handmux 0.27.1 → 0.27.2

package/dist/public/index.html

@@ -48,7 +48,7 @@
       @keyframes bootDot { 0%,100% { opacity: .22; transform: translateY(0); } 40% { opacity: 1; transform: translateY(-3px); } }
       @media (prefers-reduced-motion: reduce) { .boot-glow, .boot-dots i { animation: none; opacity: .8; } }
     </style>
-    <script type="module" crossorigin src="/assets/index-VT8s4ELL.js"></script>
+    <script type="module" crossorigin src="/assets/index-B4pKf3IW.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-Cdrh2CUp.css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" crossorigin href="/assets/index-Cdrh2CUp.css"></noscript>
   </head>
   <body>

package/dist/src/terminalStream.js

@@ -25,7 +25,7 @@ export function echoTerminalProbe(ws, message) {
 export function startSubscribeDeadline(ws, timeoutMs = SUBSCRIBE_TIMEOUT_MS) {
     const timer = setTimeout(() => {
         if (ws.readyState < 2)
-            ws.close(4001, 'authentication timeout');
+            ws.close(4000, 'subscribe timeout');
     }, timeoutMs);
     timer.unref?.();
     return () => clearTimeout(timer);
@@ -359,9 +359,11 @@ export function createTerminalStream({ token, commands, spawnControl, }) {
             }
             if (authenticating)
                 return;
-            if (message.type !== 'subscribe'
-                || !tokenEquals(message.token ?? '', token)
-                || !isPaneId(message.pane)) {
+            if (message.type !== 'subscribe' || !isPaneId(message.pane)) {
+                ws.close(1003, 'bad subscribe message');
+                return;
+            }
+            if (!tokenEquals(message.token ?? '', token)) {
                 ws.close(4001, 'unauthorized');
                 return;
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "handmux",
-  "version": "0.27.1",
+  "version": "0.27.2",
   "description": "A mobile vibe-coding cockpit — built on tmux: drive your live session, Claude Code / Codex — anything a terminal can run — from your phone.",
   "type": "module",
   "license": "AGPL-3.0-only",
@@ -75,13 +75,13 @@
     "vitest": "^2.0.0"
   },
   "whatsNew": [
+    {"version":"0.27.2","date":"2026-09-08","zh":"修复多标签页偶发鉴权弹窗","en":"Fix intermittent authentication prompts across tabs"},
     {"version":"0.27.1","date":"2026-09-08","zh":"腾讯语音 · 终端光标修复 · Codex 对话恢复","en":"Tencent voice · terminal cursor fixes · Codex chat recovery"},
     {"version":"0.27.0","date":"2026-09-05","zh":"腾讯语音输入 · 终端输入更准确","en":"Tencent voice input · more accurate terminal typing"},
     {"version":"0.26.0","date":"2026-09-04","zh":"对话精细复制 · Pi 上下文状态","en":"Precise chat copy · Pi context status"},
     {"version":"0.25.2","date":"2026-09-02","zh":"修复 Agent 对话断流、排队与工具路径","en":"Fixed Agent chat streams, queues, and tool paths"},
     {"version":"0.25.1","date":"2026-09-02","zh":"修复 Codex 幽灵任务与对话空白","en":"Fixed Codex ghost tasks and blank chats"},
     {"version":"0.25.0","date":"2026-09-01","zh":"Pi 原生接入 · 多 Agent 对话更可靠","en":"Native Pi support · more reliable agent chat"},
-    {"version":"0.24.0","date":"2026-08-11","zh":"Codex 任务进度与 Goal 原生上线","en":"Native Codex task progress and Goals"},
-    {"version":"0.23.0","date":"2026-08-09","zh":"Codex 托管对话正式上线","en":"Managed Codex chat is here"}
+    {"version":"0.24.0","date":"2026-08-11","zh":"Codex 任务进度与 Goal 原生上线","en":"Native Codex task progress and Goals"}
   ]
 }