projmux 0.10.0 → 0.10.1

package/README-ko.md

@@ -4,38 +4,43 @@
   <img src="docs/assets/projmux-icon.png" alt="projmux icon" width="112">
 </p>
 
-프로젝트별 tmux workspace를 빠르게 전환하고, Claude Code, Codex,
-Antigravity pane의 preview/status context/attention까지 함께 다루는 터미널
-workspace 도구입니다.
-
-[![npm version](https://img.shields.io/npm/v/projmux?logo=npm)](https://www.npmjs.com/package/projmux)
-[![CI](https://github.com/crevissepartners/projmux/actions/workflows/ci.yml/badge.svg)](https://github.com/crevissepartners/projmux/actions/workflows/ci.yml)
+<p align="center">
+  <strong>여러 AI 에이전트를 함께 쓰는 tmux 기반 개발 작업 공간.</strong>
+  <br>
+  <em>Claude Code, Codex, Antigravity pane을 한곳에서 운영하고, 에이전트가 권한을 요청하거나 작업을 마치면 바로 알려 줍니다.</em>
+</p>
 
-[English README](README.md)
+<p align="center">
+  <a href="https://www.npmjs.com/package/projmux"><img src="https://img.shields.io/npm/v/projmux?logo=npm" alt="npm version"></a>
+  <a href="https://github.com/crevissepartners/projmux/actions/workflows/ci.yml"><img src="https://github.com/crevissepartners/projmux/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/github/license/crevissepartners/projmux" alt="MIT license"></a>
+  <a href="README.md"><img src="https://img.shields.io/badge/lang-English-blue" alt="English README"></a>
+</p>
 
 <p align="center">
-  <img src="docs/assets/projmux-ai-attention.gif" alt="projmux AI attention demo" width="820">
+  <img src="docs/assets/projmux-ai-attention.gif" alt="projmux의 AI 세션 재개, 권한 요청, 그룹형 알림 흐름" width="820">
   <br>
-  <em>기존 AI session을 이어서 열고 다른 project에서 작업하다가, permission이 필요하면 notification list에서 managed pane으로 돌아갑니다.</em>
+  <em>기존 AI 세션을 이어서 열고 다른 프로젝트에서 작업하다가, 에이전트가 승인을 요청하면 그룹형 알림에서 확인하고 해당 작업 pane으로 돌아갑니다.</em>
 </p>
 
-## 무엇인가
+## projmux란?
 
-`projmux`는 프로젝트 디렉터리를 오래 유지되는 tmux session으로 연결합니다.
-프로젝트 전환, session preview, AI split 실행, tmux 안의 상태 표시를 한
-키보드 중심 workspace 앱으로 묶습니다.
-Claude Code와 Codex hook event를 직접 수집하고, 수동으로 연결한 Antigravity
-hook/statusline event도 같은 notification 흐름으로 다룹니다.
+`projmux`는 프로젝트 디렉터리마다 오래 유지되는 tmux 세션을 연결합니다.
+프로젝트 전환, 세션 미리보기, AI 분할 창 실행, 상태 표시를 키보드 중심의
+작업 공간 하나로 묶습니다.
+Claude Code, Codex, Antigravity의 훅 연동을 관리하고, 각 에이전트의 권한
+요청과 작업 완료 알림을 한곳에 모읍니다.
 
-터미널 workspace를 한 명령으로 열고, 한 세트의 키로 project/window/pane,
-notification, settings 사이를 오가고 싶을 때 사용합니다.
+터미널 작업 공간을 명령 하나로 열고, 같은 키 조합으로 프로젝트와 tmux
+창, pane, 알림, 설정 사이를 빠르게 오가고 싶을 때 사용합니다.
 
 ## 요구 사항
 
 - [Node.js](https://nodejs.org/)와 npm: 기본 설치 경로에 필요합니다.
 - [tmux](https://github.com/tmux/tmux/wiki/Installing) **3.4 이상**.
 
-설치 후 `projmux doctor`의 read-only 진단으로 로컬 runtime을 확인하세요.
+설치한 뒤에는 읽기 전용 점검 명령인 `projmux doctor`로 로컬 실행 환경을
+확인하세요.
 
 ## 설치
 
@@ -44,95 +49,107 @@ npm install -g projmux
 projmux version
 ```
 
-npm package는 작은 Node.js shim과 Linux/macOS x64/arm64용 projmux binary를
-설치합니다. 일반 사용자의 기본 배포 경로는 npm입니다.
+npm 패키지는 작은 Node.js 실행 연결부와 Linux/macOS x64·arm64용 projmux
+실행 파일을 함께 설치합니다. 일반 사용자에게는 npm 설치를 권장합니다.
 
-수동 Go 설치, source checkout, GitHub Release, packaging 세부 사항은
-[Install](docs/install.md)을 참고하세요.
+Go 또는 소스 코드로 직접 설치하는 방법, GitHub Release와 패키징에 관한
+내용은 [설치 안내](docs/install.md)를 참고하세요.
 
 ## 빠른 시작
 
-격리된 projmux tmux 앱을 엽니다:
+독립된 projmux용 tmux 환경을 엽니다.
 
 ```sh
 projmux shell
 ```
 
-앱 안에서:
+projmux 안에서는 다음 키를 사용합니다.
+
+- `Alt-1`: 프로젝트 사이드바를 엽니다.
+- `Alt-2`: 알림 목록을 엽니다.
+- `Alt-3`: 최근 창 목록(`Recent Windows`)을 엽니다.
+- `Alt-4`: 이어서 열 AI 세션을 선택합니다.
+- `Alt-5`: 설정을 엽니다.
+- `Alt-7`: 새 AI 분할 창을 선택합니다.
 
-- `Alt-1`: project sidebar.
-- `Alt-2`: notification list.
-- `Alt-3`: Recent Windows.
-- `Alt-4`: AI resume session picker.
-- `Alt-5`: settings.
-- `Alt-7`: AI split picker.
+`Alt-1`부터 `Alt-5`까지는 별도 설정 없이 쓸 수 있는 기본 키입니다. `Alt-7`도
+기본으로 제공되며 설정에서 바꿀 수 있습니다. 전체 키 구성은
+[터미널 키 설정](docs/keybindings.md)을 참고하세요.
 
-`Alt-1`부터 `Alt-5`까지는 zero-config 보장 기본값이고, `Alt-7`은 추가로
-편집 가능한 built-in 기본값입니다. 전체 key map은
-[Terminal Keybindings](docs/keybindings.md)를 참고하세요. 키가 동작하지 않으면
-Darwin 배포본의 `projmux shell`에서는 macOS 접근성 권한을 한 번 승인하면
-물리 키 어댑터가 자동으로 동작합니다. 그 밖의 경로에서는 tmux 밖에서
-`projmux setup`을 실행한 뒤, 지원 터미널에서는
-`projmux setup terminal [terminal] --apply`를 사용하세요.
+키가 동작하지 않는다면 macOS 배포본의 `projmux shell`에서는 접근성 권한을
+한 번 승인하세요. 이후 물리 키 어댑터가 자동으로 동작합니다. 그 밖의
+환경에서는 tmux 밖에서 `projmux setup`을 실행한 다음, 지원되는 터미널에
+`projmux setup terminal [terminal] --apply`를 적용하세요.
 
 ## 일상 사용
 
-- project directory를 고르면 projmux가 tmux session을 만들거나 재사용합니다.
-- 중요한 project는 pin으로 고정합니다.
-- 전환 전에 window, pane, git branch, Kubernetes context, AI pane state를
-  preview합니다.
-- 기존 Claude/Codex conversation을 resume하거나 새 managed AI split을 엽니다.
-- permission/completion event를 하나의 notification queue에서 확인하고 바로
-  attention이 필요한 pane으로 이동합니다.
-- env var를 직접 편집하지 않고 Settings > Project Picker에서 root와 workdir을
-  추가할 수 있습니다.
-- Settings > About > Update 또는 `projmux update apply`로 업그레이드합니다.
+- 프로젝트 디렉터리를 고르면 projmux가 해당 tmux 세션을 만들거나 기존
+  세션을 다시 사용합니다.
+- 자주 쓰는 프로젝트는 `pin`으로 고정해 목록 위쪽에서 쉽게 찾을 수
+  있습니다.
+- 전환하기 전에 창(window)과 pane, Git 브랜치, Kubernetes 컨텍스트, AI pane
+  상태를 미리 확인할 수 있습니다.
+- 기존 Claude, Codex, Antigravity 대화를 이어서 열거나 projmux가 관리하는 새
+  AI 분할 창을 만들 수 있습니다.
+- 권한 요청과 작업 완료 알림을 에이전트별로 묶어 보고, 확인이 필요한
+  pane으로 곧바로 이동할 수 있습니다.
+- 읽기 전용 `Resource Inspector`에서 프로젝트, 창, pane별 CPU와 RSS 사용량을
+  확인할 수 있습니다. 현재 Linux/tmux 환경을 지원합니다.
+- 창과 pane 배치, shell 작업 디렉터리, 지원되는 AI 세션 재개 정보를
+  `Session State` 스냅샷으로 저장하고 미리 볼 수 있습니다.
+- 환경 변수를 직접 편집하지 않고 `Settings > Project Picker`에서 검색 루트와
+  작업 디렉터리를 추가할 수 있습니다.
+- `Settings > About > Update` 또는 `projmux update apply`로 업그레이드할 수
+  있습니다.
 
 <p align="center">
-  <img src="docs/assets/projmux-shell-sidebar.gif" alt="projmux project 전환 및 managed Codex 데모" width="820">
+  <img src="docs/assets/projmux-shell-sidebar.gif" alt="projmux의 프로젝트 전환과 Codex 작업 흐름" width="820">
   <br>
-  <em>project를 전환하고 managed Codex pane을 연 뒤 completion notification을 확인합니다.</em>
+  <em>프로젝트를 전환하고 Codex pane을 연 뒤 완료 알림을 확인합니다.</em>
 </p>
 
-`PROJMUX_PROJDIR`, managed roots, notification, usage tracking 같은 자세한
-설정은 [Configuration](docs/configuration.md)을 참고하세요. installer별 update
-동작은 [Upgrading](docs/upgrading.md)에 있습니다.
+`PROJMUX_PROJDIR`, 관리 루트, 알림, 사용량 추적에 관한 자세한 내용은
+[설정](docs/configuration.md)을 참고하세요. 설치 방식에 따른 업데이트 동작은
+[업그레이드 안내](docs/upgrading.md)에 정리되어 있습니다.
 
 ## 멀티 에이전트 워크플로
 
-하나의 tmux window에 shell과 여러 managed agent를 함께 띄워 둡니다. pane을
-이동하며 독립 작업을 시작하면 projmux가 permission/completion event를 하나의
-notification queue에 모읍니다.
+하나의 tmux 창에 shell과 projmux가 관리하는 Claude, Codex, Antigravity pane을
+나란히 띄울 수 있습니다. 프로젝트와 pane 사이를 오가며 작업해도 projmux가
+에이전트별 권한 요청과 완료 알림을 그룹형 알림함에 모아 줍니다.
 
 <p align="center">
-  <img src="docs/assets/projmux-three-pane-workflow.gif" alt="projmux shell, Codex, Claude 3-pane workflow 데모" width="820">
+  <img src="docs/assets/projmux-three-pane-workflow.gif" alt="projmux의 shell, Codex, Claude 3-pane 작업 흐름" width="820">
   <br>
-  <em>동일 폭의 shell, Codex, Claude pane을 이동하며 독립 작업의 완료 알림을 하나의 notification queue에서 확인합니다.</em>
+  <em>shell, Codex, Claude pane을 오가며 서로 다른 작업을 진행하고, 완료 알림은 한곳에서 확인합니다.</em>
 </p>
 
 ## 에이전트 스킬 자동화
 
-AI 도구도 같은 projmux CLI를 호출해 managed pane을 열고 prompt를 전달할 수
-있습니다:
+AI 도구에서도 같은 projmux 명령줄 도구(CLI)를 호출해 projmux가 관리하는
+pane을 열고 작업 지시를 전달할 수 있습니다.
 
