fs.chmodSync(file, 0o600);
+} catch { /* ignore */ }
 
 function update() {
   let obj = {};
@@ -61,14 +81,15 @@ function update() {
     obj[pane] = { ts: Number(ts) || 0, src, host, payload };
   }
   const tmp = `${file}.${process.pid}.tmp`;
-  fs.writeFileSync(tmp, JSON.stringify(obj));
+  fs.writeFileSync(tmp, JSON.stringify(obj), { mode: 0o600 });
   fs.renameSync(tmp, file);                                   // atomic: a torn write can't corrupt the file
+  fs.chmodSync(file, 0o600);
 }
 
 const lock = `${file}.lock`;
 let held = false;
 for (let i = 0; i < 60 && !held; i++) {                       // ~0.9s budget, then write lockless (best-effort)
-  try { fs.closeSync(fs.openSync(lock, 'wx')); held = true; } // O_EXCL → atomic "I hold it"
+  try { fs.closeSync(fs.openSync(lock, 'wx', 0o600)); held = true; } // O_EXCL → atomic "I hold it"
   catch {
     try { if (Date.now() - fs.statSync(lock).mtimeMs > 3000) fs.unlinkSync(lock); } catch { /* steal a stale lock */ }
     nap(15);

package/dist/package.json

@@ -0,0 +1,126 @@
+{
+  "name": "handmux",
+  "version": "0.24.0",
+  "description": "A mobile vibe-coding cockpit — built on tmux: drive your live session, Claude Code / Codex — anything a terminal can run — from your phone.",
+  "type": "module",
+  "license": "AGPL-3.0-only",
+  "author": "yuanyuanzijin",
+  "homepage": "https://handmux.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/handmux/handmux.git"
+  },
+  "bugs": {
+    "url": "https://github.com/handmux/handmux/issues"
+  },
+  "keywords": [
+    "tmux",
+    "mobile",
+    "terminal",
+    "claude-code",
+    "remote",
+    "pwa"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "bin": {
+    "handmux": "bin/handmux.js"
+  },
+  "files": [
+    "bin/handmux.js",
+    "dist",
+    "README.md",
+    "README.zh-CN.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "start": "npm run build:server && node dist/bin/handmux.js start",
+    "dev": "npm run build:server && node dist/bin/handmux.js start --foreground",
+    "handmux": "npm run build:server && node dist/bin/handmux.js",
+    "build:server": "node scripts/build-server.mjs",
+    "bundle": "node scripts/bundle-web.mjs",
+    "prepack": "npm run bundle && npm run build:server",
+    "typecheck:source": "node scripts/check-typescript-product-source.mjs",
+    "typecheck": "tsc --project tsconfig.json",
+    "test": "npm run build:server && vitest run",
+    "test:pack": "node scripts/pack-smoke.mjs",
+    "test:workspace-host": "npm run build:server && HANDMUX_WORKSPACE_HOST=1 vitest run test/workspaceHost.test.js",
+    "test:workspace-docker": "npm run build:server && HANDMUX_WORKSPACE_DOCKER=1 vitest run test/workspaceDocker.test.js"
+  },
+  "dependencies": {
+    "@clack/prompts": "0.11.0",
+    "busboy": "^1.6.0",
+    "compression": "^1.8.1",
+    "express": "^4.19.2",
+    "testcafe-hammerhead": "31.7.8",
+    "tunlite": "^0.10.0",
+    "web-push": "^3.6.7",
+    "ws": "^8.21.0"
+  },
+  "optionalDependencies": {
+    "qrcode-terminal": "^0.12.0"
+  },
+  "devDependencies": {
+    "@types/busboy": "^1.5.4",
+    "@types/compression": "^1.8.1",
+    "@types/express": "4.17.25",
+    "@types/node": "20.19.43",
+    "@types/supertest": "7.2.1",
+    "@types/web-push": "^3.6.4",
+    "@types/ws": "^8.18.1",
+    "supertest": "^7.0.0",
+    "typescript": "6.0.3",
+    "vitest": "^2.0.0"
+  },
+  "whatsNew": [
+    {
+      "version": "0.24.0",
+      "date": "2026-08-11",
+      "zh": "Codex 任务进度与 Goal 原生上线",
+      "en": "Native Codex task progress and Goals"
+    },
+    {
+      "version": "0.23.0",
+      "date": "2026-08-09",
+      "zh": "Codex 托管对话正式上线",
+      "en": "Managed Codex chat is here"
+    },
+    {
+      "version": "0.22.1",
+      "date": "2026-08-04",
+      "zh": "网页宽度与网站版本分开控制",
+      "en": "Separate page width and site-version controls"
+    },
+    {
+      "version": "0.22.0",
+      "date": "2026-08-03",
+      "zh": "全屏设置 · 窗口与分屏管理更清晰",
+      "en": "Full-screen Settings · clearer window and pane management"
+    },
+    {
+      "version": "0.21.0",
+      "date": "2026-08-03",
+      "zh": "网页预览：手机直连、电脑代理与静态目录",
+      "en": "Web preview: direct, computer proxy, and static folders"
+    },
+    {
+      "version": "0.20.3",
+      "date": "2026-08-01",
+      "zh": "实时终端显示更稳定流畅",
+      "en": "More stable, smoother live terminals"
+    },
+    {
+      "version": "0.20.2",
+      "date": "2026-07-27",
+      "zh": "实时终端长时间运行更流畅",
+      "en": "Smoother long-running live terminals"
+    },
+    {
+      "version": "0.20.1",
+      "date": "2026-07-26",
+      "zh": "聊天发送修复 · 电脑键盘不中断",
+      "en": "Reliable chat sending · uninterrupted desktop input"
+    }
+  ]
+}