Repository navigation

Multiplexer Phase 5: default-on, update survival, windowless agents, remote picker, release - #511

Merged

benyblack merged 98 commits into

dev-muxfrom

feat/mux-phase5

Oct 9, 2026

Commits on Oct 8, 2026
- docs(mux): Phase 5 spec (brief + rulings) and implementation plan
  
  benyblack
  and
  claude
  committed
  fde2f6b
- fix(mux): never block a caller on a full outbound queue
  
  benyblack
  and
  claude
  committed
  6f82d3c
- fix(ssh): no vault password for askpass when a jump host could ask as the target
  
  benyblack
  and
  claude
  committed
  3b39e5a
- fix(ssh): an extra-args proxy or a user@host hop never gets the vault
  
  benyblack
  and
  claude
  committed
  d6919ff
- fix(ssh): one known-hosts store per file, written atomically
  
  benyblack
  and
  claude
  committed
  403de65
- fix(ssh): a known-hosts store that cannot be read is never overwritten
  
  benyblack
  and
  claude
  committed
  5b9c8b0
- fix(mux): install ntilde-mux under $XDG_DATA_HOME like the daemon root
  
  benyblack
  and
  claude
  committed
  fcd1120
- fix(mux): quote a recorded ntilde-mux path instead of replacing it
  
  benyblack
  and
  claude
  committed
  6e516a3
- fix(mux): refuse every format and separator character in a recorded path
  
  benyblack
  and
  claude
  committed
  da6a4a6
- fix(mux): private askpass folder, clean server text in toasts, cleared prompt answers
  
  benyblack
  and
  claude
  committed
  5bc3050
- ci: build ntilde-mux for the E2E when its tests change
  
  benyblack
  and
  claude
  committed
  5681207
- fix(mux): give remote shells an agent socket link the proxy keeps current
  
  benyblack
  and
  claude
  committed
  8a6fd8a
- fix(mux): the agent link probe never blocks and accepts only this user's socket
  
  benyblack
  and
  claude
  committed
  cec9520
- perf(ssh): wait for native exec events instead of sleeping 10 ms
  
  benyblack
  and
  claude
  committed
  cc734f1
- test(ssh): robust timing for the native exec wait tests
  
  benyblack
  and
  claude
  committed
  d86bd41
- ci(release): sign and notarize ntilde-mux on macOS and pin its hashes in the app
  
  benyblack
  and
  claude
  committed
  fad1d08
- ci(release): fail on a rejected notarization; pin tests
  
  benyblack
  and
  claude
  committed
  70d137d
- feat(mux): readScreen, and public session info and unattached input on MuxClient
  
  benyblack
  and
  claude
  committed
  343bddc
- test(ssh): the torn-write reader runs during the writes
  
  benyblack
  and
  claude
  committed
  066c531
- fix(ssh): a known-hosts write that cannot complete always fails with IOException
  
  benyblack
  and
  claude
  committed
  e8148e5
- fix(mux): readScreen replies use the snapshot budget; decode errors are not "unsupported"
  
  benyblack
  and
  claude
  committed
  c0bcd9e
- feat(agent): a window-owned source of windowless mux sessions
  
  benyblack
  and
  claude
  committed
  2929d94
- fix(agent): one deadline per windowless operation; act checks share the survey
  
  benyblack
  and
  claude
  committed
  ea691cf
- feat(agent): list, read, status, capture, input and close for windowless sessions
  
  benyblack
  and
  claude
  committed
  bd31ddf
- fix(agent): coalesce windowless reads in the journal; act checks honour the toggle
  
  benyblack
  and
  claude
  committed
  bf5e5b2
- feat(mcp): show windowless mux sessions to agents
  
  benyblack
  and
  claude
  committed
  e245266
- refactor(settings): name the session persistence default; designer windows never persist
  
  benyblack
  and
  claude
  committed
  03798bd
- feat(mux): ask once whether closing the window keeps the shells running
  
  benyblack
  and
  claude
  committed
  51cf42f
- fix(mux): first close never kills shared shells; Cmd+Q honours the remembered answer
  
  benyblack
  and
  claude
  committed
  4243331
- feat(mux): Quit and close all shells
  
  benyblack
  and
  claude
  committed
  fccd387
- docs(settings): describe session persistence for a default-on reader
  
  benyblack
  and
  claude
  committed
  00b23d0
- feat(mux): start fresh shells quietly after a reboot
  
