projmux 0.12.2 → 0.13.1

package/docs/cli.md

@@ -16,6 +16,25 @@ Prose that a manifest cannot hold -- the help boundary contract, exit codes,
 per-flag behavior, and task-oriented walkthroughs -- lives in the
 [CLI Task Guide](cli-guide.md).
 
+## Selectorless authority
+
+Each label describes what omission means for one graph route; explicit selectors still replace a natural target.
+
+- `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+- `explicit-target` — the route or caller must name the exact target.
+- `refusal` — there is no safe selectorless action; refuse before output or mutation.
+- `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
+Root parser bridges outside the route graph are censused from their parser token lists:
+
+| Bridge | Selectorless authority |
+| --- | --- |
+| `<bare invocation>` | `natural-omitted` |
+| `<root help flag:help>` | `explicit-fan-out` |
+| `<root help flag:h>` | `explicit-fan-out` |
+| `--version` | `explicit-fan-out` |
+| `-version` | `explicit-fan-out` |
+
 ## Commands
 
 ```
@@ -44,7 +63,7 @@ projmux <command> [args...]
 | [`projmux rebind`](#projmux-rebind) | canonical | Rebind a Project to a new absolute root without moving files |
 | [`projmux rename`](#projmux-rename) | canonical | Rename a Projmux resource metadata.name |
 | [`projmux resources`](#projmux-resources) | shortcut | Inspect live Project, Window, and Pane CPU/RSS attribution |
-| [`projmux restore`](#projmux-restore) | canonical | Preview a saved session snapshot restore (--dry-run only in this release) |
+| [`projmux restore`](#projmux-restore) | canonical | Project a saved snapshot into one exact closed Project desired state |
 | [`projmux runtime`](#projmux-runtime) | canonical | Manage the live and ephemeral tmux runtime inventory |
 | [`projmux settings`](#projmux-settings) | shortcut | Configure projmux |
 | [`projmux setup`](#projmux-setup) | canonical | Probe terminal keys or remediate them with setup terminal |
@@ -60,11 +79,17 @@ projmux <command> [args...]
 
 Manage Agent state, topic, integrations, and account usage
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux agent status [get [<agent-ref>] | set <unknown|idle|in_progress|approval_required|input_required|response_complete> [<agent-ref>]] [--agent <ref>]
 projmux agent topic get|clear [<agent-ref>] [--agent <ref>]
 projmux agent topic set <text> [<agent-ref>] [--agent <ref>]
 projmux agent resume <ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
+projmux agent turn start|steer <agent-ref> -- <text>
+projmux agent turn interrupt <agent-ref>
+projmux agent approval review <agent-ref> [--request <normalized-id>]
+projmux agent review [<agent-ref>] [--agent <ref>] [--base <branch> | --commit <sha> | --instructions <text>]
 projmux agent integrate <provider> [--dry-run]
 projmux agent usage [--model <name>] [--window <name>] [--json] [--force]
 ```
@@ -75,16 +100,21 @@ Subcommands:
 | --- | --- |
 | [`projmux agent status`](#projmux-agent-status) | Read or set semantic Agent interaction independently of lifecycle |
 | [`projmux agent topic`](#projmux-agent-topic) | Read, set, or clear one exact Agent topic annotation |
-| [`projmux agent resume`](#projmux-agent-resume) | Rebind an Offline or Failed Agent to a new managed Pane |
+| [`projmux agent resume`](#projmux-agent-resume) | Rebind an Offline or Failed Agent detached on its Window's exact shell or Agent anchor |
+| [`projmux agent turn`](#projmux-agent-turn) | Send, steer, or interrupt one exact native Codex turn |
+| [`projmux agent approval`](#projmux-agent-approval) | Review one exact pending native Codex approval |
+| [`projmux agent review`](#projmux-agent-review) | Start a native review on an exact-bound Codex Agent |
 | [`projmux agent integrate`](#projmux-agent-integrate) | Install or remove provider hook integrations |
 | [`projmux agent usage`](#projmux-agent-usage) | Read provider account usage quota snapshots |
 
-Canonical spelling: `projmux agent status`, `projmux agent topic`, `projmux agent resume`, `projmux agent integrate`, `projmux agent usage`
+Canonical spelling: `projmux agent status`, `projmux agent topic`, `projmux agent resume`, `projmux agent turn start`, `projmux agent turn steer`, `projmux agent turn interrupt`, `projmux agent approval review`, `projmux agent review`, `projmux agent integrate`, `projmux agent usage`
 
 ### `projmux agent status`
 
 Read or set semantic Agent interaction independently of lifecycle
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux agent status [get [<agent-ref>] | set <unknown|idle|in_progress|approval_required|input_required|response_complete> [<agent-ref>]] [--agent <ref>]
 ```
@@ -93,6 +123,8 @@ projmux agent status [get [<agent-ref>] | set <unknown|idle|in_progress|approval
 
 Read, set, or clear one exact Agent topic annotation
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux agent topic get|clear [<agent-ref>] [--agent <ref>]
 projmux agent topic set <text> [<agent-ref>] [--agent <ref>]
@@ -100,16 +132,109 @@ projmux agent topic set <text> [<agent-ref>] [--agent <ref>]
 
 ### `projmux agent resume`
 
-Rebind an Offline or Failed Agent to a new managed Pane
+Rebind an Offline or Failed Agent detached on its Window's exact shell or Agent anchor
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 ```
 projmux agent resume <ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--selector key=value]...
 ```
 