 ```sh
 projmux ai split --agent codex right -- "Review the retry logic."
 ```
 
-Claude, Codex와 다른 agent용 template 및 naming convention은
-[AI Agent Shortcuts](docs/ai-agent-shortcuts.md)에 정리되어 있습니다.
+Claude, Codex를 비롯한 여러 에이전트용 템플릿과 이름 규칙은
+[AI 에이전트 바로가기](docs/ai-agent-shortcuts.md)에 정리되어 있습니다.
 
 ## 추가 문서
 
-- [Install](docs/install.md)
-- [Configuration](docs/configuration.md)
-- [Terminal Keybindings](docs/keybindings.md)
-- [AI Agent Shortcuts](docs/ai-agent-shortcuts.md)
-- [CLI Reference](docs/cli.md)
-- [Statusbar](docs/statusbar.md)
-- [Hooks](docs/hooks.md)
-- [Usage tracking](docs/usage-tracking.md)
-- [Agent Workflow](docs/agent-workflow.md)
+- [설치 안내](docs/install.md)
+- [설정](docs/configuration.md)
+- [터미널 키 설정](docs/keybindings.md)
+- [AI 에이전트 바로가기](docs/ai-agent-shortcuts.md)
+- [CLI 명령어](docs/cli.md)
+- [상태 표시줄](docs/statusbar.md)
+- [훅](docs/hooks.md)
+- [사용량 추적](docs/usage-tracking.md)
+- [Resource Inspector](docs/resource-attribution.md)
+- [Session State](docs/session-restore.md)
+- [운영 진단](docs/operational-diagnostics.md)
+- [에이전트 작업 흐름](docs/agent-workflow.md)
 
 ## 개발
 
@@ -143,8 +160,8 @@ make fix
 make test
 ```
 
-기여자용 세부 사항은 [Testing](docs/testing.md), [Architecture](docs/architecture.md),
-[Repo Layout](docs/repo-layout.md)을 참고하세요.
+기여자를 위한 자세한 내용은 [테스트](docs/testing.md),
+[구조](docs/architecture.md), [저장소 구성](docs/repo-layout.md)을 참고하세요.
 