  benyblack
  and
  claude
  committed
  1bbee41
- test(settings): pin persistence off where test windows took the default
  
  benyblack
  and
  claude
  committed
  5118887
- feat(settings): keep local shells running by default
  
  benyblack
  and
  claude
  committed
  5756680
- fix(mux): a real boot/logon boundary for quiet restore
  
  benyblack
  and
  claude
  committed
  196df0a
- test(mux): designer windows can never start a daemon
  
  benyblack
  and
  claude
  committed
  e725df2
- feat(mux): the daemon reports its build version
  
  benyblack
  and
  claude
  committed
  35801a9
- feat(mux): on a Windows install the daemon runs from its own copy
  
  benyblack
  and
  claude
  committed
  dcdfe00
- fix: CI whitespace and a SonarCloud false positive (Quit and close all)
  
  benyblack
  and
  claude
  committed
  bf7df07
- fix(mux): the daemon copy is identified by content; uninstall stops the daemon
  
  benyblack
  and
  claude
  committed
  7807080
- fix(mux): only our own daemon copies are ever deleted
  
  benyblack
  and
  claude
  committed
  f049d12
- ci(aot-gate): accept the daemon's shell spawn now that persistence is on by default
  
  benyblack
  and
  claude
  committed
  260c296
- feat(update): keep a compatible multiplexer running across an update
  
  benyblack
  and
  claude
  committed
  a659378
- fix(update): with session persistence off, updates behave as before Phase 5
  
  benyblack
  and
  claude
  committed
  5c43cae
- ci(aot-gate): require the full daemon path when the GUI started the daemon
  
  benyblack
  and
  claude
  committed
  46c0b75
- refactor(update): one helper each for marking shells ended, saving, the install root
  
  benyblack
  and
  claude
  committed
  e2efc00
- feat(mux): offer to restart a multiplexer from a previous build
  
  benyblack
  and
  claude
  committed
  39158ad
- fix(mux): a multiplexer restart keeps the panes and never stops this build's daemon
  
  benyblack
  and
  claude
  committed
  8a07dad
- fix(mux): hold Enter through a restart; remote panes let go too; outcomes by cause
  
  benyblack
  and
  claude
  committed
  8ff5c2f
- fix(mux): a pane let go for a restart starts a shell only through Enter
  
  benyblack
  and
  claude
  committed
  e6a945c
- feat(update): a local update source for verification runs
  
  benyblack
  and
  claude
  committed
  6f51ef7
- feat(mux): a hidden spawn-for-test verb for verification runs
  
  benyblack
  and
  claude
  committed
  08aff25
Commits on Oct 9, 2026
- test(update): an update-survival run against a sandboxed Velopack install
  
  benyblack
  and
  claude
  committed
  ed9b280
- fix(update): honour NTILDE_UPDATE_SOURCE_DIR only for the verification install
  
  benyblack
  and
  claude
  committed
  80c2c4d
- fix(test): the survival scripts own their sandbox, and macOS never self-restarts
  
  benyblack
  and
  claude
  committed
  576691d
- fix(test): resolve the .sh's temp roots with valid zsh expansions
  
  benyblack
  and
  claude
  committed
  28ad7db
- fix(test): sweep only Velopack's exact state paths, and gate the macOS launch
  
  benyblack
  and
  claude
  committed
  570f554
- fix(test): never follow a symlink when sweeping Velopack's state
  
  benyblack
  and
  claude
  committed
  8e4f81f
- feat(mux): Attach to session lists remote hosts
  
  benyblack
  and
  claude
  committed
  5ad949a
- fix(mux): picker connect feedback, one attach at a time, held hosts
  
  benyblack
  and
  claude
  committed
  4f236dc
- test(mux): give the parallel-listing test room on a loaded runner
  
  benyblack
  and
  claude
  committed
  89bfa53
- fix(mux): a shared remote tab stays shared and never kills on close
  
  benyblack
  and
  claude
  committed
  86c6dda
- fix(mux): say a detached share's shell kept running, and keep it on quit
  
  benyblack
  and
  claude
  committed
  862efa2
- feat(mux): ntilde mux ls --all lists remote hosts
  
  benyblack
  and
  claude
  committed
  d6719ee
- fix(mux): ls --all skips OpenSSH jump hosts off Windows and kills cut channels
  