+### `projmux agent turn`
+
+Send, steer, or interrupt one exact native Codex turn
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
+```
+projmux agent turn start|steer <agent-ref> -- <text>
+projmux agent turn interrupt <agent-ref>
+```
+
+Subcommands:
+
+| Route | Summary |
+| --- | --- |
+| [`projmux agent turn start`](#projmux-agent-turn-start) | Send a new turn to one exact idle Codex thread |
+| [`projmux agent turn steer`](#projmux-agent-turn-steer) | Steer one exact current Codex turn |
+| [`projmux agent turn interrupt`](#projmux-agent-turn-interrupt) | Interrupt one exact current Codex turn |
+
+Canonical spelling: `projmux agent turn start`, `projmux agent turn steer`, `projmux agent turn interrupt`
+
+#### `projmux agent turn start`
+
+Send a new turn to one exact idle Codex thread
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
+```
+projmux agent turn start <agent-ref> -- <text>
+```
+
+#### `projmux agent turn steer`
+
+Steer one exact current Codex turn
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
+```
+projmux agent turn steer <agent-ref> -- <text>
+```
+
+#### `projmux agent turn interrupt`
+
+Interrupt one exact current Codex turn
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
+```
+projmux agent turn interrupt <agent-ref>
+```
+
+### `projmux agent approval`
+
+Review one exact pending native Codex approval
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
+```
+projmux agent approval review <agent-ref> [--request <normalized-id>]
+```
+
+Subcommands:
+
+| Route | Summary |
+| --- | --- |
+| [`projmux agent approval review`](#projmux-agent-approval-review) | Review one exact pending native Codex approval |
+
+Canonical spelling: `projmux agent approval review`
+
+#### `projmux agent approval review`
+
+Review one exact pending native Codex approval
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
+```
+projmux agent approval review <agent-ref> [--request <normalized-id>]
+```
+
+### `projmux agent review`
+
+Start a native review on an exact-bound Codex Agent
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
+```
+projmux agent review [<agent-ref>] [--agent <ref>] [--base <branch> | --commit <sha> | --instructions <text>]
+```
+
 ### `projmux agent integrate`
 
 Install or remove provider hook integrations
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux agent integrate <provider> [--dry-run]
 ```
@@ -118,6 +243,8 @@ projmux agent integrate <provider> [--dry-run]
 
 Read provider account usage quota snapshots
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux agent usage [--model <name>] [--window <name>] [--json] [--force]
 ```
@@ -126,6 +253,8 @@ projmux agent usage [--model <name>] [--window <name>] [--json] [--force]
 
 View and manage live tmux pane attention state
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux attention toggle|clear|arm|list|window
 ```
@@ -146,30 +275,38 @@ Canonical spelling: `projmux attention list`, `projmux attention toggle`, `projm
 
 Toggle attention state for a pane
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
-projmux attention toggle
+projmux attention toggle [pane]
 ```
 
 ### `projmux attention clear`
 
 Clear attention state for a pane
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
-projmux attention clear
+projmux attention clear [pane]
 ```
 
 ### `projmux attention arm`
 
 Arm focus-only attention consumption
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
-projmux attention arm
+projmux attention arm [pane]
 ```
 
 ### `projmux attention list`
 
 List live pane attention state
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux attention list
 ```
@@ -178,6 +315,8 @@ projmux attention list
 
 Render window-scoped attention badges
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux attention window
 ```
@@ -186,6 +325,8 @@ projmux attention window
 
 Enter a Project runtime from outside tmux
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux attach project <ref>
 ```
@@ -202,6 +343,8 @@ Canonical spelling: `projmux attach project`
 
 Enter a Project runtime from outside tmux, materializing it when offline
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux attach project <ref>
 ```
@@ -210,6 +353,8 @@ projmux attach project <ref>
 
 Edit AI split-mode settings; render or apply generated tmux configuration
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux config edit [--get|--set <mode>]
 projmux config render standalone|app [--bin <path>]
@@ -230,6 +375,8 @@ Canonical spelling: `projmux config edit`, `projmux config render`, `projmux con
 
 Edit the AI split-mode configuration
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux config edit [--get|--set <mode>]
 ```
@@ -238,6 +385,8 @@ projmux config edit [--get|--set <mode>]
 
 Print a generated tmux config to stdout; writes nothing
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux config render standalone [--bin <path>]
 projmux config render app [--bin <path>]
@@ -254,6 +403,8 @@ Subcommands:
 
 Print the snippet you source from your own tmux.conf
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux config render standalone [--bin <path>]
 ```
@@ -264,6 +415,8 @@ Canonical spelling: `projmux config render`
 