 ## 라이선스
 

package/README.md

@@ -23,9 +23,9 @@ projmux shell
 ```
 
 <p align="center">
-  <img src="docs/assets/projmux-ai-attention.gif" alt="projmux AI attention demo" width="820">
+  <img src="docs/assets/projmux-ai-attention.gif" alt="projmux AI session resume, agent permission, and grouped notification workflow" width="820">
   <br>
-  <em>Resume an existing AI session, keep working in another project, then jump back when the managed pane needs permission.</em>
+  <em>Resume an existing AI session, keep working in another project, then return through grouped notifications when the agent needs approval.</em>
 </p>
 
 ## Why
@@ -34,8 +34,8 @@ Six tmux windows. Each one is running Claude Code, Codex, or Antigravity on a
 different repo. Three are idle. One is waiting on a permission prompt. One
 crashed an hour ago and you have no idea which.
 
-projmux ingests Claude Code and Codex hook events directly, accepts manually
-wired Antigravity hook/statusline events, shows live per-pane state in the tmux
+projmux manages Claude Code, Codex, and Antigravity hook integrations, including
+Antigravity's hook/statusline wiring, shows live per-pane state in the tmux
 status bar, and lets one keystroke take you to the pane that actually needs
 you. It also remembers each agent's resume id, so after a reboot every pane
 comes back as the *same* conversation — not a fresh one.
@@ -91,16 +91,20 @@ fallbacks.
 - Pin important projects so they stay easy to reach.
 - Preview windows, panes, git branch, Kubernetes context, and AI pane state
   before switching.
-- Resume an existing Claude or Codex conversation, or open a new managed AI
-  split.
-- Review permission and completion events in one notification queue, then jump
-  directly to the pane that needs attention.
+- Resume an existing Claude, Codex, or Antigravity conversation, or open a new
+  managed AI split.
+- Review grouped permission and completion events, then jump directly to the
+  pane that needs attention.
+- Inspect live project, window, and pane CPU/RSS with the read-only Resource
+  Inspector on Linux/tmux.
+- Save and inspect Session State snapshots for window/pane layouts, shell cwd,
+  and supported AI resumes.
 - Use Settings > Project Picker to add roots and workdirs without editing env
   vars.
 - Use Settings > About > Update or `projmux update apply` to upgrade.
 
 <p align="center">
-  <img src="docs/assets/projmux-shell-sidebar.gif" alt="projmux project switch and managed Codex demo" width="820">
+  <img src="docs/assets/projmux-shell-sidebar.gif" alt="projmux project switch and managed Codex workflow" width="820">
   <br>
   <em>Switch projects, launch a managed Codex pane, and review its completion notification.</em>
 </p>
@@ -111,14 +115,14 @@ For update behavior by installer type, see [Upgrading](docs/upgrading.md).
 
 ## Multi-Agent Workflow
 
-Keep a shell and multiple managed agents visible in the same tmux window.
-Move between panes to start independent tasks while projmux collects their
-permission and completion events in one notification queue.
+Keep a shell and managed Claude, Codex, or Antigravity panes visible in the
+same tmux window. Move between projects and panes while projmux collects agent
+permission and completion events in one grouped inbox.
 
 <p align="center">
-  <img src="docs/assets/projmux-three-pane-workflow.gif" alt="projmux shell, Codex, and Claude 3-pane workflow demo" width="820">
+  <img src="docs/assets/projmux-three-pane-workflow.gif" alt="projmux shell, Codex, and Claude three-pane workflow" width="820">
   <br>
-  <em>Move across equal-width shell, Codex, and Claude panes while independent tasks report back through one notification queue.</em>
+  <em>Move across shell, Codex, and Claude panes while independent tasks report back through one notification queue.</em>
 </p>
 
 ## Automation With Agent Skills
@@ -143,6 +147,9 @@ Templates and naming conventions for Claude, Codex, and other agents are in
 - [Statusbar](docs/statusbar.md)
 - [Hooks](docs/hooks.md)
 - [Usage tracking](docs/usage-tracking.md)
+- [Resource Inspector](docs/resource-attribution.md)
+- [Session State](docs/session-restore.md)
+- [Operational Diagnostics](docs/operational-diagnostics.md)
 - [Agent Workflow](docs/agent-workflow.md)
 
 ## Development

package/docs/agent-workflow.md

@@ -30,6 +30,8 @@
 - `make fix`: safe automatic fixes such as `go fix` and repository-approved cleanup steps.
 - `make npm-pack`: macOS-hosted local npm binary package staging and `npm pack --dry-run` for the root package plus platform packages, including native-key-adapter checks for both Darwin architectures; release staging reuses the release matrix archives.
 - `make security`: pinned govulncheck, gosec, staticcheck, gitleaks history/current-tree, actionlint, and shellcheck gates. Reviewed gosec/staticcheck findings use checked-in fingerprint/count baselines so only new findings fail.
+- `make test`: lifecycle hook context coverage verifies that the production client supplies `projmux` socket metadata, standard persistent and ephemeral `post-create` receive the exact non-empty pane id returned by session creation, `pre-create` receives no pane id before creation, and empty socket/pane values are omitted from the hook environment.
+- `make test`: atomic project and private-global config writes preserve existing regular-file metadata, resolve valid relative and multi-hop symlinks to the final target without replacing link inodes, retain `0644`/`0600` defaults for missing destinations, recover dangling symlinks as regular files, and preserve original content with no temp artifacts across resolve/stat/create/write/close/chown/chmod/rename failures. Source-level global and Settings project writer tests exercise the production entrypoints with isolated home/repository paths.
 - `make test`: fast unit coverage for app-layer AI split native agent launch/selective popup-toggle/settings/status/notification parity including AI pane option metadata, watcher metadata bootstrap for existing panes, capture-backed reply detection, missing-pane watcher shutdown, armed focus-only reply badge clearing, busy attention preservation on focus clear, manual AI topic preservation while watcher status still updates, agent-labeled desktop notification message context with pane-title-first body text, global/project-local lifecycle hook dispatch for post-create/pre-create/post-attach/send-noti with project hook and `.projmux/config.toml` trust-store hashing plus env/settings kill-switch gating, declarative startup command and hook run coverage, `send-noti` stdin JSON delivery plus `PROJMUX_NOTIFY_*` env payload, notify queue write success/failure/depth-guard dispatch rules, notify/statusbar/sidebar origin-client focus routing, project config env/kube session environment application, Settings project config env/kube/startup form writes with trust-store refresh and preserved hook commands, startup command send-keys orchestration plus startup pane replay markers, pre-create abort behavior, and shared projmux notification icon paths, and scoped even row/column resizing after shell and agent splits, status-bar git/kube segment parity including muted git branch block styling, compact dirty/staged/ahead/behind state colors, and bounded git/kube child execution, statusbar pwd display-only native-framed path popup with shared popup-wait-key/no-extra-payload-line command coverage, no clipboard or tmux buffer copy, and popup-wait-key cursor/raw-mode restore coverage, statusbar usage native HUD popup alignment/height-budget/threshold palette/muted sync-staleness/fallback coverage without raw CLI popup or popup-toggle stacking, statusbar settings click popup fallback and settings chip right-edge rendering without default trailing space, popup-toggle stale marker recovery, isolated `projmux shell` tmux app launch/config generation including home fallback plus project-context default session targeting from `PROJMUX_CWD` or nearest project marker, app-owned project-name statusbar layout, distinct project badge color, and quiet debounced session-state autosave command/app-config trigger, shell-entry welcome release prompt and inline update handling, shell update skip-by-latest-tag behavior plus best-effort stale-cache refresh, pane/window keybindings, keymap.toml tmux override rendering/stale unbinds including retired direct/UserKey cleanup, Settings Keybindings root/list/detail capture flows including parse-error rows, unsafe raw capture and timeout guards, disable/reset writes, app config regeneration, live tmux source-file reload, no-live-tmux save behavior, and stage-by-stage apply recovery copy, window rename bindings, pane rename helper/binding, pane-exit rebalance command/hooks, hook-pane and after-select-pane based attention focus hooks, attention badge toggle/clear/list/window rendering, attach/current/kill/pin/preview/prune/sessions/session-popup/settings commands, switch, tag, tmux helper commands, update status/check/apply cache and installer detection including GitHub Release binary asset selection/extraction/replacement, doctor versioned read-only report/section/verbosity contracts, AI notify integration diagnostics, and Session State resume metadata diagnostics, Settings AI notify integration diagnostics read-only status/conflict/CLI guidance, and Settings About update status/check action wiring, untitled standalone popup-toggle marker close/config install, direct popup minimum sizing, AI picker minimum width and height, sidebar minimum width and compact badge spacing, preview select writes, popup render output after cycling, switch picker pin action behavior without inline settings rows, nested settings hub sections for AI defaults, project picker filesystem scan/pin actions, Project Root settings source/shadowing/set/current/clear flows, app/keybinding info including Ctrl-M rename forwarding, and About version/source rendering, switch picker focused-session kill, switch picker launcher-key abort bindings, switch explicit project-root, unconfigured-root, and weak managed-root heuristic parity, switch popup hiding new-session candidates while sidebar keeps create-capable rows, switch row project-name display with `~` pinned to the top and live-session-first sorting, pretty-path, preview-context including kube context/namespace, switch settings subcommand flows including add-current-pin, interactive add-pin picker, and settings label/preview polish including Phase 2 Settings/hookmaker/project-startup/trust/quit destructive row color regression strings, native preview wiring, baseline picker surface parity including prompt/footer/header fallback without app-name filler and search-key scoped card matching, sidebar compact action-only key footer, sidebar preview-window/start-position behavior without focus-time session switching, sidebar row/window ANSI styling with pane-aggregated attention badge state and AI topic labels, Alt+2/Alt+3 legacy popup row, preview-window, pane metadata, and pane-snapshot parity, switch read0 card rows with active/inactive title styling, right-side status badges, combined directory/git metadata with muted inactive branch styling and bounded slow-repository branch enrichment, statusbar-matched block window tabs with window attention badges, read0 expect-key action parsing, restored pin/tag card badges, and restrained selected-row marker styling, switch preview metadata without duplicated directory/git rows, preview metadata rendering, popup pane display names for AI agents, AI topics, and shell commands, switch preview cycle bindings, sessions picker preview/cycle/open/kill wiring including attached-session fallback behavior, sessions picker launcher-key abort bindings, popup/switch preview summary formatting, popup sessions tmux entry helpers, switch/popup/session rendering, session identity, session-state Claude/Codex/Antigravity resume and declarative startup replay, session snapshot capture/autosave recipe classification including save/autosave pre-capture resume metadata refresh from live AI session ids including Antigravity conversation ids, Claude transcript paths, and Codex rollout log cwd matching/ambiguity skips, candidate discovery, config path derivation, popup preview read-models, and pure state rules including preview, tag, and lifecycle stores.
 - `make test`: fast unit coverage for app-layer AI split native agent launch/selective popup-toggle/settings/status/notification parity including AI pane option metadata, watcher metadata bootstrap for existing panes, capture-backed reply detection, missing-pane watcher shutdown, armed focus-only reply badge clearing, busy attention preservation on focus clear, manual AI topic preservation while watcher status still updates, agent-labeled desktop notification message context with pane-title-first body text, global/project-local lifecycle hook dispatch for post-create/pre-create/post-attach/send-noti with project hook and `.projmux/config.toml` trust-store hashing plus env/settings kill-switch gating, declarative startup command and hook run coverage, `send-noti` stdin JSON delivery plus `PROJMUX_NOTIFY_*` env payload, notify queue write success/failure/depth-guard dispatch rules, notify/statusbar/sidebar origin-client focus routing, project config env/kube session environment application, Settings project config env/kube/startup form writes with trust-store refresh and preserved hook commands, startup command send-keys orchestration plus startup pane replay markers, pre-create abort behavior, and shared projmux notification icon paths, and scoped even row/column resizing after shell and agent splits, status-bar git/kube segment parity including muted git branch block styling and compact dirty/staged/ahead/behind state colors, statusbar pwd display-only native-framed path popup with shared popup-wait-key/no-extra-payload-line command coverage, no clipboard or tmux buffer copy, and popup-wait-key cursor/raw-mode restore coverage, statusbar usage native HUD popup alignment/height-budget/threshold palette/muted sync-staleness/fallback coverage without raw CLI popup or popup-toggle stacking, statusbar settings click popup fallback and settings chip right-edge rendering without default trailing space, popup-toggle stale marker recovery, isolated `projmux shell` tmux app launch/config generation including home fallback plus project-context default session targeting from `PROJMUX_CWD` or nearest project marker, app-owned project-name statusbar layout, distinct project badge color, and quiet debounced session-state autosave command/app-config trigger, shell-entry welcome release prompt and inline update handling, shell update skip-by-latest-tag behavior plus best-effort stale-cache refresh, pane/window keybindings, keymap.toml tmux override rendering/stale unbinds including retired direct/UserKey cleanup, Settings Keybindings root/list/detail capture flows including parse-error rows, unsafe raw capture and timeout guards, disable/reset writes, app config regeneration, live tmux source-file reload, no-live-tmux save behavior, and stage-by-stage apply recovery copy, window rename bindings, pane rename helper/binding, pane-exit rebalance command/hooks, hook-pane and after-select-pane based attention focus hooks, attention badge toggle/clear/list/window rendering, attach/current/kill/pin/preview/prune/sessions/session-popup/settings commands, switch, tag, tmux helper commands, update status/check/apply cache and installer detection including GitHub Release binary asset selection/extraction/replacement, doctor versioned read-only report/section/verbosity contracts, AI notify integration diagnostics, and Session State resume metadata diagnostics, Settings AI notify integration diagnostics read-only status/conflict/CLI guidance, and Settings About update status/check action wiring, untitled standalone popup-toggle marker close/config install, direct popup minimum sizing, AI picker minimum width and height, sidebar minimum width and compact badge spacing, preview select writes, popup render output after cycling, switch picker pin action behavior without inline settings rows, nested settings hub sections for AI defaults, project picker filesystem scan/pin actions, Project Root settings source/shadowing/set/current/clear flows, app/keybinding info including Ctrl-M rename forwarding, and About version/source rendering, switch picker focused-session kill, switch picker launcher-key abort bindings, switch explicit project-root, unconfigured-root, and weak managed-root heuristic parity, switch popup hiding new-session candidates while sidebar keeps create-capable rows, switch row project-name display with `~` pinned to the top and live-session-first sorting, pretty-path, preview-context including kube context/namespace, switch settings subcommand flows including add-current-pin, interactive add-pin picker, and settings label/preview polish including Phase 2 Settings/hookmaker/project-startup/trust/quit destructive row color regression strings, native preview wiring, baseline picker surface parity including prompt/footer/header fallback without app-name filler and search-key scoped card matching, sidebar compact action-only key footer, sidebar preview-window/start-position behavior without focus-time session switching, sidebar row/window ANSI styling with pane-aggregated attention badge state and AI topic labels, Alt+2/Alt+3 legacy popup row, preview-window, pane metadata, and pane-snapshot parity, switch read0 card rows with active/inactive title styling, right-side status badges, combined directory/git metadata with muted inactive branch styling, statusbar-matched block window tabs with window attention badges, read0 expect-key action parsing, restored pin/tag card badges, and restrained selected-row marker styling, switch preview metadata without duplicated directory/git rows, preview metadata rendering, popup pane display names for AI agents, AI topics, and shell commands, switch preview cycle bindings, sessions picker preview/cycle/open/kill wiring including attached-session fallback behavior, sessions picker launcher-key abort bindings, popup/switch preview summary formatting, popup sessions tmux entry helpers, switch/popup/session rendering, session identity, session-state Claude/Codex/Antigravity resume and declarative startup replay, session snapshot capture/autosave recipe classification including save/autosave pre-capture resume metadata refresh from live AI session ids including Antigravity conversation ids, Claude transcript paths, and Codex rollout log cwd matching/ambiguity skips, candidate discovery, config path derivation, popup preview read-models, and pure state rules including preview, tag, and lifecycle stores.
