handmux 0.25.0 → 0.25.2

package/dist/public/index.html

@@ -48,8 +48,8 @@
       @keyframes bootDot { 0%,100% { opacity: .22; transform: translateY(0); } 40% { opacity: 1; transform: translateY(-3px); } }
       @media (prefers-reduced-motion: reduce) { .boot-glow, .boot-dots i { animation: none; opacity: .8; } }
     </style>
-    <script type="module" crossorigin src="/assets/index-DmjeMSQA.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-CTrqTqtT.css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" crossorigin href="/assets/index-CTrqTqtT.css"></noscript>
+    <script type="module" crossorigin src="/assets/index-DH4DnhbV.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-DPBerEuM.css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" crossorigin href="/assets/index-DPBerEuM.css"></noscript>
   </head>
   <body>
     <div id="boot-splash" aria-hidden="true">

package/dist/src/agent-runtime/conversationLiveHub.js

@@ -168,6 +168,7 @@ export class ConversationLiveHub {
             ready: Promise.resolve(),
             subscribers: new Set(),
             replay: [],
+            provisional: new Set(),
             idleTimer: undefined,
             detachAbort: () => { },
             terminated: false,
@@ -201,8 +202,9 @@ export class ConversationLiveHub {
             || event.sequence <= shared.checkpoint.streamSequence)
             return;
         const previousSequence = shared.checkpoint.streamSequence;
+        const advancesBaseline = event.type === 'history.changed' && shared.provisional.size === 0;
         if (shared.replay.length >= this.#maxReplayEvents
-            && event.type !== 'history.changed' && event.type !== 'stream.gap') {
+            && !advancesBaseline && event.type !== 'stream.gap') {
             const gap = {
                 type: 'stream.gap', sequence: event.sequence, afterSequence: previousSequence,
             };
@@ -222,10 +224,16 @@ export class ConversationLiveHub {
         shared.replay.push(structuredClone(event));
         for (const subscriber of [...shared.subscribers])
             subscriber.push(event, terminal);
-        if (event.type === 'history.changed') {
-            // A durable barrier advances the baseline without ending the native observation. Existing clients
-            // receive the barrier and reconcile their page; later subscribers start directly from the new
-            // checkpoint, so pre-barrier replay can be released immediately.
+        if (event.type === 'item.opened')
+            shared.provisional.add(event.provisionalId);
+        else if (event.type === 'item.settled' || event.type === 'item.cancelled') {
+            shared.provisional.delete(event.provisionalId);
+        }
+        else if (event.type === 'stream.gap')
+            shared.provisional.clear();
+        if (advancesBaseline) {
+            // A barrier can release replay only when no provisional lifecycle crosses it. Otherwise a late
+            // subscriber must replay item.opened before receiving that item's later delta or settlement.
             shared.baseline = structuredClone(shared.checkpoint);
             shared.replay = [];
         }

package/dist/src/agent-runtime/interactionLiveHub.js

@@ -165,10 +165,15 @@ export class InteractionLiveHub {
         }
         const pending = new Map(checkpoint.pending.map((item) => [item.id, item]));
         if (event.type === 'opened') {
-            if (event.interaction.runId !== shared.run.ref.runId || pending.has(event.interaction.id)) {
+            const previous = pending.get(event.interaction.id);
+            if (event.interaction.runId !== shared.run.ref.runId
+                || (previous !== undefined
+                    && previous.resolutionToken !== event.interaction.resolutionToken)) {
                 this.#terminate(shared);
                 throw new InteractionLiveHubError('unavailable', 'Interaction opened event is invalid');
             }
+            // Core deliberately reuses the public identity and resolution token when a native pending item
+            // changes in place. Mirror its upsert contract so prompt/option updates do not tear down SSE.
             pending.set(event.interaction.id, structuredClone(event.interaction));
         }
         else if (!pending.delete(event.interactionId)) {