 Print the config the app-owned projmux tmux server runs from
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux config render app [--bin <path>]
 ```
@@ -274,6 +427,8 @@ Canonical spelling: `projmux config render`
 
 Write the generated app tmux config and reload the live projmux server
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux config apply [--bin <path>] [--config <path>] [--socket <name>]
 ```
@@ -282,11 +437,14 @@ projmux config apply [--bin <path>] [--config <path>] [--socket <name>]
 
 Create Projmux resources
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
-projmux create window {--project <ref> | -p <ref>} [--name <name>] [--label key=value]... [-o <mode>] [-- <payload>]
-projmux create pane {--project <ref> | -p <ref>} [--window <ref> | -w <ref>]... [--pane <ref>]... [--create-window] [--placement right|down] [-o <mode>] [-- <payload>]
-projmux create agent --provider <provider> {--project <ref> | -p <ref>} [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--create-window] [--placement right|down] [-o <mode>] [-- <payload>]
-projmux create codex|claude|antigravity {--project <ref> | -p <ref>} [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--create-window] [--placement right|down] [-o <mode>] [-- <payload>]
+projmux create project --root <absolute-path> [--name <name>] [--label key=value]... [-o <mode>]
+projmux create window [--project <ref> | -p <ref>] [--name <name>] [--label key=value]... [-o <mode>] [-- <payload>]
+projmux create pane [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--create-window] [--placement right|down] [-o <mode>] [-- <payload>]
+projmux create agent --provider <provider> [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--create-window] [--placement right|down] [-o <mode>] [-- <payload>]
+projmux create codex|claude|antigravity [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--create-window] [--placement right|down] [-o <mode>] [-- <payload>]
 projmux create notification --text <s> --target <SESSION[:WINDOW[.PANE]]> [--socket <s>]
 projmux create snapshot
 ```
@@ -295,9 +453,10 @@ Subcommands:
 
 | Route | Summary |
 | --- | --- |
+| [`projmux create project`](#projmux-create-project) | Register one exact filesystem path as a Registry Project; no runtime is materialized |
 | [`projmux create window`](#projmux-create-window) | Create a Window and its initial Pane below one Project; the runtime is materialized detached |
-| [`projmux create pane`](#projmux-create-pane) | Create a shell Pane; --project splits the resolved Windows detached, without it the current Window |
-| [`projmux create agent`](#projmux-create-agent) | Create an Agent and its managed Pane; --provider is required, and --project splits the resolved Windows detached |
+| [`projmux create pane`](#projmux-create-pane) | Create a shell Pane detached on an explicit Pane or the Window's exact shell or Agent anchor |
+| [`projmux create agent`](#projmux-create-agent) | Create an Agent detached on an explicit Pane or the Window's exact shell or Agent anchor; --provider is required |
 | [`projmux create notification`](#projmux-create-notification) | Create a pending notification row |
 | [`projmux create snapshot`](#projmux-create-snapshot) | Create a session snapshot |
 
@@ -309,36 +468,52 @@ Provider shortcuts:
 | [`projmux create claude`](#projmux-create-claude) | Provider shortcut for create agent --provider claude |
 | [`projmux create antigravity`](#projmux-create-antigravity) | Provider shortcut for create agent --provider antigravity |
 
-Canonical spelling: `projmux create window`, `projmux create pane`, `projmux create agent`, `projmux create notification`, `projmux create snapshot`, `projmux create codex`, `projmux create claude`, `projmux create antigravity`
+Canonical spelling: `projmux create project`, `projmux create window`, `projmux create pane`, `projmux create agent`, `projmux create notification`, `projmux create snapshot`, `projmux create codex`, `projmux create claude`, `projmux create antigravity`
+
+### `projmux create project`
+
+Register one exact filesystem path as a Registry Project; no runtime is materialized
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
+```
+projmux create project --root <absolute-path> [--name <name>] [--label key=value]... [-o <mode>]
+```
+
+Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
 
 ### `projmux create window`
 
 Create a Window and its initial Pane below one Project; the runtime is materialized detached
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
-projmux create window {--project <ref> | -p <ref>} [--name <name>] [--label key=value]... [-o <mode>] [-- <payload>]
+projmux create window [--project <ref> | -p <ref>] [--name <name>] [--label key=value]... [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`
 
 ### `projmux create pane`
 
-Create a shell Pane; --project splits the resolved Windows detached, without it the current Window
+Create a shell Pane detached on an explicit Pane or the Window's exact shell or Agent anchor
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
-projmux create pane {--project <ref> | -p <ref>} [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
-projmux create pane [--placement right|down] [-o <mode>]
+projmux create pane [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`
 
 ### `projmux create agent`
 
-Create an Agent and its managed Pane; --provider is required, and --project splits the resolved Windows detached
+Create an Agent detached on an explicit Pane or the Window's exact shell or Agent anchor; --provider is required
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
-projmux create agent --provider <provider> {--project <ref> | -p <ref>} [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
-projmux create agent --provider <provider> [--placement right|down] [-o pane-id|none] [-- <payload>]
+projmux create agent --provider <provider> [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`
@@ -347,6 +522,8 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`
 
 Create a pending notification row
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux create notification --text <s> --target <SESSION[:WINDOW[.PANE]]> [--socket <s>]
 ```
@@ -355,6 +532,8 @@ projmux create notification --text <s> --target <SESSION[:WINDOW[.PANE]]> [--soc
 