 - `make test` also covers GitHub Release updater resource and integrity boundaries: bounded compressed responses, decompressed tar streams, total and per-file regular bytes, entry counts, required SHA-256 asset digests, release-host/redirect allowlisting, scratch cleanup, and no atomic replacement after rejection.
@@ -40,6 +42,7 @@
 - `make test` also covers the Settings information-density/feedback contract: compact About producers and removed static-guide negative guards, canonical `setup` / `setup terminal` / read-only `doctor` destinations, single-source no-project guidance with project-context action preservation, Appearance/Theme/About ownership copy, and popup-visible passive mutation success/failure/validation feedback with replacement/clear and rendered-entry reachability guards. Dedicated Welcome, key-capture/probe/diagnostic, and read-only viewer outputs remain outside generic mutation feedback.
 - `make test` also covers native Alt-1 sidebar `Sidebar:KillSession` mutable refresh: the action kills through the focused-session safety path, keeps the native picker session open, refreshes rows and preview with `picker.Action.Mutate`/`DeferredUpdate`, and preserves the previous-live-session guard.
 - `make test` also covers Notify sidebar pane-grouped read-model rows and interactions: collapsed pane inbox group construction, fixed three-line group cards with stable project/provider, topic/context, aggregate metadata, and latest-preview slots including topic-with-project cases, child-count badges that match expandable child rows without rendering `+0`, childless group headers without strong fold affordance, selected/expanded marker-only row shape changes, duplicate label/preview reduction, worst-severity aggregation, inactive/gone group display and child-count rendering, pane-less fallback grouping, compact newest-first child event rows with warn/critical severity preservation, Right/Left fold mutation plus childless Right no-op refresh, folded and expanded live group Enter focus+ack with mixed-severity critical rows, inactive-but-routable group Enter focus+ack, gone group Enter cleanup without focus including critical rows, target-gone race cleanup, transient focus-failure no-ack refresh, child Enter focus/ack preservation, explicit group acknowledgement including mixed-severity critical rows, and grouped deferred refresh output with expanded-state pruning.
+- `make test` also covers the installed-surface coherence contract: localized Session State summaries and Project Picker Back/open guidance; single-label Resource search plus disabled empty shared-bucket feedback; en-US/ko-KR Sessions row/preview labels with the concise open/close footer visible in actual 80x24 projmux and 112x30 daylight native frames; Notify empty read-only close-only chrome; and INFO/WARN/CRIT Clear All confirmation with Esc/Cancel no-write and explicit confirm feedback.
 - `make test` also covers the AI provider metadata registry for Claude/Codex/Antigravity launch providers: registry-derived enabled-agent defaults and ordering, Settings enabled-agent rows, AI picker visibility for disabled providers, ambient usage model scope derivation for currently registered adapters, hook diagnostic provider metadata, Antigravity session-state support metadata, and explicit diagnostics for disabled providers.
 - `make test` also covers the Antigravity v1.1.12 hook contract: authoritative CLI `--event` selection with legacy payload fallback, sanitized camelCase common/invocation/post-tool/Stop fixtures, empty/absent/populated `workspacePaths` handling with inherited-pane-first attribution, explicit-error-centric Stop severity including unknown-reason diagnostics, the official five-event catalog with disabled permission-changing `PreToolUse`, and valid non-permission-changing hook response JSON.
 - `make test` also covers the Antigravity v1.1.12 statusline bridge: official stacked managed-object golden, settings install/reinstall/remove byte and mode preservation, custom-command conflict and malformed/symlink/permission preflight, empty custom stdout, official snake_case identity/agent/confirmation/context-token/quota fixture parsing, busy/quiet state mapping including Stop → late busy → idle completion preservation and next-PreInvocation reset, stable approval dedupe identity, structured conversation-local context sidecar writes with the legacy string-percent fallback retained as private hook/notify diagnostics, opaque quota bucket ordering/identity and collision guards, remaining-fraction validation/conversion, independent absolute/relative reset persistence, and context-only/empty/null/disabled/malformed quota degradation without context usage snapshots.
@@ -87,6 +90,10 @@
 - `make test` also covers `projmux ai ingest log` tail/path rendering and bounded JSONL log trimming for ingest diagnostics.
 - `make test` also covers the Phase 0 operational diagnostics foundation: closed safe-event schema, control/length/home sanitization, lossy stable top-level error messages with dynamic pane/title/body/transcript/config-value exclusion, exhaustive allowlisted top-level/multi-mode command classification including direct-help and explicit dry-run success exclusion with boolean `=false` safeguards, exactly-once state-changing/error outcomes with explicit zero-success/error-one coverage for the six automatic `ai ingest`, attention arm/clear/window, session-state autosave, and recent-window record paths plus an explicit-mutation success regression, private permission repair, platform replace-existing bounded complete-record retention, corrupt-tail recovery, OS-owned inter-process lock identity/crash recovery and explicit 200 ms budget, concurrent short-process rotation, common text/JSON/tail/filter reader fixtures, and unchanged top-level runtime/usage/exitCoder output and exit semantics.
 - `make test` also covers Operational diagnostics Phase 2 lifecycle adoption: the maintained explicit-mutation inventory (attach/current/kill/sessions/switch plus session-popup open, window recent, prune ephemeral, focus session switching, shell open-app, snapshot replay creation, popup-toggle cancel restore, and tmux apply); session create/attach/switch/kill and `tmux apply` start/outcome success/error tables; composite create-then-attach and prune-kill-then-attach failure-stage attribution while preserving one outer pair; shared run IDs and no duplicate top-level outcome; best-effort store/write failure injection; closed operation/code pairing; apply typed no-server versus generic runner failure classification; focus success sealing at the actual switch-client boundary; unchanged read-only/hot-path zero-success recording; typed no-write runtime health projection with latest-state and bounded failure-code semantics; Doctor runtime/log typed consumer reuse; and support-report raw socket/path/session/window/pane/name negative fixtures. `make test-integration` additionally runs real create/attach/switch/kill success/failure routing against a run-unique `-L` socket, validates exact lifecycle pairs and apply classifications without raw routing, and guards cleanup with the queried actual socket path beneath the run-unique smoke root.
+- `make test` also covers Operational diagnostics Phase 3 Session State adoption: the closed outcome/operation/code/source/six-count schema; direct and popup manual save/delete, Settings latest/named save and current/project delete, deduplicated prune delete, and actual project-startup latest/named restore ownership; exact snapshot and item aggregates; error count omission; Settings feedback error capture; append-failure best-effort ownership; autosave session/config/source/interval/debounce/store/save/set-option failure ownership including quiet error-one and project on/off precedence over a broken global config, plus repeated autosave success/no-op zero-volume behavior; same-run coexistence with the runtime lifecycle pair; and seeded path/command/session metadata negative fixtures. `make test-integration` exercises manual save, autosave success/error, actual latest restore, and aggregate delete against the guarded run-unique tmux socket and isolated XDG root, including exact snapshot cleanup and raw metadata negative checks.
+- `make test` also covers Operational diagnostics Phase 4 notify/focus adoption: the closed transition/disposition/provider/category/route schema and cross-family rejection; explicit notify enqueue ownership with queued/deduplicated/failed outcomes; secondary attention and nested prune-reconcile enqueue ownership isolation with no-change zero volume; external-hook, Linux, WSL Toast/fallback, disabled, unavailable, desktop-dedupe, and visible-pane delivery outcomes; one shared process recorder with identical-tuple hot-path coalescing; append-failure best-effort semantics; focus direct/queue/toast request classification with unresolved, notify-only, fallback, and focused outcomes; same-run coexistence with the existing `session.switch` lifecycle pair without a generic duplicate; unchanged `PROJMUX_FOCUS_DEBUG` output; and seeded summary/body/tag/group/title/path/UUID plus support-report negative fixtures.
+- `make test` also covers Operational diagnostics Phase 5 AI watcher/ingest adoption: the closed provider/event-kind/result/failure schema, provider-specific kind catalogs, result/failure tuple compatibility, and cross-family rejection; watcher start plus pane-gone/hook-active terminal ownership, actual launch-failure classification, per-run tuple coalescing, and no per-poll records; Codex/Claude/Antigravity malformed, read, oversized, unmatched, unsupported-event, and route-error projection plus tmux-bell valid, blank, and pane-not-found coverage; zero common AI events for normal state/notify/known-quiet/deduped ingress while Phase 4 notify retains its transition; legacy `ai-ingest.log` producer, `ai ingest log`, bounded retention, and support count-consumer parity; append-failure best-effort ownership with no generic duplicate; and seeded prompt/tool/path/UUID/conversation/session/title negative fixtures for operations and support output.
+- `make test` also covers Operational diagnostics Phase 6 resource adoption and legacy review: exact closed resource source/result/failure tuples and cross-family rejection; production app graph wiring through Resource Inspector lifecycle → tmux inventory/project discovery/procfs attribution; unavailable, partial, stale, collection error, and actual context-deadline scan-budget fixtures; normal sample/refresh zero volume, persistent-transition coalescing, silent recovery plus anomaly re-entry, and append-failure best-effort UI/CLI preservation; separate host-only status sampler zero ownership; operations text/JSON and error-only support projection with partial/stale omission; seeded CPU/MEM/PID/process/path/title/command/UUID/session/error text negative fixtures; common journal retention/rotation regression; and the file/surface legacy diagnostic inventory without breaking removal.
 - `make test` also covers the Phase 1 explicit redacted support report: complete preview-before-write ordering, deterministic private archive entries and manifest schema/redaction metadata, Doctor schema-version-1 structural reuse with closed static diagnostic allowlists, strict no-repair bounded operations reads, config-presence-only and AI-ingest count-only projection, exhaustive seeded free-text/path/routing/content negative redaction, missing/corrupt/unreadable source reasons, collision/partial-temp safety, and report success/error exclusion from legacy-hook migration and operational outcomes.
 - `make test` also covers welcome revisit policy: legacy `skip_version` readability without shell suppression, `s` Skip until next vs Enter continue, Settings > About > Welcome native viewer, best-effort shell update cache refresh, and attach-popup no-duplicate/no-op behavior.
 - `make test` also covers `projmux quit` action-picker rows, cancel/close no-op behavior, explicit quit of only app-owned tmux runtimes marked by `@projmux_app=1`, missing/default runtime no-ops, dispatcher wiring, and `Settings > About > Quit projmux` routing through the same picker before any shutdown side effect.
@@ -122,7 +129,7 @@
 - `make test` also covers npm retire/staging path canonicalization for the resolved projmux executable so generated tmux config and hooks never embed a `node_modules/.projmux-<hash>` directory, plus error-suppressed attention and rebalance-panes hooks.
 - `make test-integration`: Docker-backed Linux integration smoke with real `tmux`, `git`, and `stty`; covers Doctor schema 2 missing/corrupt/permission degradation, runtime socket/config current/stale findings against a guarded run-unique `-L` socket, source byte/mode/mtime/inventory no-repair evidence, explicit support-report no-request/preview/private archive and Doctor-schema inspection, missing/corrupt/permission-denied source manifest reasons with no source-mode repair, preview-writer failure before output creation, collision byte/mode preservation and temp cleanup, tmux config print/install/apply including stale live `C-t` pane-label retirement, current `M-p` preservation, current `C-t` reassignment, repeated apply/keymap byte preservation, and unrelated live/current binding preservation, default-off/on live resource config plus two-sample procfs status rendering, notify queue CRUD against isolated HOME/XDG paths, private operational-log persistence/mode repair/readback/hot-path exclusion/best-effort write failure, and built-CLI propagation of a fake tmux `split-window -P -F "#{pane_id}"` result to `--print-pane-id` stdout. Root containers run the permission case through `runuser`+`nobody`; environments without that adapter take an explicit asserted skip instead of treating root chmod access as denial.
 - `make test-install-smoke`: Docker-backed source install smoke; covers `make install`, atomic binary replacement, `tmux apply` against a live `projmux` socket, post-install notify queue initialization, and installed-binary temporary HOME/XDG support-report preview → explicit private archive → manifest/Doctor schema inspection with exact smoke-root cleanup.
-- `make test-e2e`: Docker-backed real-tmux workflow smoke for session/pane setup, a direct shell `--print-pane-id` split whose returned `%N` handle is verified against the isolated live server, an attached-client `rename-pane-label` command-prompt flow covering current-label initial value, Enter confirm, native Esc cancel, empty clear, and AI topic/manual/raw-title non-mutation, app config sourcing, reply-state notify reconciliation, focus notify fallback, status notify rendering with contextual project/state/agent badges, and an isolated attached-client `display-popup` Settings recorder flow that verifies staged-before-write Enter confirmation plus Esc cancellation against a temporary HOME/keymap while stale retired picker env/file values remain inert, unchanged, and silent. Host-only terminal, WSL, macOS, and GUI notification behavior remains outside Docker; see [docs/testing.md](testing.md).
+- `make test-e2e`: Docker-backed real-tmux workflow smoke for session/pane setup, a direct shell `--print-pane-id` split whose returned `%N` handle is verified against the isolated live server, an attached-client `rename-pane-label` command-prompt flow covering current-label initial value, Enter confirm, native Esc cancel, empty clear, and AI topic/manual/raw-title non-mutation, app config sourcing, reply-state notify reconciliation, focus notify fallback, status notify rendering with contextual project/state/agent badges, an isolated attached-client `display-popup` Settings recorder flow that verifies staged-before-write Enter confirmation plus Esc cancellation against a temporary HOME/keymap while stale retired picker env/file values remain inert, unchanged, and silent, and a reused FIFO/attached-client Notify Clear All flow whose command markers and queue JSON prove cancel no-write, INFO/WARN/CRIT confirm clear, and pane focus restoration. Host-only terminal, WSL, macOS, and GUI notification behavior remains outside Docker; see [docs/testing.md](testing.md).
 
 ## When To Update This List
 - A feature moves between unit, integration, and e2e coverage levels.

package/docs/cli.md

@@ -46,19 +46,20 @@ projmux <command> [args...]
 | `update` | Check installer-aware GitHub release update status. |
 | `upgrade` | Self-update via `go install`. |
 | `welcome` | Print the shell onboarding guide again. |
-| `usage` | Report AI usage across fixed windows, context, and named quota buckets. |
+| `usage` | Report AI usage across fixed windows and named account quota buckets. |
 | `version` | Print the current version. |
 
 ## switch
 