package/dist/src/agent-runtime/runtime.js

@@ -155,6 +155,7 @@ export class AgentRuntime {
     #transport;
     #unsubscribePanes;
     #reconcileTail = Promise.resolve();
+    #startPromise;
     #started = false;
     #closed = false;
     #closePromise;
@@ -545,18 +546,58 @@ export class AgentRuntime {
             throw new Error('AgentRuntime is closed');
         if (this.#started)
             return;
-        this.#started = true;
-        for (const adapter of this.adapters)
-            await this.#startAdapter(adapter);
-        await this.#transport.start();
-        this.#unsubscribePanes = this.#panes.subscribe((snapshot) => {
-            const operation = this.#reconcileTail.then(() => this.#reconcile(snapshot));
-            this.#reconcileTail = operation.catch((error) => {
-                this.#logger.warn('Agent pane reconciliation failed', {
-                    error: error instanceof Error ? error.message : String(error),
+        if (this.#startPromise)
+            return this.#startPromise;
+        const operation = this.#start();
+        this.#startPromise = operation;
+        try {
+            await operation;
+        }
+        finally {
+            if (this.#startPromise === operation)
+                this.#startPromise = undefined;
+        }
+    }
+    async #start() {
+        let unsubscribe;
+        try {
+            // Establish the only fallible shared prerequisite before adapters acquire resources. Connections
+            // arriving inside this short starting window fail closed and can retry once #started is committed.
+            await this.#transport.start();
+            if (this.#closed)
+                throw new Error('AgentRuntime is closed');
+            unsubscribe = this.#panes.subscribe((snapshot) => {
+                const operation = this.#reconcileTail.then(() => this.#reconcile(snapshot));
+                this.#reconcileTail = operation.catch((error) => {
+                    this.#logger.warn('Agent pane reconciliation failed', {
+                        error: error instanceof Error ? error.message : String(error),
+                    });
                 });
             });
-        });
+            this.#unsubscribePanes = unsubscribe;
+            for (const adapter of this.adapters) {
+                if (this.#closed)
+                    throw new Error('AgentRuntime is closed');
+                await this.#startAdapter(adapter);
+            }
+            if (this.#closed)
+                throw new Error('AgentRuntime is closed');
+            this.#started = true;
+        }
+        catch (error) {
+            unsubscribe?.();
+            if (this.#unsubscribePanes === unsubscribe)
+                this.#unsubscribePanes = undefined;
+            await this.#transport.close();
+            if (!this.#closed) {
+                const message = error instanceof Error ? error.message : String(error);
+                for (const adapter of this.adapters)
+                    this.#report(adapter.id, {
+                        availability: 'unavailable', message,
+                    });
+            }
+            throw error;
+        }
     }
     close() {
         if (this.#closePromise)
@@ -568,6 +609,7 @@ export class AgentRuntime {
         if (this.#closed)
             return;
         this.#closed = true;
+        await this.#startPromise?.catch(() => { });
         this.#unsubscribePanes?.();
         this.#unsubscribePanes = undefined;
         await this.#reconcileTail.catch(() => { });