 Create a session snapshot
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux create snapshot
 ```
@@ -363,9 +542,10 @@ projmux create snapshot
 
 Provider shortcut for create agent --provider codex
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
-projmux create codex {--project <ref> | -p <ref>} [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
-projmux create codex [--placement right|down] [-o pane-id|none] [-- <payload>]
+projmux create codex [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`
@@ -374,9 +554,10 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`
 
 Provider shortcut for create agent --provider claude
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
-projmux create claude {--project <ref> | -p <ref>} [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
-projmux create claude [--placement right|down] [-o pane-id|none] [-- <payload>]
+projmux create claude [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`
@@ -385,9 +566,10 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`
 
 Provider shortcut for create agent --provider antigravity
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
-projmux create antigravity {--project <ref> | -p <ref>} [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
-projmux create antigravity [--placement right|down] [-o pane-id|none] [-- <payload>]
+projmux create antigravity [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`
@@ -396,30 +578,48 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`
 
 Delete Projmux resources with an explicit cascade plan
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
-projmux delete window [<ref>...] [--project <ref> | -p <ref>] [--selector key=value]... [--all] [--dry-run] [--yes]
-projmux delete pane [<ref>...] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--all] [--dry-run] [--yes]
-projmux delete agent [<ref>...] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--all] [--dry-run] [--yes]
+projmux delete project [<ref>...] [--selector key=value]... [--all] [--dry-run] [--yes]
+projmux delete window [<ref>...] [--project <ref> | -p <ref>] [--selector key=value]... [--all] [--socket <name> | --socket-path <absolute>] [--dry-run] [--yes]
+projmux delete pane [<ref>...] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--all] [--socket <name> | --socket-path <absolute>] [--dry-run] [--yes]
+projmux delete agent [<ref>...] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--all] [--socket <name> | --socket-path <absolute>] [--dry-run] [--yes]
 ```
 
 Subcommands:
 
 | Route | Summary |
 | --- | --- |
+| [`projmux delete project`](#projmux-delete-project) | Explicitly unregister Projects and Registry descendants while preserving roots, Git/worktrees, snapshots, and runtime |
 | [`projmux delete window`](#projmux-delete-window) | Delete Registry Windows and every descendant Agent and Pane, killing an exact live tmux mirror when present; no selector inside tmux means the active Window, and --all means every Window in the registry |
 | [`projmux delete pane`](#projmux-delete-pane) | Delete Panes; an Agent-owned current Pane leaves its Agent Offline; no selector inside tmux means the active Pane, and --all means every Pane in the registry |
 | [`projmux delete agent`](#projmux-delete-agent) | Delete Agents and their managed Panes; no selector inside tmux means the active Agent, and --all means every Agent in the registry |
 | [`projmux delete notification`](#projmux-delete-notification) | Delete pending notification rows |
 | [`projmux delete snapshot`](#projmux-delete-snapshot) | Delete saved session snapshots |
 
-Canonical spelling: `projmux delete window`, `projmux delete pane`, `projmux delete agent`, `projmux delete notification`, `projmux delete snapshot`
+Canonical spelling: `projmux delete project`, `projmux delete window`, `projmux delete pane`, `projmux delete agent`, `projmux delete notification`, `projmux delete snapshot`
+
+### `projmux delete project`
+
+Explicitly unregister Projects and Registry descendants while preserving roots, Git/worktrees, snapshots, and runtime
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
+```
+projmux delete project [<ref>...] [--selector key=value]... [--all] [--dry-run] [--yes]
+```
+
+Aliases: `projects`
 
 ### `projmux delete window`
 
 Delete Registry Windows and every descendant Agent and Pane, killing an exact live tmux mirror when present; no selector inside tmux means the active Window, and --all means every Window in the registry
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
-projmux delete window [<ref>...] [--project <ref> | -p <ref>] [--selector key=value]... [--all] [--dry-run] [--yes]
+projmux delete window [<ref>...] [--project <ref> | -p <ref>] [--selector key=value]... [--all] [--socket <name> | --socket-path <absolute>] [--dry-run] [--yes]
 ```
 
 Aliases: `windows`
@@ -428,8 +628,10 @@ Aliases: `windows`
 
 Delete Panes; an Agent-owned current Pane leaves its Agent Offline; no selector inside tmux means the active Pane, and --all means every Pane in the registry
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
-projmux delete pane [<ref>...] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--all] [--dry-run] [--yes]
+projmux delete pane [<ref>...] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--all] [--socket <name> | --socket-path <absolute>] [--dry-run] [--yes]
 ```
 