  benyblack
  and
  claude
  committed
  e32f76d
- fix(mux): log a failed release in ls --all instead of losing it
  
  benyblack
  and
  claude
  committed
  d4c6598
- feat(mux): SFTP and remote files on native persistent tabs
  
  benyblack
  and
  claude
  committed
  ecb0cd7
- fix(mux): a shared session keeps every window's registration; retargeted tabs list and transfer nothing
  
  benyblack
  and
  claude
  committed
  a9cf7c4
- docs(mux): one persistent sessions chapter; README, changelog, release notes
  
  benyblack
  and
  claude
  committed
  59f93c4
- docs(mux): state the on-by-default persistence (drop with the flip)
  
  benyblack
  and
  claude
  committed
  80fdeb0
- release: 0.12.0
  
  benyblack
  and
  claude
  committed
  8747239
- docs(mux): qualify reconnects, add R30, review fixes
  
  benyblack
  and
  claude
  committed
  de724c3
- docs(mux): Phase 5 manual checklist
  
  benyblack
  and
  claude
  committed
  2fd09a7
- style(test): a local function for the held-attach release
  
  benyblack
  and
  claude
  committed
  ea6168f
- docs(mux): checklist warns where the harness and restarts reach real state
  
  benyblack
  and
  claude
  committed
  8ad2418
- fix(mux): pass the listing's token to Task.Run in ls --all
  
  benyblack
  and
  claude
  committed
  0887ad2
- fix(mux): judge a remote ntilde-mux against the version installed on its host
  
  benyblack
  and
  claude
  committed
  8022c2f
- fix(mcp): name the session tools a windowless id works with
  
  benyblack
  and
  claude
  committed
  650fc27
- fix(mux): post off-thread work through the window's own dispatcher
  
  benyblack
  and
  claude
  committed
  adaaf36
- fix(mux): a nonsense boot time reads as no boundary, not a crash
  
  benyblack
  and
  claude
  committed
  3b19cd4
- fix(mux): "Close them" counts and ends the shells of tabs not shown yet
  
  benyblack
  and
  claude
  committed
  259d00c
- docs(manual): agent captures ride observe and are not journaled
  
  benyblack
  and
  claude
  committed
  d379582
- test(mux): tabs not shown yet whose shells are gone close without asking
  
  benyblack
  and
  claude
  committed
  990d458
- fix(mux): a stale install record never loops a remote restart
  
  benyblack
  and
  claude
  committed
  ec21b7f
- fix(mux): "Close them" lists again before ending, and its hold always lets go
  
  benyblack
  and
  claude
  committed
  869218f
- fix(mux): "Close them" counts and ends the shells of startup tabs not built yet
  
  benyblack
  and
  claude
  committed
  01ce6a5
- fix(mux): stopping the whole daemon leaves no unvisited tab's shell in the session
  
  benyblack
  and
  claude
  committed
  c6f8efd
- fix(agent): a listing with windowless rows lights the window
  
  benyblack
  and
  claude
  committed
  3ca832f
- fix(update): the update's question gives the real reason it closes the shells
  
  benyblack
  and
  claude
  committed
  3c1c2eb
- feat(update): debug.log says why the startup gate held an update; pin the flip's dependency
  
  benyblack
  and
  claude
  committed
  b98f7cb
- docs(architecture): the update question's reason and the startup gate's log line
  
  benyblack
  and
  claude
  committed
  041082d
- fix(mux): the quit drops unvisited tabs' shells only once they are known gone
  
  benyblack
  and
  claude
  committed
  cbfc799
- test(mux): a null child and the quiet-lost and remote exclusions in a placeholder's tree
  
  benyblack
  and
  claude
  committed
  1e9d258
- refactor(update): drop the boolean wrappers only tests called
  
  benyblack
  and
  claude
  committed
  5c2147b
- fix(release): refuse a run that would replace a published ntilde-mux
  
  benyblack
  and
  claude
  committed
  d9ae916
- fix(mux): a password the server refuses leaves the host's transfer scope
  
  benyblack
  and
  claude
  committed
  131c827
- fix(ssh): make an existing askpass record folder private before writing
  
  benyblack
  and
  claude
  committed
  752e2fc
- docs(spec): R14 - an existing askpass folder is now tightened to 0700
  
  benyblack
  and
  claude
  committed
  d733bdc

Commits

Commits on Oct 8, 2026

Commits on Oct 9, 2026