package/dist/src/agents/conversationProjectionSafety.js

@@ -97,14 +97,35 @@ export function safeProviderPathLabel(value) {
         return relative;
     if (typeof value !== 'string' || value.length === 0)
         return undefined;
-    if (!(value.startsWith('/') || value.startsWith('\\') || /^[a-zA-Z]:[\\/]/.test(value))) {
-        return undefined;
+    let path = value;
+    if (path.startsWith('~/') || path.startsWith('~\\')) {
+        return path.split(/[\\/]/).includes('..') ? undefined : path.replaceAll('\\', '/');
     }
-    if (value.split(/[\\/]/).includes('..'))
+    if (/^file:/i.test(path)) {
+        try {
+            const url = new URL(path);
+            if (url.protocol !== 'file:' || (url.hostname && url.hostname !== 'localhost'))
+                return undefined;
+            path = decodeURIComponent(url.pathname);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    const windows = path.match(/^([a-zA-Z]:)[\\/]Users[\\/][^\\/]+(?<tail>(?:[\\/].*)?)$/i);
+    if (windows)
+        path = windows.groups?.tail ? `~${windows.groups.tail.replaceAll('\\', '/')}` : '~';
+    else
+        path = path
+            .replace(/^\/Users\/[^/]+(?=\/|$)/, '~')
+            .replace(/^\/home\/[^/]+(?=\/|$)/, '~')
+            .replace(/^\/root(?=\/|$)/, '~');
+    if (!(path === '~' || path.startsWith('~/') || path.startsWith('/')
+        || /^[a-zA-Z]:[\\/]/.test(path)))
+        return undefined;
+    if (path.split(/[\\/]/).includes('..'))
         return undefined;
-    const leaf = value.replace(/[\\/]+$/, '').split(/[\\/]/).at(-1);
-    return leaf && leaf !== '.' && leaf !== '..' && safeRelativeProviderPath(leaf) === leaf
-        ? leaf : undefined;
+    return path;
 }
 function urlContainsPrivateData(value) {
     try {
@@ -148,8 +169,9 @@ function safePublicEndpoint(value) {
     }
 }
 /**
- * Redacts provider-local data from otherwise useful command output. This intentionally keeps commands,
- * relative paths, and ordinary public URLs readable.
+ * Redacts credentials and private endpoints from otherwise useful command output. Local paths stay
+ * readable because this authenticated self-hosted UI exposes the same workspace through its terminal;
+ * conventional user-home prefixes are abbreviated to avoid repeating account names.
  */
 export function sanitizeToolText(value) {
     let redacted = false;
@@ -157,14 +179,22 @@ export function sanitizeToolText(value) {
         redacted = true;
         return `${prefix}[redacted]`;
     };
+    const keepPath = (match, prefix, path) => {
+        const safe = safeProviderPathLabel(path);
+        if (safe === undefined)
+            return replace(match, prefix);
+        if (safe !== path)
+            redacted = true;
+        return `${prefix}${safe}`;
+    };
     let text = value
-        .replace(/\b(?:file):\/\/[^\s<>'"`]+/gi, (match) => replace(match))
+        .replace(/\b(?:file):\/\/[^\s<>'"`]+/gi, (match) => keepPath(match, '', match))
         .replace(/\b(?:https?|wss?):\/\/[^\s<>'"`]+/gi, (match) => (urlContainsPrivateData(match) ? replace(match) : match))
         .replace(/(\b(?:authorization|proxy-authorization)\b\s*[:=]\s*)(?:bearer\s+)?[^\s,;}]+/gi, (match, prefix) => replace(match, prefix))
         .replace(/(\b(?:cookie|set-cookie|api[_-]?key|access[_-]?token|refresh[_-]?token|auth[_-]?token|password|passwd|credential|client[_-]?secret)\b\s*[:=]\s*)(?:"[^"]*"|'[^']*'|[^\s,;}]+)/gi, (match, prefix) => replace(match, prefix))
         .replace(/(\b(?:endpoint|base[_-]?url|server[_-]?url|socket(?:[_-]?path)?)\b\s*[:=]\s*)("[^"]*"|'[^']*'|[^\s,;}]+)/gi, (match, prefix, endpoint) => (privateEndpointText(endpoint) ? replace(match, prefix) : match))
-        .replace(/(^|[\s"'=(+\-])([a-zA-Z]:[\\/][^\s"'`,;)\]}]+)/g, (match, prefix) => replace(match, prefix))
-        .replace(/(^|[\s"'=(+\-])(\/(?!\/)[^\s"'`,;)\]}]+)/g, (match, prefix) => replace(match, prefix));
+        .replace(/(^|[\s"'=(+\-])([a-zA-Z]:[\\/][^\s"'`,;)\]}]+)/g, (match, prefix, path) => keepPath(match, prefix, path))
+        .replace(/(^|[\s"'=(+\-])(\/(?!\/)[^\s"'`,;)\]}]+)/g, (match, prefix, path) => keepPath(match, prefix, path));
     return { text, redacted };
 }
 function safeToolValue(value, key, depth, state) {

package/dist/src/codexAppServer.js

@@ -784,6 +784,9 @@ class CodexAppConnection {
             if (message.method === 'item/started' && params.item.type === 'contextCompaction') {
                 state.compacting = true;
             }
+            else if (message.method === 'item/completed' && params.item.type === 'contextCompaction') {
+                state.compacting = false;
+            }
             if (params.item.type === 'agentMessage') {
                 const itemKey = `${params.turnId}\0${params.item.id}`;
                 if (message.method === 'item/completed')
@@ -941,9 +944,10 @@ class CodexAppConnection {
         }
         else if (message.method === 'thread/started') {
             const startedThreadId = params.thread?.id || params.threadId || null;
-            // Collaboration child threads share this App Server connection. They are independent work, not a
-            // replacement for the root TUI conversation represented by this pane.
-            if (startedThreadId && params.thread?.parentThreadId == null) {
+            // Collaboration children and ephemeral helpers share this App Server connection. They are
+            // independent work, not a replacement for the durable root conversation represented by this pane.
+            if (startedThreadId && params.thread?.parentThreadId == null
+                && params.thread?.ephemeral !== true) {
                 const previous = this.currentThreadId;
                 this.lastStartedThreadId = startedThreadId;
                 this.currentThreadId = startedThreadId;
@@ -2489,7 +2493,7 @@ class CodexAppConnection {
                 return {
                     threadId,
                     order: Number(thread.updatedAt ?? thread.createdAt ?? index),
-                    root: thread.parentThreadId == null,
+                    root: thread.parentThreadId == null && thread.ephemeral !== true,
                     known: true,
                 };
             }