 Aliases: `panes`
@@ -438,8 +640,10 @@ Aliases: `panes`
 
 Delete Agents and their managed Panes; no selector inside tmux means the active Agent, and --all means every Agent in the registry
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
-projmux delete agent [<ref>...] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--all] [--dry-run] [--yes]
+projmux delete agent [<ref>...] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--all] [--socket <name> | --socket-path <absolute>] [--dry-run] [--yes]
 ```
 
 Aliases: `agents`
@@ -448,6 +652,8 @@ Aliases: `agents`
 
 Delete pending notification rows
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux delete notification
 ```
@@ -458,6 +664,8 @@ Aliases: `notifications`
 
 Delete saved session snapshots
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux delete snapshot
 ```
@@ -468,6 +676,8 @@ Aliases: `snapshots`
 
 Describe one Projmux resource
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux describe project [<ref>] [--project <ref> | -p <ref>] [-o <mode>]
 projmux describe window [<ref>] [--project <ref> | -p <ref>] [-o <mode>]
@@ -480,9 +690,9 @@ Subcommands:
 | Route | Summary |
 | --- | --- |
 | [`projmux describe project`](#projmux-describe-project) | Describe one Project resource; with no selector inside tmux, the active Project |
-| [`projmux describe window`](#projmux-describe-window) | Describe one Window resource; with no selector inside tmux, the active Window |
-| [`projmux describe pane`](#projmux-describe-pane) | Describe one Pane resource; with no selector inside tmux, the active Pane |
-| [`projmux describe agent`](#projmux-describe-agent) | Describe one Agent resource; with no selector inside tmux, the Agent owning the active Pane |
+| [`projmux describe window`](#projmux-describe-window) | Describe one Window resource; inside tmux a reference resolves within the active Project and no selector means the active Window |
+| [`projmux describe pane`](#projmux-describe-pane) | Describe one Pane resource; inside tmux a reference resolves within the active Project and no selector means the active Pane |
+| [`projmux describe agent`](#projmux-describe-agent) | Describe one Agent resource; inside tmux a reference resolves within the active Project and no selector means the Agent owning the active Pane |
 
 Canonical spelling: `projmux describe project`, `projmux describe window`, `projmux describe pane`, `projmux describe agent`
 
@@ -490,6 +700,8 @@ Canonical spelling: `projmux describe project`, `projmux describe window`, `proj
 
 Describe one Project resource; with no selector inside tmux, the active Project
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux describe project [<ref>] [--project <ref> | -p <ref>] [-o <mode>]
 ```
@@ -500,7 +712,9 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
 
 ### `projmux describe window`
 
-Describe one Window resource; with no selector inside tmux, the active Window
+Describe one Window resource; inside tmux a reference resolves within the active Project and no selector means the active Window
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
 projmux describe window [<ref>] [--project <ref> | -p <ref>] [-o <mode>]
@@ -512,7 +726,9 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
 
 ### `projmux describe pane`
 
-Describe one Pane resource; with no selector inside tmux, the active Pane
+Describe one Pane resource; inside tmux a reference resolves within the active Project and no selector means the active Pane
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
 projmux describe pane [<ref>] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [-o <mode>]
@@ -524,7 +740,9 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
 
 ### `projmux describe agent`
 
-Describe one Agent resource; with no selector inside tmux, the Agent owning the active Pane
+Describe one Agent resource; inside tmux a reference resolves within the active Project and no selector means the Agent owning the active Pane
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
 projmux describe agent [<ref>] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [-o <mode>]
@@ -538,6 +756,8 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
 
 Run read-only runtime and integration diagnostics
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux doctor [--json] [--section <name>] [--verbose]
 ```
@@ -546,6 +766,8 @@ projmux doctor [--json] [--section <name>] [--verbose]
 
 Read operational events or create an explicit local support report
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux diagnostics log [--json] [--tail <n>]
 projmux diagnostics agent-hook [--tail <n>] [--json] [--path]
@@ -566,6 +788,8 @@ Canonical spelling: `projmux diagnostics log`, `projmux diagnostics agent-hook`,
 
 Read the bounded local operations journal
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux diagnostics log
 ```
@@ -574,6 +798,8 @@ projmux diagnostics log
 
 Read the bounded Agent hook ingest journal
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux diagnostics agent-hook [--tail <n>] [--json] [--path]
 ```
@@ -582,6 +808,8 @@ projmux diagnostics agent-hook [--tail <n>] [--json] [--path]
 
 Create an explicit redacted local support report
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux diagnostics report
 ```
@@ -590,6 +818,8 @@ projmux diagnostics report
 