 ```
-projmux switch [path]
+projmux switch [--ui=popup|sidebar]
+projmux switch open <path>
 projmux switch toggle-tag | toggle-pin | kill | settings | preview
 projmux switch cycle-pane | cycle-window | sidebar-focus
 ```
 
 Project picker. With no positional argument, opens the configured picker popup
-or sidebar (depending on entry helper). With a path, jumps directly. The
+or sidebar (depending on entry helper). `switch open <path>` jumps directly. The
 sub-verbs are entry hooks invoked by tmux keybindings (e.g.
 `sidebar-focus` is wired to the sidebar's focus binding so navigation keeps
 the active session in sync).
@@ -109,7 +110,7 @@ projmux doctor [--json] [--section deps|runtime|integrations|session-state|logs]
 Runs read-only diagnostics, including a dependency check for `tmux ≥ 3.4`,
 `git`, `stty` (POSIX only), and
 `kubectl` (optional), then reports read-only AI notify integration diagnostics
-for Codex hooks, Claude Code hooks, and the tmux bell
+for Codex hooks, Claude Code hooks, Antigravity hooks/statusline, and the tmux bell
 fallback. AI notify integration statuses are `installed`, `missing`, or
 `conflict`; missing or conflicting integrations are informational and do not
 make doctor fail. It also reports read-only Session State resume metadata
@@ -209,6 +210,17 @@ channel and never change command output or exit status. See
 [operational-diagnostics.md](operational-diagnostics.md) for the file,
 retention, concurrency, and privacy contracts.
 
+`ai watch-title` emits a bounded common lifecycle: one start, one terminal
+pane-gone/hook-active stop, and at most one copy of each closed watcher failure
+tuple per process. Normal polling iterations emit nothing. AI hook ingest emits
+common events only for malformed/read/oversized payloads, unmatched or invalid
+targets, unsupported event classification, and route failures. Provider event
+names, payloads, prompt/tool/transcript values, notification text, pane
+metadata, paths, UUIDs, and conversation/session IDs are never stored. Normal
+state/notify/quiet/dedupe hook results stay zero-volume in the common AI family;
+the existing notify transition remains the owner when notification behavior
+occurs.
+
 Session create/attach/switch/kill and `tmux apply` use correlated
 `lifecycle.start`/`lifecycle.outcome` records instead of a duplicate generic
 top-level outcome. The text and JSONL views expose only the closed safe
@@ -341,10 +353,12 @@ projmux notify reconcile [--json]
   While open, the native
   sidebar refreshes its row list on successful queue-write events without an
   Alt-2 close/reopen toggle, using the same deferred refresh path as `a` and
-  `x`. The sidebar uses two-line cards with notification text first and
-  compact age/project/window/pane metadata below. Hidden queue ids remain
-  action values, but the sidebar has no search input. `--client` is used by
-  tmux popup launchers to keep row-select focus on the clicked client.
+  `x`. The sidebar is a pane/session-grouped inbox whose collapsed rows are
+  fixed three-line cards: project/session, agent/provider, and newest age on
+  line 1; topic/pane-title/task context plus severity/live-state metadata on
+  line 2; and the latest notification preview on line 3. Hidden queue ids
+  remain action values, but the sidebar has no search input. `--client` is used
+  by tmux popup launchers to keep row-select focus on the clicked client.
 - `ack <id>` removes one entry; `--all` flushes the queue.
 - `reconcile` — walks `tmux list-panes -a` and back-fills entries for
   panes whose attention state is `reply` AND whose AI agent option is
@@ -356,7 +370,7 @@ projmux notify reconcile [--json]
 
 ## usage
 
-Authoritative AI token usage. See [usage-tracking.md](usage-tracking.md)
+Authoritative AI account usage. See [usage-tracking.md](usage-tracking.md)
 for adapter detail.
 
