handmux 0.27.2 → 0.29.0

package/dist/src/workspace/environment.js

@@ -3,9 +3,11 @@ import { execFile } from 'node:child_process';
 import fsp from 'node:fs/promises';
 import { promisify } from 'node:util';
 const execFileAsync = promisify(execFile);
-function normalizeMacBootTime(value) {
-    const seconds = String(value).match(/\bsec\s*=\s*(\d+)\b/)?.[1];
-    return seconds && seconds !== '0' ? seconds : null;
+const UUID_PATTERN = '[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}';
+const UUID = new RegExp(`^${UUID_PATTERN}$`, 'i');
+const MAC_BOOT_IDENTITY = new RegExp(`^darwin:${UUID_PATTERN}$`, 'i');
+export function isLegacyMacBootIdentity(value) {
+    return typeof value === 'string' && /^[1-9][0-9]*$/.test(value);
 }
 function environmentId(bootIdentity, tmuxServerId) {
     return crypto
@@ -18,8 +20,14 @@ export function detectEnvironmentChange(previous, observed) {
         return { status: 'unknown' };
     if (!previous)
         return { status: 'initial', current: observed };
-    if (previous.bootIdentity !== observed.bootIdentity)
+    // Old macOS checkpoints used a wall-clock boot timestamp, which can drift during the same boot.
+    // It cannot be compared with a boot session UUID. During migration the tmux generation is the
+    // available continuity evidence; a replaced/missing tmux still produces a recoverable change below.
+    const migratingMacIdentity = isLegacyMacBootIdentity(previous.bootIdentity)
+        && MAC_BOOT_IDENTITY.test(observed.bootIdentity);
+    if (!migratingMacIdentity && previous.bootIdentity !== observed.bootIdentity) {
         return { status: 'changed', reason: 'boot-changed', current: observed };
+    }
     if (observed.status === 'absent') {
         return previous.tmuxServerId
             ? { status: 'changed', reason: 'tmux-changed', current: observed }
@@ -39,7 +47,8 @@ export function createBootIdentityProvider({ platform = process.platform, readFi
                 return identity || null;
             }
             if (platform === 'darwin') {
-                return normalizeMacBootTime((await exec('sysctl', ['-n', 'kern.boottime'])).stdout);
+                const identity = String((await exec('sysctl', ['-n', 'kern.bootsessionuuid'])).stdout).trim();
+                return UUID.test(identity) ? `darwin:${identity.toLowerCase()}` : null;
             }
             return null;
         }

package/dist/src/workspace/runtime.js

@@ -1,4 +1,5 @@
 import crypto from 'node:crypto';
+import { isLegacyMacBootIdentity } from './environment.js';
 import { buildRestorePlan } from './planner.js';
 import { executeRestore } from './restore.js';
 import { createOperationManager, normalizeRestoreRequest, } from './operations.js';
@@ -162,11 +163,25 @@ export function createWorkspaceRuntime({ store, tmux, lock, checkpointer, now =
         await start();
         const state = await planRestore(request);
         const serverNow = new Date(now()).toISOString();
-        const promptEligible = Boolean(!state.request.historical
+        let promptEligible = Boolean(!state.request.historical
             && state.recovery
             && state.recovery.resolvedAt === null
             && state.recovery.pendingSessionIds.length > 0
             && Date.parse(state.recovery.expiresAt) > now());
+        // A numeric macOS boot timestamp could have archived this still-running tmux generation.
+        // Suppress only the automatic prompt when a fresh read proves that exact server survived.
+        // Keep both checkpoint and recovery records intact for explicit historical recovery.
+        if (promptEligible && state.plan.changeReason === 'boot-changed'
+            && isLegacyMacBootIdentity(state.checkpoint.environment.bootIdentity)
+            && state.checkpoint.environment.tmuxServerId) {
+            try {
+                const observed = await tmux.observeEnvironment?.({ readOnly: true });
+                if (observed?.status === 'present'
+                    && observed.tmuxServerId === state.checkpoint.environment.tmuxServerId)
+                    promptEligible = false;
+            }
+            catch { /* Without continuity evidence, retain the recovery prompt. */ }
+        }
         return Object.freeze({ ...state.plan, mapping: state.recovery?.mapping || null, serverNow, promptEligible });
     }
     async function getProtectionStatus() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "handmux",
-  "version": "0.27.2",
+  "version": "0.29.0",
   "description": "A mobile vibe-coding cockpit — built on tmux: drive your live session, Claude Code / Codex — anything a terminal can run — from your phone.",
   "type": "module",
   "license": "AGPL-3.0-only",
@@ -75,13 +75,13 @@
     "vitest": "^2.0.0"
   },
   "whatsNew": [
+    {"version":"0.29.0","date":"2026-09-16","zh":"可信设备与可信地址保护","en":"Trusted device and address protection"},
+    {"version":"0.28.0","date":"2026-09-11","zh":"Claude 对话更可靠 · 工具图片预览","en":"More reliable Claude chat · tool image previews"},
     {"version":"0.27.2","date":"2026-09-08","zh":"修复多标签页偶发鉴权弹窗","en":"Fix intermittent authentication prompts across tabs"},
     {"version":"0.27.1","date":"2026-09-08","zh":"腾讯语音 · 终端光标修复 · Codex 对话恢复","en":"Tencent voice · terminal cursor fixes · Codex chat recovery"},
     {"version":"0.27.0","date":"2026-09-05","zh":"腾讯语音输入 · 终端输入更准确","en":"Tencent voice input · more accurate terminal typing"},
     {"version":"0.26.0","date":"2026-09-04","zh":"对话精细复制 · Pi 上下文状态","en":"Precise chat copy · Pi context status"},
     {"version":"0.25.2","date":"2026-09-02","zh":"修复 Agent 对话断流、排队与工具路径","en":"Fixed Agent chat streams, queues, and tool paths"},
-    {"version":"0.25.1","date":"2026-09-02","zh":"修复 Codex 幽灵任务与对话空白","en":"Fixed Codex ghost tasks and blank chats"},
-    {"version":"0.25.0","date":"2026-09-01","zh":"Pi 原生接入 · 多 Agent 对话更可靠","en":"Native Pi support · more reliable agent chat"},
-    {"version":"0.24.0","date":"2026-08-11","zh":"Codex 任务进度与 Goal 原生上线","en":"Native Codex task progress and Goals"}
+    {"version":"0.25.1","date":"2026-09-02","zh":"修复 Codex 幽灵任务与对话空白","en":"Fixed Codex ghost tasks and blank chats"}
   ]
 }