 Move the current client to a live resource
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux focus project <ref>
 projmux focus window <ref> {--project <ref> | -p <ref>}
@@ -601,8 +831,8 @@ Subcommands:
 | Route | Summary |
 | --- | --- |
 | [`projmux focus project`](#projmux-focus-project) | Move the current client to an already-live Project; never materializes |
-| [`projmux focus window`](#projmux-focus-window) | Move the current client to an already-live Window; never materializes |
-| [`projmux focus pane`](#projmux-focus-pane) | Move the current client to an already-live Pane; never materializes |
+| [`projmux focus window`](#projmux-focus-window) | Move the current client to an already-live Window in an exact live root session; never materializes |
+| [`projmux focus pane`](#projmux-focus-pane) | Move the current client to an already-live Pane in an exact live root session; never materializes |
 
 Canonical spelling: `projmux focus project`, `projmux focus window`, `projmux focus pane`
 
@@ -610,13 +840,17 @@ Canonical spelling: `projmux focus project`, `projmux focus window`, `projmux fo
 
 Move the current client to an already-live Project; never materializes
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux focus project <ref> [--socket <path>] [--client <tty>] [--json]
 ```
 
 ### `projmux focus window`
 
-Move the current client to an already-live Window; never materializes
+Move the current client to an already-live Window in an exact live root session; never materializes
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 ```
 projmux focus window <ref> {--project <ref> | -p <ref>} [--socket <path>] [--client <tty>] [--json]
@@ -624,7 +858,9 @@ projmux focus window <ref> {--project <ref> | -p <ref>} [--socket <path>] [--cli
 
 ### `projmux focus pane`
 
-Move the current client to an already-live Pane; never materializes
+Move the current client to an already-live Pane in an exact live root session; never materializes
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 ```
 projmux focus pane <ref> {--project <ref> | -p <ref>} {--window <ref> | -w <ref>} [--socket <path>] [--json]
@@ -634,6 +870,8 @@ projmux focus pane <ref> {--project <ref> | -p <ref>} {--window <ref> | -w <ref>
 
 Read Projmux resources by selector
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux get projects [--project <ref> | -p <ref>] [--selector key=value]... [-o <mode>]
 projmux get windows [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--selector key=value]... [--all-projects | -A] [-o <mode>]
@@ -641,6 +879,7 @@ projmux get panes [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [-
 projmux get agents [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--selector key=value]... [--all-projects | -A] [-o <mode>]
 projmux get pane --current -o cwd
 projmux get pane [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [-o <mode>]
+projmux get runtime sessions|windows|panes [--socket <name> | --socket-path <absolute>] [-o json|none]
 ```
 
 Subcommands:
@@ -648,19 +887,22 @@ Subcommands:
 | Route | Summary |
 | --- | --- |
 | [`projmux get projects`](#projmux-get-projects) | List Project resources |
-| [`projmux get windows`](#projmux-get-windows) | List Window resources; inside tmux defaults to the active Project, and --all-projects lists every Project |
-| [`projmux get panes`](#projmux-get-panes) | List Pane resources; inside tmux defaults to the active Project, and --all-projects lists every Project |
-| [`projmux get agents`](#projmux-get-agents) | List Agent resources; inside tmux defaults to the active Project, and --all-projects lists every Project |
+| [`projmux get windows`](#projmux-get-windows) | List Window resources; inside tmux defaults to the active managed root, and --all-projects lists the whole Registry |
+| [`projmux get panes`](#projmux-get-panes) | List Pane resources; inside tmux defaults to the active managed root, and --all-projects lists the whole Registry |
+| [`projmux get agents`](#projmux-get-agents) | List Agent resources; inside tmux defaults to the active managed root, and --all-projects lists the whole Registry |
+| [`projmux get runtime`](#projmux-get-runtime) | List every tmux Session, Window, and Pane on one exact server with its attribution |
 | [`projmux get notifications`](#projmux-get-notifications) | List pending notification rows |
 | [`projmux get snapshots`](#projmux-get-snapshots) | List saved session snapshots |
 | [`projmux get pane`](#projmux-get-pane) | Read one Pane resource; with no selector inside tmux, the active Pane |
 
-Canonical spelling: `projmux get projects`, `projmux get windows`, `projmux get panes`, `projmux get agents`, `projmux get notifications`, `projmux get snapshots`, `projmux get pane`
+Canonical spelling: `projmux get projects`, `projmux get windows`, `projmux get panes`, `projmux get agents`, `projmux get runtime sessions`, `projmux get runtime windows`, `projmux get runtime panes`, `projmux get notifications`, `projmux get snapshots`, `projmux get pane`
 