 ```
@@ -412,13 +426,22 @@ core-equivalent CPU. Project and window rows count panes, while pane rows count
 the attributed processes. Pane rows and detail share the resolved pane identity
 and label the tmux current command, PID/SID, pane id, and TTY separately. Memory
 is explicitly an RSS sum (shared pages can be counted more than once) plus its
-host ratio. `Unassigned`,
-`Shared / ambiguous`, and non-drillable `Other / unattributed` remain explicit,
-as do warming, partial, unavailable, unknown, and overage states. No process
+host ratio. `No project match`, `Multiple project matches`, and non-drillable
+`Other / unattributed` remain explicit. The first two are display labels over
+stable internal attribution keys. Warming, partial, unavailable, unknown, and
+overage states also remain explicit. No process
 command list, mutation, history, graph, daemon, persistence, or Session State
 telemetry is created. Linux/tmux provides attribution; unsupported platforms
 show an unavailable reason rather than zero metrics.
 
+Only Resource Inspector anomalies (`unavailable`, `partial`, `stale`, closed
+collection-stage errors, and scan-budget exhaustion) enter the private bounded
+operations journal. Identical persistent anomalies are transition-coalesced;
+healthy periodic samples and refreshes emit zero records. These records contain
+no CPU/RSS values, PID/process detail, project/tmux identity, path/title/command,
+or arbitrary error/status text. `diagnostics report` includes only error-level
+closed resource outcomes; local-only partial/stale info rows are omitted.
+
 This is distinct from `projmux status resources`, which remains the short
 host-only statusbar renderer.
 
@@ -476,10 +499,10 @@ projmux statusbar usage-refresh
 ```
 
 Click/keyboard dispatcher for the two-line status bar. Implemented range ids:
-`session pwd kube git usage notify settings`. The bare `window` /
+`session pwd kube git resources usage notify settings`. The bare `window` /
 `window|<idx>` token (tmux's built-in window-list range) and the empty
 range fall through to `select-window -t @<mouse_window>` so the native
-click-to-switch tab affordance is preserved on row 0. Unknown range ids are
+click-to-switch tab affordance is preserved on row 1. Unknown range ids are
 non-specialized placeholders and no-op. `session` opens the existing-session
 popup; `pwd` shows the current pane path in a native-framed display-only
 popup; `kube` and `git` open the project switcher popup;
@@ -523,11 +546,11 @@ supplied window.
 
 ```
 projmux ai split    [--agent <claude|codex|antigravity|shell|selective|resume>] [--force-agent] [--print-pane-id] [right|down] [-- <extra-arg>...]
-projmux ai picker   [--inside] [--shell] [--resume] <right|down>
-projmux ai settings
-projmux ai status   set <thinking|waiting|idle> [--pane <id>]
-projmux ai notify   <reset|notify> [--pane <id>]
-projmux ai watch-title [--pane <id>]
+projmux ai picker   [--inside] [--shell] [--resume] [right|down]
+projmux ai settings [--get|--set <mode>]
+projmux ai status   set <thinking|waiting|idle> [pane]
+projmux ai notify   [notify|reset] [pane]
+projmux ai watch-title [pane]
 projmux ai ingest   codex-hook < payload.json
 projmux ai ingest   claude-hook < payload.json
 projmux ai ingest   antigravity-hook [--event <PreInvocation|PostInvocation|PostToolUse|Stop|Statusline>] < payload.json
@@ -754,6 +777,15 @@ payloads are not stored. The log is capped at 1 MiB and trimmed to the most
 recent roughly 512 KiB when it grows past the cap. Use `--json` for raw JSONL
 and `--path` to print the resolved file path.
 
+This legacy log is retained for compatibility. Its producer, `ingest log`
+consumer, 1 MiB/roughly 512 KiB retention, and support-report count summary are
+unchanged. The common operations journal now carries only the safe anomalous
+classification and watcher lifecycle described above. Both surfaces run in
+parallel during the migration. It is now documented as a deprecation candidate,
+but this release does not deprecate, remove, rename, or change it; a separate
+breaking roadmap must first migrate its detailed local consumer. See
+[legacy-diagnostics-inventory.md](legacy-diagnostics-inventory.md).
+
 For `Stop`, projmux reads `transcript_path` when present and extracts the last
 assistant text from the transcript tail; if that is unavailable, it falls back
 to a generic Claude completion row. `PermissionRequest` rows expose the tool

package/docs/globalization.md

@@ -34,7 +34,7 @@ Classification:
 
 | Family | Examples | Class | Phase 0 policy |
 | --- | --- | --- | --- |
-| Agent names | `Codex`, `Claude`, `AI` | `literal` | Preserve exactly. |
+| Agent names | `Codex`, `Claude`, `Antigravity`, `AI` | `literal` | Preserve exactly. |
 | Category labels | `Response complete`, `Approval required`, `Input required`, `Error`, `Subagent stopped`, `Teammate waiting` | `translate` | English baseline now; catalog keys later. |
 | Review body prefix | `Review pending:` | `translate` | English baseline now; catalog key later. |
 | Tool names | `Bash`, `Read`, `WebFetch`, `Shell` | `literal` | Preserve provider/source spelling. |
@@ -78,7 +78,7 @@ Classification:
 | Row labels and previews | enabled/disabled state, current source, saved values | `translate` | Inventory only; catalog later. |
 | Disabled reasons and warnings | missing project, env override, conflict text | `translate` | Inventory only; catalog later. |
 | Config keys and env vars | `PROJMUX_PROJDIR`, `config.toml`, `ui.locale` | `literal` | Preserve exactly. |
-| Commands shown for copying | `projmux ai integrate codex --dry-run` | `literal` | Preserve exactly. |
+| Commands shown for copying | `projmux ai integrate codex --dry-run`, `projmux ai integrate antigravity --dry-run` | `literal` | Preserve exactly. |
 | Persisted values | `none`, `notify`, `raise`, `auto` | `literal` | Preserve enum values. |
 
 ### Native Picker And Render Surfaces
@@ -124,7 +124,7 @@ Classification:
 
 Do not translate these families:
 
