@wangyaoshen/remux 0.3.8-dev.bab6c95 → 0.3.10-dev.19fb76c

package/.github/workflows/publish.yml

@@ -55,37 +55,214 @@ jobs:
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
 
-  # ── macOS app (.dmg) → GitHub Release ────────────────
-  macos:
+  # ── iOS → TestFlight ─────────────────────────────────
+  ios:
     runs-on: macos-15
     permissions:
-      contents: write
+      contents: read
     steps:
       - uses: actions/checkout@v4
         with:
           submodules: recursive
 
-      - name: Install Zig
-        uses: mlugg/setup-zig@v2
+      - name: Set up signing
+        env:
+          CERTIFICATES_P12: ${{ secrets.APPLE_CERTIFICATES_P12 }}
+          CERTIFICATES_PASSWORD: ${{ secrets.APPLE_CERTIFICATES_PASSWORD }}
+          API_KEY_P8: ${{ secrets.APP_STORE_CONNECT_API_KEY_P8 }}
+          API_KEY_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }}
+        run: |
+          # Create temporary keychain
+          KEYCHAIN_PATH="$RUNNER_TEMP/signing.keychain-db"
+          KEYCHAIN_PASSWORD="$(openssl rand -hex 16)"
+          security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+          security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+
+          # Import certificates
+          echo "$CERTIFICATES_P12" | base64 --decode > "$RUNNER_TEMP/certs.p12"
+          security import "$RUNNER_TEMP/certs.p12" \
+            -P "$CERTIFICATES_PASSWORD" \
+            -A -t cert -f pkcs12 \
+            -k "$KEYCHAIN_PATH"
+          security set-key-partition-list -S apple-tool:,apple:,codesign: \
+            -s -k "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+
+          # Add keychain to search list
+          security list-keychains -d user -s "$KEYCHAIN_PATH" $(security list-keychains -d user | tr -d '"')
+
+          # Install Apple WWDR G3 intermediate cert
+          curl -sO https://www.apple.com/certificateauthority/AppleWWDRCAG3.cer
+          sudo security add-certificates -k /Library/Keychains/System.keychain AppleWWDRCAG3.cer
+
+          # Set up API key
+          mkdir -p ~/.private_keys
+          echo "$API_KEY_P8" | base64 --decode > ~/.private_keys/AuthKey_${API_KEY_ID}.p8
+
+          # Verify
+          security find-identity -v -p codesigning "$KEYCHAIN_PATH"
+
+      - name: Archive
+        env:
+          API_KEY_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }}
+          API_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_ISSUER_ID }}
+        run: |
+          TAG="${GITHUB_REF#refs/tags/}"
+          VERSION="${TAG#v}"
+
+          xcodebuild archive \
+            -project apps/ios/Remux.xcodeproj \
+            -scheme Remux \
+            -destination 'generic/platform=iOS' \
+            -archivePath "$RUNNER_TEMP/Remux.xcarchive" \
+            -allowProvisioningUpdates \
+            -authenticationKeyPath ~/.private_keys/AuthKey_${API_KEY_ID}.p8 \
+            -authenticationKeyID "$API_KEY_ID" \
+            -authenticationKeyIssuerID "$API_ISSUER_ID" \
+            CURRENT_PROJECT_VERSION="$(git rev-list --count HEAD)" \
+            MARKETING_VERSION="$VERSION" \
+            -quiet
+
+      - name: Export IPA
+        env:
+          API_KEY_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }}
+          API_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_ISSUER_ID }}
+        run: |
+          cat > "$RUNNER_TEMP/ExportOptions.plist" << 'PLIST'
+          <?xml version="1.0" encoding="UTF-8"?>
+          <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+          <plist version="1.0">