 ### `projmux get projects`
 
 List Project resources
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux get projects [--project <ref> | -p <ref>] [--selector key=value]... [-o <mode>]
 ```
@@ -671,7 +913,9 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
 
 ### `projmux get windows`
 
-List Window resources; inside tmux defaults to the active Project, and --all-projects lists every Project
+List Window resources; inside tmux defaults to the active managed root, and --all-projects lists the whole Registry
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
 projmux get windows [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--selector key=value]... [--all-projects | -A] [-o <mode>]
@@ -683,7 +927,9 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
 
 ### `projmux get panes`
 
-List Pane resources; inside tmux defaults to the active Project, and --all-projects lists every Project
+List Pane resources; inside tmux defaults to the active managed root, and --all-projects lists the whole Registry
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
 projmux get panes [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--all-projects | -A] [-o <mode>]
@@ -693,7 +939,9 @@ Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
 
 ### `projmux get agents`
 
-List Agent resources; inside tmux defaults to the active Project, and --all-projects lists every Project
+List Agent resources; inside tmux defaults to the active managed root, and --all-projects lists the whole Registry
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
 projmux get agents [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--selector key=value]... [--all-projects | -A] [-o <mode>]
@@ -703,10 +951,70 @@ Aliases: `agent`
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
 
+### `projmux get runtime`
+
+List every tmux Session, Window, and Pane on one exact server with its attribution
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
+```
+projmux get runtime sessions [--socket <name> | --socket-path <absolute>] [-o json|none]
+projmux get runtime windows [--socket <name> | --socket-path <absolute>] [-o json|none]
+projmux get runtime panes [--socket <name> | --socket-path <absolute>] [-o json|none]
+```
+
+Subcommands:
+
+| Route | Summary |
+| --- | --- |
+| [`projmux get runtime sessions`](#projmux-get-runtime-sessions) | List every tmux session on one exact server with its attribution |
+| [`projmux get runtime windows`](#projmux-get-runtime-windows) | List every tmux window on one exact server with its attribution |
+| [`projmux get runtime panes`](#projmux-get-runtime-panes) | List every tmux pane on one exact server with its attribution |
+
+Canonical spelling: `projmux get runtime sessions`, `projmux get runtime windows`, `projmux get runtime panes`
+
+#### `projmux get runtime sessions`
+
+List every tmux session on one exact server with its attribution
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
+```
+projmux get runtime sessions [--socket <name> | --socket-path <absolute>] [-o json|none]
+```
+
+Output modes (`-o`): `json`, `none`
+
+#### `projmux get runtime windows`
+
+List every tmux window on one exact server with its attribution
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
+```
+projmux get runtime windows [--socket <name> | --socket-path <absolute>] [-o json|none]
+```
+
+Output modes (`-o`): `json`, `none`
+
+#### `projmux get runtime panes`
+
+List every tmux pane on one exact server with its attribution
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
+```
+projmux get runtime panes [--socket <name> | --socket-path <absolute>] [-o json|none]
+```
+
+Output modes (`-o`): `json`, `none`
+
 ### `projmux get notifications`
 
 List pending notification rows
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux get notifications
 ```
@@ -717,6 +1025,8 @@ Aliases: `notification`
 
 List saved session snapshots
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux get snapshots
 ```
@@ -727,6 +1037,8 @@ Aliases: `snapshot`
 
 Read one Pane resource; with no selector inside tmux, the active Pane
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux get pane [--current] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [-o <mode>]
 ```
@@ -739,6 +1051,8 @@ Field projections (`-o`): `cwd`
 
 List, edit, validate, and trust lifecycle hook config
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux hook list|edit|validate|trust|untrust
 ```
@@ -759,6 +1073,8 @@ Canonical spelling: `projmux hook list`, `projmux hook edit`, `projmux hook vali
 
 List global and project lifecycle hooks
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux hook list
 ```
@@ -767,6 +1083,8 @@ projmux hook list
 
 Edit lifecycle hook config
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux hook edit
 ```
@@ -775,6 +1093,8 @@ projmux hook edit
 
 Validate lifecycle hook config
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux hook validate
 ```
@@ -783,6 +1103,8 @@ projmux hook validate
 
 Trust the current project hook config
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux hook trust
 ```
@@ -791,6 +1113,8 @@ projmux hook trust
 
 Revoke project hook config trust
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux hook untrust
 ```
@@ -799,6 +1123,8 @@ projmux hook untrust
 
 Manage pending notification workflow state
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux notification ack <id> | --all
 projmux notification reconcile [--json]
@@ -817,6 +1143,8 @@ Canonical spelling: `projmux notification ack`, `projmux notification reconcile`
 
 Acknowledge notification rows
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux notification ack <id> | --all
 ```
@@ -825,6 +1153,8 @@ projmux notification ack <id> | --all
 
 Reconcile the notification queue against live targets
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux notification reconcile [--json]
 ```
@@ -833,6 +1163,8 @@ projmux notification reconcile [--json]
 
 Manage pinned project directories
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux pin project list|add|remove|toggle|clear
 ```
@@ -849,6 +1181,8 @@ Canonical spelling: `projmux pin project`
 
 Manage pinned project directories (canonical spelling)
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux pin project list|add|remove|toggle|clear
 ```
@@ -857,6 +1191,8 @@ projmux pin project list|add|remove|toggle|clear
 
 Prune stale Projects and snapshots
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux prune snapshot [--older-than <duration>]
 projmux prune project --missing --older-than <duration> [--yes]
@@ -875,6 +1211,8 @@ Canonical spelling: `projmux prune project`, `projmux prune snapshot`
 