-- Product and agent names: `Codex`, `Claude`, `projmux`, `tmux`,
+- Product and agent names: `Codex`, `Claude`, `Antigravity`, `projmux`, `tmux`,
   `GitHub`, `npm`.
 - Terminal and app names: `Windows Terminal`, `Ghostty`, `WezTerm`, `Kitty`,
   `iTerm2`, `Alacritty`, `Foot`.
@@ -239,7 +239,8 @@ Contribution convention:
 - Add the `en-US` entry in the same change as the key.
 - Add `ko-KR` when the translation is known; otherwise rely on fallback while
   keeping the missing key intentional in review notes.
-- Do not translate product names (`projmux`, `tmux`, `Codex`, `Claude`),
+- Do not translate product names (`projmux`, `tmux`, `Codex`, `Claude`,
+  `Antigravity`),
   commands, paths, config keys, environment variables, provider payloads, or
   source enum values.
 - Runtime migrations should be narrow by surface. Move a string family behind
@@ -296,7 +297,8 @@ Width-safe rendering:
 
 Runtime surfaces migrated:
 
-- AI desktop notification summaries for Codex and Claude hook payloads.
+- AI desktop notification summaries for Codex, Claude, and Antigravity hook
+  payloads.
 - In-app notify queue table/sidebar/statusbar display text for AI entries.
 - Notify live explanation text for `projmux notify list --live`.
 - Sidebar/table/statusbar age formatting and sidebar stale/gone/target labels.
@@ -317,9 +319,9 @@ Literal preservation and parity rules:
 - Translate only catalog-owned category labels such as `Response complete`,
   `Approval required`, `Input required`, `Error`, `Subagent stopped`, and
   `Teammate waiting`.
-- Preserve provider-owned payloads verbatim: `Codex`, `Claude`, tool names,
-  commands, paths, URLs, query strings, transcript excerpts, teammate IDs, and
-  subagent IDs.
+- Preserve provider-owned payloads verbatim: `Codex`, `Claude`, `Antigravity`,
+  tool names, commands, paths, URLs, query strings, transcript excerpts,
+  teammate IDs, and subagent IDs.
 - Desktop notification summaries and in-app queue display text must use the
   same rendered category labels for the same locale while preserving the same
   literal payload body.

package/docs/hooks.md

@@ -205,11 +205,11 @@ If a `send-noti` hook itself calls `projmux notify push`, projmux sees
 `PROJMUX_NOTIFY_HOOK_DEPTH=1` in the child environment and skips another
 `send-noti` hook fire. The queue write itself still succeeds.
 
-`Settings > Notifications > Delivery sources` surfaces the active Codex hooks,
-Claude, and tmux AI notify diagnostics: status, conflicts, config paths, and
-copyable CLI install/remove/dry-run commands. It also shows whether
+`Settings > Notifications > Delivery sources` surfaces the active Codex,
+Claude, Antigravity, and tmux AI notify diagnostics: status, conflicts, config
+paths, and copyable CLI install/remove/dry-run commands. It also shows whether
 `PROJMUX_NOTIFY_HOOK` overrides the built-in desktop sender. It does not install
-or remove external Codex, Claude, or tmux settings.
+or remove external Codex, Claude, Antigravity, or tmux settings.
 
 `PROJMUX_NOTIFY_HOOK` is separate from `[hooks.send-noti]`: it replaces the
 desktop sender and receives positional arguments
@@ -731,16 +731,28 @@ projmux does not run `post-attach` for outside-tmux attach paths in this phase.
 
 ## Environment
 
-Hooks inherit projmux's environment, plus:
-
-| Variable | Always set | Description |
-| --- | --- | --- |
-| `PROJMUX_SESSION` | yes | tmux session name |
-| `PROJMUX_CWD` | yes | lifecycle working directory; for creation events this is the new session directory |
-| `PROJMUX_SESSION_KIND` | yes | `persistent` or `ephemeral` for creation events; empty for `post-attach` |
-| `PROJMUX_VERSION` | yes | projmux version string |
-| `PROJMUX_SOCKET` | only if projmux used `tmux -L <socket>` | tmux socket name |
-| `PROJMUX_PANE` | only for pane events | tmux pane id such as `%7` |
+Hooks inherit projmux's environment. The lifecycle variables below are added by
+event; “omitted” means the variable is not added when its context value is
+empty.
+
+| Variable | `pre-create` | `post-create` | `post-attach` | `send-noti` |
+| --- | --- | --- | --- | --- |
+| `PROJMUX_SESSION` | new session name | new session name | target session name | target session when known; otherwise empty |
+| `PROJMUX_CWD` | requested session directory | created session directory | resolved target directory; may be empty if lookup fails | dispatcher working directory |
+| `PROJMUX_SESSION_KIND` | `persistent` or `ephemeral` | `persistent` or `ephemeral` | empty | empty |
+| `PROJMUX_VERSION` | projmux version | projmux version | projmux version | projmux version |
+| `PROJMUX_SOCKET` | app socket metadata (`projmux`) | app socket metadata (`projmux`) | app socket metadata (`projmux`) | queue-entry socket when known; otherwise omitted |
+| `PROJMUX_PANE` | omitted: no pane exists yet | exact id returned by standard persistent/ephemeral `tmux new-session`, such as `%7`; omitted for snapshot replay | omitted | target pane when known; otherwise omitted |
+
+`pre-create` intentionally has no `PROJMUX_PANE`: it runs before
+`tmux new-session` creates the first pane. Standard persistent and ephemeral
+`post-create` paths run after creation and therefore receive that exact pane
+id. Snapshot replay can restore multiple panes and does not expose a single
+returned pane at its lifecycle boundary, so it omits `PROJMUX_PANE`.
+`PROJMUX_SOCKET` is routing metadata for hook commands; it does not imply that
+the tmux client itself adds `-L` to its commands. The `post-attach` and
+`send-noti` cells describe their existing contexts; this contract adds no pane
+context to either event.
 
 ## Examples
 
@@ -749,6 +761,7 @@ Hooks inherit projmux's environment, plus:
 ```bash
 #!/usr/bin/env bash
 echo "session=$PROJMUX_SESSION cwd=$PROJMUX_CWD kind=$PROJMUX_SESSION_KIND"
+tmux -L "$PROJMUX_SOCKET" set-option -p -t "$PROJMUX_PANE" @projmux_initialized 1
 ```
 