+          <dict>
+              <key>method</key>
+              <string>app-store-connect</string>
+              <key>signingStyle</key>
+              <string>automatic</string>
+              <key>uploadSymbols</key>
+              <true/>
+              <key>manageAppVersionAndBuildNumber</key>
+              <true/>
+          </dict>
+          </plist>
+          PLIST
+
+          xcodebuild -exportArchive \
+            -archivePath "$RUNNER_TEMP/Remux.xcarchive" \
+            -exportOptionsPlist "$RUNNER_TEMP/ExportOptions.plist" \
+            -exportPath "$RUNNER_TEMP/export" \
+            -allowProvisioningUpdates \
+            -authenticationKeyPath ~/.private_keys/AuthKey_${API_KEY_ID}.p8 \
+            -authenticationKeyID "$API_KEY_ID" \
+            -authenticationKeyIssuerID "$API_ISSUER_ID" \
+            -quiet
+
+      - name: Upload to TestFlight
+        env:
+          API_KEY_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }}
+          API_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_ISSUER_ID }}
+        run: |
+          IPA=$(find "$RUNNER_TEMP/export" -name "*.ipa" | head -1)
+          xcrun altool --upload-app --type ios \
+            --file "$IPA" \
+            --apiKey "$API_KEY_ID" \
+            --apiIssuer "$API_ISSUER_ID"
+
+      - name: Set export compliance
+        run: |
+          pip3 install PyJWT cryptography
+          python3 << 'PYEOF'
+          import jwt, time, json, urllib.request, os
+
+          with open(os.path.expanduser(f"~/.private_keys/AuthKey_{os.environ['API_KEY_ID']}.p8")) as f:
+              key = f.read()
+          token = jwt.encode(
+              {"iss": os.environ["API_ISSUER_ID"], "iat": int(time.time()),
+               "exp": int(time.time()) + 1200, "aud": "appstoreconnect-v1"},
+              key, algorithm="ES256",
+              headers={"kid": os.environ["API_KEY_ID"], "typ": "JWT"})
+
+          # Find latest build
+          req = urllib.request.Request(
+              f"https://api.appstoreconnect.apple.com/v1/builds?filter[app]=6761521429&sort=-uploadedDate&limit=1",
+              headers={"Authorization": f"Bearer {token}"})
+          data = json.loads(urllib.request.urlopen(req).read())
+          build_id = data["data"][0]["id"]
+
+          # Set usesNonExemptEncryption = false
+          body = json.dumps({"data": {"type": "builds", "id": build_id,
+                            "attributes": {"usesNonExemptEncryption": False}}}).encode()
+          req = urllib.request.Request(
+              f"https://api.appstoreconnect.apple.com/v1/builds/{build_id}",
+              data=body, method="PATCH",
+              headers={"Authorization": f"Bearer {token}", "Content-Type": "application/json"})
+          urllib.request.urlopen(req)
+          print(f"✓ Export compliance set for build {build_id}")
+          PYEOF
+        env:
+          API_KEY_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }}
+          API_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_ISSUER_ID }}
+
+      - name: Clean up keychain
+        if: always()
+        run: security delete-keychain "$RUNNER_TEMP/signing.keychain-db" 2>/dev/null || true
+
+  # ── macOS app (.dmg) → signed + notarized + GitHub Release ──
+  # Runs on self-hosted runner (Mac Mini) which has Developer ID cert installed
+  macos:
+    runs-on: [self-hosted, remux-deploy]
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
         with:
-          version: 0.15.2
+          submodules: recursive
 