package/dist/src/docs.js

@@ -41,6 +41,15 @@ export function encodeCwdKey(cwd) {
     return cwd.replace(/\//g, '-').replace(/[^A-Za-z0-9._-]/g, '_') || '_default';
 }
 export function createDocs({ home, extraRoots = [], maxDownloadBytes = MAX_TRANSFER_BYTES }) {
+    const rootedClientPath = (rawPath) => {
+        if (typeof rawPath !== 'string')
+            return null;
+        if (rawPath === '~')
+            return home;
+        if (rawPath.startsWith('~/'))
+            return join(home, rawPath.slice(2));
+        return rawPath.startsWith('/') ? rawPath : null;
+    };
     // $HOME is constant at runtime — resolve once at construction, reuse the same promise everywhere.
     const realHomeP = fs.realpath(home);
     // Browse / read / download / upload may also reach a few EXTRA roots OUTSIDE $HOME (e.g. /tmp,
@@ -80,14 +89,15 @@ export function createDocs({ home, extraRoots = [], maxDownloadBytes = MAX_TRANS
     // the phone neither transfers content nor forces a re-render. `mtimeMs` is always returned so the
     // client can store it for the next check.
     async function readDoc(rawPath, knownMtime = null) {
-        if (typeof rawPath !== 'string' || rawPath[0] !== '/')
+        const requestedPath = rootedClientPath(rawPath);
+        if (!requestedPath)
             return { error: 'not absolute', status: 400 };
         // Markdown/HTML keep their rich renderer; every other filename gets a content-checked plain-text
         // preview. Extension is presentation metadata, never the permission to read a file as text.
-        const type = docTypeFor(rawPath) || 'text';
+        const type = docTypeFor(requestedPath) || 'text';
         let real;
         try {
-            real = await fs.realpath(rawPath);
+            real = await fs.realpath(requestedPath);
         }
         catch {
             return { error: 'not found', status: 404 };
@@ -162,11 +172,12 @@ export function createDocs({ home, extraRoots = [], maxDownloadBytes = MAX_TRANS
     // Resolve a path for DOWNLOAD: any regular file under home, no extension white-list (unlike
     // readDoc). Same realpath+isUnder boundary; symlinks escaping home resolve outside → rejected.
     async function statForDownload(rawPath) {
-        if (typeof rawPath !== 'string' || rawPath[0] !== '/')
+        const requestedPath = rootedClientPath(rawPath);
+        if (!requestedPath)
             return { error: 'not absolute', status: 400 };
         let real;
         try {
-            real = await fs.realpath(rawPath);
+            real = await fs.realpath(requestedPath);
         }
         catch {
             return { error: 'not found', status: 404 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "handmux",
-  "version": "0.25.0",
+  "version": "0.25.2",
   "description": "A mobile vibe-coding cockpit — built on tmux: drive your live session, Claude Code / Codex — anything a terminal can run — from your phone.",
   "type": "module",
   "license": "AGPL-3.0-only",
@@ -75,13 +75,13 @@
     "vitest": "^2.0.0"
   },
   "whatsNew": [
+    {"version":"0.25.2","date":"2026-09-02","zh":"修复 Agent 对话断流、排队与工具路径","en":"Fixed Agent chat streams, queues, and tool paths"},
+    {"version":"0.25.1","date":"2026-09-02","zh":"修复 Codex 幽灵任务与对话空白","en":"Fixed Codex ghost tasks and blank chats"},
     {"version":"0.25.0","date":"2026-09-01","zh":"Pi 原生接入 · 多 Agent 对话更可靠","en":"Native Pi support · more reliable agent chat"},
     {"version":"0.24.0","date":"2026-08-11","zh":"Codex 任务进度与 Goal 原生上线","en":"Native Codex task progress and Goals"},
     {"version":"0.23.0","date":"2026-08-09","zh":"Codex 托管对话正式上线","en":"Managed Codex chat is here"},
     {"version":"0.22.1","date":"2026-08-04","zh":"网页宽度与网站版本分开控制","en":"Separate page width and site-version controls"},
     {"version":"0.22.0","date":"2026-08-03","zh":"全屏设置 · 窗口与分屏管理更清晰","en":"Full-screen Settings · clearer window and pane management"},
-    {"version":"0.21.0","date":"2026-08-03","zh":"网页预览：手机直连、电脑代理与静态目录","en":"Web preview: direct, computer proxy, and static folders"},
-    {"version":"0.20.3","date":"2026-08-01","zh":"实时终端显示更稳定流畅","en":"More stable, smoother live terminals"},
-    {"version":"0.20.2","date":"2026-07-27","zh":"实时终端长时间运行更流畅","en":"Smoother long-running live terminals"}
+    {"version":"0.21.0","date":"2026-08-03","zh":"网页预览：手机直连、电脑代理与静态目录","en":"Web preview: direct, computer proxy, and static folders"}
   ]
 }