 ### Project Startup Command
@@ -770,7 +783,7 @@ case "$PROJMUX_CWD" in
   *) exit 0 ;;
 esac
 
-tmux set-environment -t "$PROJMUX_SESSION" GH_TOKEN "$token"
+tmux -L "$PROJMUX_SOCKET" set-environment -t "$PROJMUX_SESSION" GH_TOKEN "$token"
 ```
 
 `set-environment` only seeds the session env that newly-spawned panes inherit;

package/docs/legacy-diagnostics-inventory.md

@@ -0,0 +1,23 @@
+# Legacy diagnostics inventory
+
+This is the Phase 6 file/surface inventory. `Keep`, `Deprecate candidate`, and
+`Remove candidate` are review classifications, not runtime changes. Nothing in
+this phase removes, renames, ignores, or changes an environment variable, log,
+CLI, config action, output format, permission, or retention contract.
+
+| Surface | Producer / reader files | Current consumer and data boundary | Candidate and rationale | Separate follow-up |
+| --- | --- | --- | --- | --- |
+| `PROJMUX_USAGE_DEBUG` | `internal/app/usagecmd/usage.go`; adapter contract in `internal/core/usage/registry.go` and safe token helper in `internal/core/usage/adapters/claude/claude.go` | `projmux status usage` operator stderr; documented by `AGENTS.md`, `docs/configuration.md`, and `docs/usage-tracking.md`; `internal/app/usagecmd/usage_test.go` fixes the opt-in behavior; adapter errors are otherwise swallowed on the status hot path | **Keep.** Usage adapters are not adopted by the common journal and this opt-in stderr is the only immediate adapter failure consumer. | No removal follow-up. Re-evaluate only with a separately scoped usage diagnostics adoption. |
+| `PROJMUX_SESSIONSTATE_DEBUG` | read/output gate in `internal/app/tmux.go` | Operator/automation stderr for a quiet autosave error; documented in `docs/configuration.md`; tests in `internal/app/tmux_test.go` cover popup environment propagation | **Deprecate candidate.** Phase 3 already records the same quiet autosave failure as a closed common error, but scripts may consume stderr. | Yes: announce deprecation, audit scripts, and remove only in a breaking PR after a compatibility window. |
+| `PROJMUX_FOCUS_DEBUG` | read/output gate in `internal/app/focus.go` | Operator stderr one-line raw target/session/window/pane/socket/client/source/kind; documented in `AGENTS.md`, `docs/cli.md`, `docs/configuration.md`, `docs/operational-diagnostics.md`, and the maintained test list in `docs/agent-workflow.md`; `internal/app/focus_test.go` fixes the byte contract | **Deprecate candidate.** Phase 4 common focus events are safer for support, but the raw routing line remains a distinct local troubleshooting consumer. | Yes: publish safe replacement guidance and remove only through a breaking deprecation roadmap. |
+| `PROJMUX_NATIVE_DEBUG_LOG` | `internal/ui/picker/backend.go` and `colorgrid.go` append native picker actions/query/value/errors; `internal/app/tmux.go` inherits it into popup environments | Developer-selected file path; popup inheritance is covered in `internal/app/tmux_test.go`; no public CLI/support reader, retention bound, or privacy redaction | **Remove candidate.** The opt-in trace can contain user query/value/error text and is not bounded. Current behavior remains intact because a safe bounded replacement and migration notice are outside Phase 6. | Yes: design a bounded private picker trace or common closed events, document migration, then ship removal as breaking. |
+| bounded `ai-ingest.log` | Codex producer `internal/app/ai_ingest_codex.go`; Claude producer `internal/app/ai_ingest_claude.go`; Antigravity producer `internal/app/ai_ingest_antigravity.go`; tmux-bell producer plus shared `appendAIIngestLog`, path, cap, and trim in `internal/app/ai_ingest.go`; common projection in `internal/app/ai_ingest_diagnostics.go` | Detailed CLI reader `internal/app/ai_ingest.go` (`projmux ai ingest log`); count-only support reader `internal/app/diagnostics_report.go`; docs consumers `docs/cli.md`, `docs/hooks.md`, `docs/configuration.md`, `docs/operational-diagnostics.md`, and the maintained test list in `docs/agent-workflow.md`; `internal/app/ai_ingest_test.go`, `internal/app/ai_ingest_diagnostics_test.go`, `internal/app/diagnostics_report_test.go`, and `test/integration/linux-smoke.sh` cover retention/consumer/corrupt/permission behavior | **Deprecate candidate.** Phase 5 common events cover anomalous classification, but intentionally omit normal state/notify/quiet/dedupe detail and all identity. Removing the file now would break the detailed CLI consumer and measured parity. | Yes: define whether detailed normal-state diagnostics remain a product requirement, migrate or retire `ai ingest log` and support counts, announce a compatibility window, then use a breaking PR. |
+
+The separate host resource status path is not a legacy debug surface:
+`internal/app/status.go` invokes `internal/systemstatus.Sampler` for
+`projmux status resources`. It owns only host aggregate display/cache behavior,
+not pane/project attribution, and emits zero common resource events. The Phase
+6 Resource Inspector owner is `internal/app/resources.go` →
+`internal/app/resources_collector_linux.go` →
+`internal/integrations/tmux.ListResourcePanes` plus
+`internal/integrations/procfsresources.Collector`.

package/docs/operational-diagnostics.md

@@ -36,6 +36,136 @@ operation instead of recording nested outcomes. Lifecycle ownership replaces
 the generic top-level `command.outcome`; it never duplicates it. Start/outcome
 append failures are ignored and do not change the command result.
 
+Session State mutations use one outcome-only `session-state.outcome` record
+per selected attempt. The closed operations are `session-state.save`,
+`session-state.autosave`, `session-state.restore`, and `session-state.delete`;
+an error uses only the matching `.failed` code, `kind=runtime`, and an empty
+message. Optional sources are limited to `manual`, `settings-latest`,
+`settings-named`, `autosave`, `startup-latest`, `startup-named`, and `prune`.
+Successful save and actual startup restore outcomes contain only exact
+non-negative `window_count`, `pane_count`, `shell_recipe_count`,
+`agent_recipe_count`, and `startup_recipe_count` aggregates. Successful delete
+contains only `item_count`; errors contain no counts. Snapshot paths/content,
+project paths, pane cwd/commands, snapshot names, and agent or conversation
+identifiers are never projected.
+
+Direct and popup save, Settings latest/named save, direct and Settings delete,
+deduplicated prune delete, and actual latest/named project-startup replay own
+these outcomes. Preview, dry-run, and nested store/replay calls do not.
+Autosave success and disabled, not-due, or fresh no-ops always write zero
+records; a real autosave failure writes exactly one error even when `--quiet`
+preserves its historical successful exit. Session State logical ownership
+suppresses a generic top-level outcome even when journal append fails. An
+actual restore may also produce its runtime lifecycle pair with the same run
+ID; the lifecycle pair and Session State terminal outcome describe different
+contracts and are not duplicates.
+
+Notify and focus transitions use the same process `run_id` and add only closed
+`transition`, `disposition`, `provider`, `category`, and `route` enums. Notify
+transitions are `enqueue` and `delivery`; focus uses `request`. Enqueue records
+distinguish queued, stable-ID deduplicated, and failed outcomes. Delivery
+records distinguish delivered, dedupe/visibility/setting suppression, and
+failed outcomes across the external sender hook, WSL Toast and fallback, and
+Linux `notify-send` routes. Focus request records distinguish focused,
+notify-only, session-only, window-only, and failed outcomes. Failure codes are
+closed stage classifications and messages stay empty.
+
+Provider and category values are projected through fixed allowlists. Unknown
+values become `other`; arbitrary provider payloads and notification metadata
+cannot extend the event schema. Notification summary/body, tag/group, terminal
+title/topic, paths, queue or routing IDs, UUIDs, and AI/conversation/session
+identifiers are never recorded. The notifier sender owns one terminal delivery
+outcome after fallback selection, so failed intermediate WSL adapters do not
+produce duplicate records when a later route succeeds.
+
+One process writes at most one copy of an identical safe notify/focus tuple.
+This fixes repeated stable-ID queue replacement, desktop dedupe, visible-pane
+suppression, and reconcile hot paths to a finite per-run volume; the journal's
+existing size/retention cap remains the cross-process bound. Explicit `notify
+push` and `focus` outcomes logically replace the generic top-level
+`command.outcome`, including when append fails. Secondary automatic enqueue or
+delivery events do not claim an unrelated outer command. A successful focus
+that switches a tmux client may coexist with the shipped runtime
+`session.switch` lifecycle pair under the same run ID: the pair describes the
+tmux mutation, while `focus.transition` describes the request-level result.
+
+AI watcher and hook-ingest diagnostics use the same process `run_id` and add
+only closed `provider`, `ai_kind`, `ai_result`, and `failure` enums. The event
+families are `ai.watcher.transition` and `ai.ingest.outcome`. Watcher provider
+is the generic `ai`; ingest providers are `codex`, `claude`, `antigravity`, or
+`tmux-bell`. Each provider accepts only its own closed semantic-kind catalog;
+for example, `tmux-bell` can only emit `bell`, while watcher events can only use
+the generic `ai` provider and `watcher` kind. Provider event names are projected
+into semantic kinds such as `prompt`, `permission`, `stop`, `notification`,
+`tool`, `session`, `compact`, `subagent`, `teammate`, `statusline`, `invocation`,
+`lifecycle`, `bell`, `payload`, or `unknown`. A raw or future event name can
+therefore be diagnosed as `unknown` but can never extend the journal schema.
+
+One watcher process emits at most one `started` transition, one terminal
+`pane-gone` or `hook-active` transition, and one copy of each distinct safe
+failure tuple. The existing observable launch seam uses only
+`watcher-launch-failed`; status application remains the pre-existing
+best-effort operation and does not claim to expose swallowed tmux write errors.
+The terminal watcher event logically replaces its generic top-level outcome,
+including when append fails.
+The polling loop does not record snapshots, observed titles, captures, pane
+state, or a record per iteration.
+
+Hook ingest projects only anomalies: invalid/read/oversized payloads, unmatched
+or invalid targets, unsupported event classification, and terminal route
+failure. Route failures are limited to the observable bell queue/store and
+Antigravity explicit-response seams. Identical safe anomaly tuples are
+coalesced per process. Successful state, notification, quiet, and bell-dedupe
+traffic emits zero common AI events. Notify enqueue/delivery remains owned by
+the Phase 4 notify recorder, so ingest does not add a second AI success outcome
+or claim a secondary notify outcome. An ingest failure owns the top-level error
+logically before its best-effort append, preventing a duplicate generic
+`command.outcome`.
+
+The common AI event never contains the raw hook payload or event name, prompt,
+transcript, tool name/input/output, notification summary/body, pane content,
+cwd/path/command/title/topic, tmux target, queue ID, provider conversation or
+session identifier, UUID, or arbitrary reason/error string. `failure` is a
+stage enum, not `error.Error()`.
+
+Resource attribution diagnostics use `component=resource` and the single
+`resource.sampler.outcome` family. The Resource Inspector lifecycle is the
+only writer: its Linux collector owns tmux inventory, project-root discovery,
+and procfs attribution, while its refresh gate owns derived staleness. The
+closed `source` values are `sampler`, `tmux-inventory`, `project-discovery`,
+and `refresh`; the closed `resource_result` values are `unavailable`,
+`partial`, `stale`, `error`, and `scan-budget-exceeded`. `failure` is limited
+to the matching safe stage enum. Impossible source/result/failure combinations
+are rejected.
+
+The lifecycle's existing overlap and trigger-drop counters remain UI-only
+refresh feedback and do not create an operational event by themselves. When
+the retained last-complete sample crosses the stale boundary, the refresh
+owner records the single coalesced `stale` transition instead.
+
+Normal warming/ready samples, periodic samples, successful automatic/manual
+refreshes, and the separate host-only `projmux status resources` sampler emit
+zero common resource events. The two-second Resource Inspector lifecycle budget
+measures inventory, discovery, and procfs collection together. Tmux inventory
+and procfs observe its context directly. Project discovery does not currently
+accept a context, so an overrun is classified as budget-exceeded when discovery
+returns rather than being preempted; making that seam cancellable is a separate
+follow-up. Budget exhaustion preserves the established unavailable UI/CLI
+result and adds only the safe budget tuple. A persistent identical anomaly
+emits once. Recovery is silent and resets that transition, so a later re-entry
+emits once again. Journal append failure does not affect snapshot selection,
+popup refresh, stdout/stderr, or exit status.
+
+No resource event contains CPU or memory values, PID/process counts, process
+command/cwd/title, project/session/window/pane identifiers, socket/TTY,
+attribution details, snapshot status text, arbitrary errors, paths, UUIDs, or
+privacy seeds. Partial and stale outcomes are info-level and remain in the
+private local journal only. Unavailable, collection/inventory/discovery error,
+and scan-budget outcomes are error-level, so the explicit support report may
+include their closed enums after hashing run/version correlation. The report's
+existing error-only projection omits partial/stale and never exports metrics or
+identity.
+
 The diagnostics package exposes a typed `ReadRuntimeHealth` projection for
 read-only Doctor consumers. It reports the fixed `tmux` backend, latest
 socket/apply state, and a bounded tail/count of safe failures using only
@@ -106,8 +236,44 @@ viewer read is excluded from success logging, so inspection does not create a
 recursion loop.
 
 The older bounded `ai-ingest.log` and subsystem-specific `PROJMUX_*_DEBUG`
-surfaces retain their current paths, formats, and behavior. They are not
-migrated by this foundation.
+surfaces retain their current paths, formats, and behavior. Phase 6 deliberately
+keeps the legacy producer and both existing consumers: `projmux ai ingest log`
+still reads the legacy JSONL bytes, and `diagnostics report` still emits its
+allowlisted source/result count summary. Legacy append failure remains
+best-effort and independent of common-journal append failure.
+
+The measured migration parity is:
+
+| Legacy `ai-ingest.log` result | Common operational projection |
+| --- | --- |
+| parse error with no classified event | `payload / failed / payload-invalid` |
+| bell queue/store or Antigravity response route error | allowlisted semantic kind / `failed / route-failed` |
+| no matching pane | allowlisted semantic kind / `ignored / target-unmatched` |
+| pane-not-found bell target | `bell / ignored / target-unmatched` |
+| unknown event recorded as quiet | `unknown / ignored / unsupported-event` |
+| normal `state`, `notify`, known `quiet`, or `deduped` | zero common AI events; existing state/notify owner remains authoritative |
+| stdin read or payload-size rejection before the legacy append seam | common-only `payload-read` or `payload-oversized`; no legacy row existed |
+| blank `ai ingest bell` CLI target rejected before the legacy append seam | common-only `bell / ignored / target-invalid`; exit semantics unchanged |
+
+This is a dual-run migration seam, not a deprecation. Operators who need the
+legacy detailed local view can keep using `ai ingest log`; support archives
+remain count-only for that file. The common journal is the safe correlated
+source for watcher lifecycle and anomalous ingest classification. The file is
+a documented **Deprecate candidate**, not deprecated behavior in this release:
+common diagnostics cover anomalies but not the legacy detailed normal-state
+consumer. Any deprecation/removal requires a separate breaking roadmap with
+consumer migration.
+
+`PROJMUX_FOCUS_DEBUG` remains available with its existing one-line byte
+contract. Focus diagnostics share its request classification seam, but do not
+copy the debug line's raw target, session/window/pane, socket, client, source,
+or kind values into the journal. It is a documented **Deprecate candidate**
+because the common focus transition is the safe support path; its raw routing
+byte contract remains unchanged until a separate breaking deprecation.
+
+The complete file/surface inventory and decisions are maintained in
+[legacy-diagnostics-inventory.md](legacy-diagnostics-inventory.md). These are
+candidates only; Phase 6 removes, renames, ignores, or changes none of them.
 
 ## Explicit support report
 

package/docs/resource-attribution.md

@@ -48,6 +48,13 @@ maps, SQLite, protobuf, or remote telemetry.
 - Snapshot state is `warming`, `ready`, `partial`, or `unavailable`. Bounded
   diagnostics contain scan duration and sampled/skipped/race/permission counts,
   plus identity/delta quality counts; they contain no user payload.
+- The interactive lifecycle has a two-second total budget matching its
+  non-overlapping cadence. Tmux inventory and procfs observe the context
+  directly. Project discovery is included in elapsed-budget classification but
+  its current interface is not cancellable, so an overrun is recognized only
+  when discovery returns. Budget exhaustion remains an unavailable snapshot;
+  it never exposes a partially mutating result. Context-aware project discovery
+  is a separate follow-up.
 
 ## Measurements
 
@@ -172,6 +179,15 @@ Memory, or Name once from the current sample, while later refreshes update row
 values without silently moving focus. Native synchronized frame diffs repaint
 only changed rows and update state/footer chrome together.
 
+The Resource Inspector lifecycle projects only unavailable, partial, stale,
+collection/inventory/discovery error, and scan-budget transitions into the
+private bounded operations journal. A persistent identical transition is
+coalesced until silent recovery; normal samples and refreshes emit nothing.
+The statusbar's separate host-only sampler also emits nothing. Resource events
+never contain the metrics, PID/process data, tmux/project identity, paths,
+titles, commands, snapshot reasons, or arbitrary error strings described by
+this UI model. See [operational-diagnostics.md](operational-diagnostics.md).
+
 The live summary is a fixed five-row bottom dock below the search/list surface:
 one renderer-owned theme-aware divider, then Host, Attributed, Coverage, and
 Sample. It does not scroll or filter with rows. Coverage owns the non-drillable

package/docs/session-restore.md

@@ -137,3 +137,21 @@ longer accepts startup selector flags for session-state restore. It always
 follows the normal empty attach path after resolving the target app session name
 and startup directory. Use `Settings > Session State > Sidebar startup picker` for
 interactive Latest snapshot / Named snapshot / Empty session selection.
+
+## Operational diagnostics
+
+Selected Session State mutations leave one local, best-effort terminal outcome
+in the bounded operational journal. Manual and popup save, Project Settings
+latest/named save, manual/Settings/prune delete, and actual project-startup
+latest/named replay are covered. Restore preview and `--dry-run` remain
+read-only. Successful autosave, disabled/not-due/fresh autosave no-ops, and
+nested snapshot store/replay calls do not write an outcome; an actual autosave
+failure writes one safe error even under `--quiet`.
+
+The outcome contains only a closed operation/source and aggregate window,
+pane, recipe, or deleted-item counts. It never contains a snapshot or project
+path, snapshot content/name, pane cwd/command, agent resume/conversation/session
+ID, or arbitrary metadata. Diagnostics append failure never changes save,
+restore, delete, or quiet-autosave behavior. See
+[operational-diagnostics.md](operational-diagnostics.md) for the complete event
+schema and retention/privacy contract.

package/docs/settings-ia.md

@@ -71,11 +71,11 @@ view-first layout:
   desktop AI notification collapse window. It stores integer seconds and shows
   the effective source; `PROJMUX_TMUX_NOTIFY_DEDUPE_SECONDS` remains the top
   override. The tmux bell fallback keeps its fixed 5 second window.
-- `Settings > Notifications > Delivery sources` shows Codex hooks, Claude, and
-  tmux producer diagnostics, the effective desktop sender override state, and
-  copyable install/remove/dry-run commands. Settings copies command text only;
-  it does not install or remove external notify wiring. The legacy Codex notify
-  source is intentionally omitted from Settings.
+- `Settings > Notifications > Delivery sources` shows Codex, Claude,
+  Antigravity, and tmux producer diagnostics, the effective desktop sender
+  override state, and copyable install/remove/dry-run commands. Settings copies
+  command text only; it does not install or remove external notify wiring. The
+  legacy Codex notify source is intentionally omitted from Settings.
 - `Settings > Notifications > Hook quiet policy` shows Codex/Claude hook
   runtime action values and writes only
   `${XDG_CONFIG_HOME:-$HOME/.config}/projmux/ai-hook-actions.json`. It does not
@@ -97,7 +97,8 @@ view-first layout:
 - `Settings > Labs > Project Hooks` is overview-first. The Labs root opens the
   overview, and the on/off mutation rows live one level deeper.
 - `Settings > AI Settings` is view-first. The root contains `Default split
-  mode`; the detail contains the `Claude`, `Codex`, and `Shell` choices.
+  mode`, `Enabled agents`, and `Resume picker`; the default-mode detail contains
+  the `Claude`, `Codex`, `Antigravity`, `Shell`, and `Selective` choices.
 - `Settings > Project > Project recipe` is the functional label for
   `.projmux/config.toml`. Search still matches `config.toml` as an alias.
 - `Settings > Project > Project recipe` is view-first. The root contains section
@@ -117,7 +118,7 @@ view-first layout:
   visible as warnings and fall back to `en-US`.
 - Global root descriptions keep ownership explicit: Appearance owns language,
   AI badge style, and status/notification icon decoration; Theme owns presets,
-  color tokens, and font hints. About describes only the surface it retains.
+  and color tokens. About describes only the surface it retains.
 - `Settings > About` is intentionally compact: Version, Source, update
   status/actions (including Latest, Update state, Installer, and Release notes
   when available), Welcome, and Quit. It does not reproduce static key,

package/docs/statusbar.md

@@ -122,16 +122,16 @@ bind-key -n MouseDown1Status if-shell -F "#{==:#{mouse_status_range},window}" \
 
 ## Range catalogue
 
-| Range id | Row | Click action                              | Keyboard      |
-| -------- | --- | ----------------------------------------- | ------------- |
-| `session` | 0 | `projmux tmux popup-toggle sessionizer-sidebar` | `prefix s s` |
-| `pwd`     | 0 | show a native-framed current-path popup; no clipboard or tmux buffer copy | `prefix s p`  |
-| `kube`    | 0 | `projmux tmux popup-toggle sessionizer`   | `prefix s k`  |
-| `git`     | 0 | `projmux tmux popup-toggle sessionizer`   | `prefix s g`  |
-| `settings` | 0 | `projmux tmux popup-toggle --client <tty> ai-split-settings` | mouse only; `prefix s s` remains `session` |
-| `resources` | 0 | `projmux tmux popup-toggle --client <tty> resource-inspector` | mouse or custom `Resources:Open`; no default key |
-| `usage`   | 1 | show a native-framed usage HUD popup from cached usage state | `prefix s u`  |
-| `notify`  | 1 | `projmux focus --target <newest> --source status-bar --kind segment-click [--client <tty>]`, then ack on focus success | `prefix s n`  |
+| Range id | Generated row | Click action                              | Keyboard      |
+| -------- | ------------- | ----------------------------------------- | ------------- |
+| `notify`  | `status-format[0]` | `projmux focus --target <newest> --source status-bar --kind segment-click [--client <tty>]`, then ack on focus success | `prefix s n`  |
+| `usage`   | `status-format[0]` | show a native-framed usage HUD popup from cached usage state | `prefix s u`  |
+| `session` | `status-format[1]` | `projmux tmux popup-toggle sessionizer-sidebar` | `prefix s s` |
+| `pwd`     | `status-format[1]` | show a native-framed current-path popup; no clipboard or tmux buffer copy | `prefix s p`  |
+| `kube`    | `status-format[1]` | `projmux tmux popup-toggle sessionizer`   | `prefix s k`  |
+| `git`     | `status-format[1]` | `projmux tmux popup-toggle sessionizer`   | `prefix s g`  |
+| `resources` | `status-format[1]` | `projmux tmux popup-toggle --client <tty> resource-inspector` | mouse or custom `Resources:Open`; no default key |
+| `settings` | `status-format[1]` | `projmux tmux popup-toggle --client <tty> ai-split-settings` | mouse only; `prefix s s` remains `session` |
 
 `notify` reads the pending queue only. For a live pane-state view that is
 independent of queued reminders, use `projmux attention list`. To explain why
@@ -284,9 +284,8 @@ updates the matching live tmux option
 (`@projmux_statusbar_decoration_cwd`, `_git`, or `_notify`) when run inside
 tmux. The legacy `~/.config/projmux/statusbar-decoration` and
 `@projmux_statusbar_decoration` remain fallback defaults for older configs.
-Appearance also shows the effective desired theme font. This is a status row,
-not a font editor: tmux status strings and ANSI output cannot force terminal
-font family or size, so unsupported environments report `not applied`.
+Settings > Theme controls the bottom status bar background through
+`status_background`; `surface` controls popup and native frame backgrounds.
 
 Settings > Labs controls the experimental live resource segment. Its saved
 value is `~/.config/projmux/live-resources`; changing it inside tmux updates

package/docs/upgrading.md

@@ -116,13 +116,14 @@ through separate terminal preset variants.
 
 ### Pane body vs popup backgrounds
 
-The general (pane) background and the popup/chrome background are now driven by
-separate public tokens. The pane body follows `background` (unset keeps the
-terminal default), while the status bar, native popup bodies, and the
-settings/notify/recent/picker frames follow `surface`. Because the `surface`
-fallback equals `background`, leaving both unset looks exactly as before; set
-them to different values to make popups read as a distinct surface from the pane
-body.
+The general pane, bottom status bar, and popup/native frame backgrounds are now
+driven by separate public tokens. The pane body follows `background` (unset
+keeps the terminal default), the status bar follows `status_background`, and
+native popup bodies plus the settings/notify/recent/picker frames follow
+`surface`. Because the `surface` fallback equals `background`, leaving those two
+unset looks exactly as before; set `surface` separately to make popups read as a
+distinct surface from the pane body. Set `status_background` separately to
+repaint only the bottom status bar.
 
 ### Theme font keys removed
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "projmux",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "tmux project session manager",
   "license": "MIT",
   "homepage": "https://github.com/crevissepartners/projmux#readme",
@@ -28,9 +28,9 @@
     "package:npm:pack": "scripts/package-npm.sh --pack"
   },
   "optionalDependencies": {
-    "@projmux/linux-x64": "0.10.0",
-    "@projmux/linux-arm64": "0.10.0",
-    "@projmux/darwin-x64": "0.10.0",
-    "@projmux/darwin-arm64": "0.10.0"
+    "@projmux/linux-x64": "0.10.1",
+    "@projmux/linux-arm64": "0.10.1",
+    "@projmux/darwin-x64": "0.10.1",
+    "@projmux/darwin-arm64": "0.10.1"
   }
 }