-      - name: Build GhosttyKit xcframework
+      - name: Verify signing identity
         run: |
-          cd vendor/ghostty
-          zig build -Demit-xcframework=true -Dxcframework-target=native -Doptimize=ReleaseFast
+          security find-identity -v -p codesigning | grep "Developer ID Application"
 
-      - name: Build macOS app (release)
+      - name: Build GhosttyKit xcframework (if needed)
         run: |
-          cd apps/macos
-          swift build -c release
+          XCFW="vendor/ghostty/macos/GhosttyKit.xcframework"
+          if [ ! -d "$XCFW" ] || [ ! -f "$XCFW/Info.plist" ]; then
+            cd vendor/ghostty
+            zig build -Demit-xcframework=true -Dxcframework-target=native -Doptimize=ReleaseFast
+          fi
 
-      - name: Create .app bundle and DMG
+      - name: Build, sign, and notarize DMG
+        env:
+          API_KEY_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }}
+          API_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_ISSUER_ID }}
+          TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
         run: |
           TAG="${GITHUB_REF#refs/tags/}"
           VERSION="${TAG#v}"
+
+          # Build .app and DMG
           bash scripts/build-dmg.sh "$VERSION"
 
+          # Sign with Developer ID + hardened runtime + timestamp
+          codesign --force --deep --options runtime --timestamp \
+            --sign "Developer ID Application: Yaoshen Wang ($TEAM_ID)" \
+            "build/Remux.app"
+
+          # Rebuild DMG with signed app
+          DMG="build/Remux-${VERSION}-arm64.dmg"
+          rm -f "$DMG"
+          hdiutil create -volname "Remux" \
+            -srcfolder build/Remux.app \
+            -ov -format UDZO "$DMG"
+          codesign --force --timestamp \
+            --sign "Developer ID Application: Yaoshen Wang ($TEAM_ID)" "$DMG"
+
+          # Notarize
+          xcrun notarytool submit "$DMG" \
+            --key ~/.private_keys/AuthKey_${API_KEY_ID}.p8 \
+            --key-id "$API_KEY_ID" \
+            --issuer "$API_ISSUER_ID" \
+            --wait
+
+          xcrun stapler staple "$DMG"
+
       - name: Upload DMG to GitHub Release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -93,13 +270,10 @@ jobs:
           TAG="${GITHUB_REF#refs/tags/}"
           VERSION="${TAG#v}"
           DMG="build/Remux-${VERSION}-arm64.dmg"
+
           if [ -f "$DMG" ]; then
             gh release upload "$TAG" "$DMG" --clobber
             echo "✓ Uploaded $DMG to release $TAG"
-          else
-            echo "⚠ DMG not found, uploading .app as zip"
-            cd build && zip -r "Remux-${VERSION}-arm64.zip" Remux.app
-            gh release upload "$TAG" "Remux-${VERSION}-arm64.zip" --clobber
           fi
 
   # ── Update Homebrew tap ─────────────────────────────

package/apps/ios/Remux.xcodeproj/project.pbxproj

@@ -21,6 +21,7 @@
 		ECAFCC766BD77CCD21821612 /* ManualConnectView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6E3AE7922D1E43AE099D1D40 /* ManualConnectView.swift */; };
 		EE0A712F52F48C1AB61D7AEC /* RemuxKit in Frameworks */ = {isa = PBXBuildFile; productRef = EF63343AE24B477D7365EE17 /* RemuxKit */; };
 		F136D905F6E9BA7F2C1816F2 /* InspectView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 1ED7C2F66BB76FB8DE51725E /* InspectView.swift */; };
+		AA1234560000000000000001 /* Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = AA1234560000000000000002 /* Assets.xcassets */; };
 /* End PBXBuildFile section */
 
 /* Begin PBXFileReference section */
@@ -40,6 +41,7 @@
 		D548B0C91D3AABA26641D898 /* ControlView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ControlView.swift; sourceTree = "<group>"; };
 		DBE379B0C119DDC9C8B324E5 /* NowView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = NowView.swift; sourceTree = "<group>"; };
 		DEEEA01EB80CE2C1601F6228 /* InspectCache.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = InspectCache.swift; sourceTree = "<group>"; };
+		AA1234560000000000000002 /* Assets.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; path = Assets.xcassets; sourceTree = "<group>"; };
 /* End PBXFileReference section */
 
 /* Begin PBXFrameworksBuildPhase section */
@@ -67,6 +69,7 @@
 		0E70947CCFEAEFEDCCF14E35 /* Remux */ = {
 			isa = PBXGroup;
 			children = (
+				AA1234560000000000000002 /* Assets.xcassets */,
 				48C3DD287E421F1077A8923A /* MainTabView.swift */,
 				6C491FD55D84AC2BED5C5EBD /* Remux.entitlements */,
 				662FEE0E78ADAADEA731106C /* RemuxiOSApp.swift */,
@@ -174,6 +177,7 @@
 			buildPhases = (
 				204B591A381758166DA82963 /* Sources */,
 				03BDC461530EDD09CDB7FF29 /* Frameworks */,
+				AA1234560000000000000003 /* Resources */,
 			);
 			buildRules = (
 			);
@@ -224,6 +228,17 @@
 		};
 /* End PBXProject section */
 
+/* Begin PBXResourcesBuildPhase section */
+		AA1234560000000000000003 /* Resources */ = {
+			isa = PBXResourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				AA1234560000000000000001 /* Assets.xcassets in Resources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXResourcesBuildPhase section */
+
 /* Begin PBXSourcesBuildPhase section */
 		204B591A381758166DA82963 /* Sources */ = {
 			isa = PBXSourcesBuildPhase;
@@ -378,6 +393,7 @@
 				CODE_SIGN_ENTITLEMENTS = Sources/Remux/Remux.entitlements;
 				CODE_SIGN_IDENTITY = "iPhone Developer";
 				GENERATE_INFOPLIST_FILE = YES;
+				INFOPLIST_KEY_ITSAppUsesNonExemptEncryption = NO;
 				INFOPLIST_KEY_NSCameraUsageDescription = "Remux uses the camera to scan QR codes for server pairing.";
 				INFOPLIST_KEY_NSFaceIDUsageDescription = "Remux uses Face ID to protect your terminal sessions.";
 				INFOPLIST_KEY_UILaunchScreen_Generation = YES;
@@ -387,6 +403,8 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
+				CURRENT_PROJECT_VERSION = 1;
+				MARKETING_VERSION = 0.3.8;
 				PRODUCT_BUNDLE_IDENTIFIER = com.remux.ios;
 				SDKROOT = iphoneos;
 				TARGETED_DEVICE_FAMILY = "1,2";
@@ -400,6 +418,7 @@
 				CODE_SIGN_ENTITLEMENTS = Sources/Remux/Remux.entitlements;
 				CODE_SIGN_IDENTITY = "iPhone Developer";
 				GENERATE_INFOPLIST_FILE = YES;
+				INFOPLIST_KEY_ITSAppUsesNonExemptEncryption = NO;
 				INFOPLIST_KEY_NSCameraUsageDescription = "Remux uses the camera to scan QR codes for server pairing.";
 				INFOPLIST_KEY_NSFaceIDUsageDescription = "Remux uses Face ID to protect your terminal sessions.";
 				INFOPLIST_KEY_UILaunchScreen_Generation = YES;
@@ -409,6 +428,8 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
+				CURRENT_PROJECT_VERSION = 1;
+				MARKETING_VERSION = 0.3.8;
 				PRODUCT_BUNDLE_IDENTIFIER = com.remux.ios;
 				SDKROOT = iphoneos;
 				TARGETED_DEVICE_FAMILY = "1,2";

package/apps/ios/Sources/Remux/Assets.xcassets/AppIcon.appiconset/Contents.json

@@ -0,0 +1,23 @@
+{
+  "images" : [
+    { "filename" : "icon_40x40.png",   "idiom" : "iphone",   "scale" : "2x", "size" : "20x20" },
+    { "filename" : "icon_60x60.png",   "idiom" : "iphone",   "scale" : "3x", "size" : "20x20" },
+    { "filename" : "icon_58x58.png",   "idiom" : "iphone",   "scale" : "2x", "size" : "29x29" },
+    { "filename" : "icon_87x87.png",   "idiom" : "iphone",   "scale" : "3x", "size" : "29x29" },
+    { "filename" : "icon_80x80.png",   "idiom" : "iphone",   "scale" : "2x", "size" : "40x40" },
+    { "filename" : "icon_120x120.png", "idiom" : "iphone",   "scale" : "3x", "size" : "40x40" },
+    { "filename" : "icon_120x120.png", "idiom" : "iphone",   "scale" : "2x", "size" : "60x60" },
+    { "filename" : "icon_180x180.png", "idiom" : "iphone",   "scale" : "3x", "size" : "60x60" },
+    { "filename" : "icon_20x20.png",   "idiom" : "ipad",     "scale" : "1x", "size" : "20x20" },
+    { "filename" : "icon_40x40.png",   "idiom" : "ipad",     "scale" : "2x", "size" : "20x20" },
+    { "filename" : "icon_29x29.png",   "idiom" : "ipad",     "scale" : "1x", "size" : "29x29" },
+    { "filename" : "icon_58x58.png",   "idiom" : "ipad",     "scale" : "2x", "size" : "29x29" },
+    { "filename" : "icon_40x40.png",   "idiom" : "ipad",     "scale" : "1x", "size" : "40x40" },
+    { "filename" : "icon_80x80.png",   "idiom" : "ipad",     "scale" : "2x", "size" : "40x40" },
+    { "filename" : "icon_76x76.png",   "idiom" : "ipad",     "scale" : "1x", "size" : "76x76" },
+    { "filename" : "icon_152x152.png", "idiom" : "ipad",     "scale" : "2x", "size" : "76x76" },
+    { "filename" : "icon_167x167.png", "idiom" : "ipad",     "scale" : "2x", "size" : "83.5x83.5" },
+    { "filename" : "icon_1024x1024.png", "idiom" : "ios-marketing", "scale" : "1x", "size" : "1024x1024" }
+  ],
+  "info" : { "author" : "xcode", "version" : 1 }
+}

package/apps/ios/Sources/Remux/Assets.xcassets/Contents.json

@@ -0,0 +1,6 @@
+{
+  "info" : {
+    "author" : "xcode",
+    "version" : 1
+  }
+}

package/apps/ios/Sources/Remux/RootView.swift

@@ -96,9 +96,9 @@ struct RootView: View {
     private func tryAutoConnect() {
         let servers = keychain.savedServers()
         if let server = servers.first,
-           let token = keychain.loadResumeToken(forServer: server) ?? keychain.loadServerToken(forServer: server),
+           let credential = keychain.preferredCredential(forServer: server),
            let url = URL(string: server) {
-            state.connect(url: url, credential: .token(token))
+            state.connect(url: url, credential: credential)
         }
     }
 }

package/apps/ios/Sources/Remux/Views/Settings/MeView.swift

@@ -65,13 +65,13 @@ struct MeView: View {
                                 VStack(alignment: .leading) {
                                     Text(device.name ?? device.id.prefix(8).description)
                                         .font(.subheadline)
-                                    Text(device.trustLevel)
+                                    Text(device.trust)
                                         .font(.caption)
-                                        .foregroundStyle(device.trustLevel == "trusted" ? .green : .orange)
+                                        .foregroundStyle(device.trust == "trusted" ? .green : .orange)
                                 }
                                 Spacer()
                                 if let lastSeen = device.lastSeen {
-                                    Text(lastSeen.prefix(10).description)
+                                    Text(Self.lastSeenFormatter.string(from: Date(timeIntervalSince1970: TimeInterval(lastSeen) / 1000)))
                                         .font(.caption2)
                                         .foregroundStyle(.tertiary)
                                 }
@@ -90,7 +90,7 @@ struct MeView: View {
                     HStack {
                         Text("Version")
                         Spacer()
-                        Text(Bundle.main.infoDictionary?["CFBundleShortVersionString"] as? String ?? "0.3.5")
+                        Text(Bundle.main.infoDictionary?["CFBundleShortVersionString"] as? String ?? "0.3.9")
                             .foregroundStyle(.secondary)
                     }
                 }
@@ -112,6 +112,13 @@ struct MeView: View {
         default: "questionmark.circle"
         }
     }
+
+    private static let lastSeenFormatter: DateFormatter = {
+        let formatter = DateFormatter()
+        formatter.dateStyle = .short
+        formatter.timeStyle = .short
+        return formatter
+    }()
 }
 
 extension ConnectionStatus {

package/apps/macos/Package.swift

@@ -29,6 +29,11 @@ let package = Package(
                 .linkedLibrary("z"),
             ]
         ),
+        .testTarget(
+            name: "RemuxTests",
+            dependencies: ["Remux"],
+            path: "Tests/RemuxTests"
+        ),
         .binaryTarget(
             name: "GhosttyKit",
             path: "../../vendor/ghostty/macos/GhosttyKit.xcframework"

package/apps/macos/Sources/Remux/AppCommand.swift

@@ -0,0 +1,114 @@
+import Foundation
+
+enum WindowCommandAction: String, Sendable {
+    case splitRight
+    case splitDown
+    case closePane
+    case focusNextPane
+    case focusPreviousPane
+    case newBrowserPane
+    case newMarkdownPane
+    case commandPalette
+    case copyMode
+    case findInTerminal
+}
+
+struct WindowCommand: Equatable, Sendable {
+    private static let actionKey = "action"
+    private static let targetWindowNumberKey = "targetWindowNumber"
+
+    let action: WindowCommandAction
+    let targetWindowNumber: Int
+
+    init(action: WindowCommandAction, targetWindowNumber: Int) {
+        self.action = action
+        self.targetWindowNumber = targetWindowNumber
+    }
+
+    init?(notification: Notification) {
+        guard notification.name == .remuxWindowCommand,
+              let rawAction = notification.userInfo?[Self.actionKey] as? String,
+              let action = WindowCommandAction(rawValue: rawAction),
+              let targetWindowNumber = notification.userInfo?[Self.targetWindowNumberKey] as? Int else {
+            return nil
+        }
+        self.init(action: action, targetWindowNumber: targetWindowNumber)
+    }
+
+    func matches(windowNumber: Int?) -> Bool {
+        guard let windowNumber else { return false }
+        return targetWindowNumber == windowNumber
+    }
+
+    func post() {
+        NotificationCenter.default.post(
+            name: .remuxWindowCommand,
+            object: nil,
+            userInfo: [
+                Self.actionKey: action.rawValue,
+                Self.targetWindowNumberKey: targetWindowNumber,
+            ]
+        )
+    }
+}
+
+enum TerminalCommandAction: String, Sendable {
+    case showSearch
+}
+
+struct TerminalCommand: Equatable, Sendable {
+    private static let actionKey = "action"
+    private static let targetWindowNumberKey = "targetWindowNumber"
+    private static let leafIDKey = "leafID"
+
+    let action: TerminalCommandAction
+    let targetWindowNumber: Int
+    let leafID: UUID?
+
+    init(action: TerminalCommandAction, targetWindowNumber: Int, leafID: UUID?) {
+        self.action = action
+        self.targetWindowNumber = targetWindowNumber
+        self.leafID = leafID
+    }
+
+    init?(notification: Notification) {
+        guard notification.name == .remuxTerminalCommand,
+              let rawAction = notification.userInfo?[Self.actionKey] as? String,
+              let action = TerminalCommandAction(rawValue: rawAction),
+              let targetWindowNumber = notification.userInfo?[Self.targetWindowNumberKey] as? Int else {
+            return nil
+        }
+        self.init(
+            action: action,
+            targetWindowNumber: targetWindowNumber,
+            leafID: notification.userInfo?[Self.leafIDKey] as? UUID
+        )
+    }
+
+    func matches(windowNumber: Int?, leafID: UUID?) -> Bool {
+        guard let windowNumber, targetWindowNumber == windowNumber else {
+            return false
+        }
+        return self.leafID == leafID
+    }
+
+    func post() {
+        var userInfo: [String: Any] = [
+            Self.actionKey: action.rawValue,
+            Self.targetWindowNumberKey: targetWindowNumber,
+        ]
+        if let leafID {
+            userInfo[Self.leafIDKey] = leafID
+        }
+        NotificationCenter.default.post(
+            name: .remuxTerminalCommand,
+            object: nil,
+            userInfo: userInfo
+        )
+    }
+}
+
+extension Notification.Name {
+    static let remuxWindowCommand = Notification.Name("remuxWindowCommand")
+    static let remuxTerminalCommand = Notification.Name("remuxTerminalCommand")
+}

package/apps/macos/Sources/Remux/AppDelegate.swift

@@ -38,6 +38,13 @@ final class AppDelegate: NSObject, NSApplicationDelegate {
         finderIntegration = FinderIntegration(state: state)
         finderIntegration?.registerServices()
 
+        NotificationCenter.default.addObserver(
+            self,
+            selector: #selector(handleTerminalDataNotification(_:)),
+            name: .remuxTerminalData,
+            object: nil
+        )
+
         // Start autosave
         SessionPersistence.shared.startAutosave { [weak self] in
             guard let self else {
@@ -60,6 +67,8 @@ final class AppDelegate: NSObject, NSApplicationDelegate {
     }
 
     func applicationWillTerminate(_ notification: Notification) {
+        NotificationCenter.default.removeObserver(self)
+
         // Stop socket controller
         socketController?.stop()
 
@@ -254,4 +263,21 @@ final class AppDelegate: NSObject, NSApplicationDelegate {
         }
         detachedWindows.removeAll()
     }
+
+    @objc private func handleTerminalDataNotification(_ notification: Notification) {
+        guard let data = notification.userInfo?["data"] as? Data else { return }
+
+        let oscNotifications = OSCNotificationParser.parse(data)
+        guard !oscNotifications.isEmpty else { return }
+
+        let sessionName = state.currentSession.isEmpty ? "Remux" : state.currentSession
+        for oscNotification in oscNotifications {
+            notificationManager?.handleNotification(.init(
+                title: oscNotification.title,
+                body: oscNotification.body,
+                tabIndex: state.activeTabIndex,
+                sessionName: sessionName
+            ))
+        }
+    }
 }