 Delete Projects whose spec.root has been missing for a bounded age
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux prune project --missing --older-than <duration> [--yes]
 ```
@@ -883,6 +1221,8 @@ projmux prune project --missing --older-than <duration> [--yes]
 
 Inspect or delete preserved session snapshots (canonical spelling)
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux prune snapshot [--older-than <duration>]
 projmux prune snapshot delete <session>...
@@ -894,6 +1234,8 @@ Canonical spelling: `projmux delete snapshot`
 
 Quit the app-owned projmux tmux runtime
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux quit [--yes|--force]
 ```
@@ -902,30 +1244,48 @@ projmux quit [--yes|--force]
 
 Preview or repair Registry and exact tmux resource drift
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux reconcile resources [--dry-run] [--materialize-project <name|uid:uid>] [--socket <name> | --socket-path <absolute>] [-o json]
+projmux reconcile registry [--dry-run] [--source <name|absolute-path>] [--expect-source-checksum <sha256:hex>] [--expect-current-checksum <sha256:hex>] [--socket <name> | --socket-path <absolute>] [-o json]
 ```
 
 Subcommands:
 
 | Route | Summary |
 | --- | --- |
-| [`projmux reconcile resources`](#projmux-reconcile-resources) | Preview or repair safe Registry and tmux UID, owner, and runtime drift on one exact socket |
+| [`projmux reconcile resources`](#projmux-reconcile-resources) | Preview or repair exact anchor-aware Registry and tmux topology on one exact socket |
+| [`projmux reconcile registry`](#projmux-reconcile-registry) | Plan Registry state-loss recovery with zero writes, then restore one explicitly named verified source |
 
-Canonical spelling: `projmux reconcile resources`
+Canonical spelling: `projmux reconcile resources`, `projmux reconcile registry`
 
 ### `projmux reconcile resources`
 
-Preview or repair safe Registry and tmux UID, owner, and runtime drift on one exact socket
+Preview or repair exact anchor-aware Registry and tmux topology on one exact socket
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
 
 ```
 projmux reconcile resources [--dry-run] [--materialize-project <name|uid:uid>] [--socket <name> | --socket-path <absolute>] [-o json]
 ```
 
+### `projmux reconcile registry`
+
+Plan Registry state-loss recovery with zero writes, then restore one explicitly named verified source
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
+```
+projmux reconcile registry [--dry-run] [--source <name|absolute-path>] [--expect-source-checksum <sha256:hex>] [--expect-current-checksum <sha256:hex>] [--socket <name> | --socket-path <absolute>] [-o json]
+```
+
 ## `projmux rebind`
 
 Rebind a Project to a new absolute root without moving files
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux rebind project [<ref>] [--project <ref> | -p <ref>] --root <absolute-path>
 ```
@@ -942,6 +1302,8 @@ Canonical spelling: `projmux rebind project`
 
 Rewrite one Project spec.root; no filesystem move, no heuristic uid merge
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux rebind project [<ref>] [--project <ref> | -p <ref>] --root <absolute-path>
 ```
@@ -950,6 +1312,8 @@ projmux rebind project [<ref>] [--project <ref> | -p <ref>] --root <absolute-pat
 
 Rename a Projmux resource metadata.name
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux rename project [<ref>] [--project <ref> | -p <ref>] --name <name>
 projmux rename window [<ref>] --name <name> [--project <ref> | -p <ref>]
@@ -962,9 +1326,9 @@ Subcommands:
 | Route | Summary |
 | --- | --- |
 | [`projmux rename project`](#projmux-rename-project) | Rename a Projmux Project resource; with no selector inside tmux, the active Project |
-| [`projmux rename window`](#projmux-rename-window) | Rename a Projmux Window resource; with no selector inside tmux, the active Window |
-| [`projmux rename pane`](#projmux-rename-pane) | Rename a Projmux Pane resource; with no selector inside tmux, the active Pane; does not change tmux pane_title |
-| [`projmux rename agent`](#projmux-rename-agent) | Rename an Agent stable resource name without changing its topic, provider, or managed Pane |
+| [`projmux rename window`](#projmux-rename-window) | Rename a Projmux Window resource; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Window |
+| [`projmux rename pane`](#projmux-rename-pane) | Rename a Projmux Pane resource; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Pane; does not change tmux pane_title |
+| [`projmux rename agent`](#projmux-rename-agent) | Rename an Agent stable resource name within the active Project or ControlSession without changing its topic, provider, or managed Pane |
 
 Canonical spelling: `projmux rename project`, `projmux rename window`, `projmux rename pane`, `projmux rename agent`
 
@@ -972,6 +1336,8 @@ Canonical spelling: `projmux rename project`, `projmux rename window`, `projmux
 
 Rename a Projmux Project resource; with no selector inside tmux, the active Project
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux rename project [<ref>] [--project <ref> | -p <ref>] --name <name>
 ```
@@ -980,7 +1346,9 @@ Aliases: `projects`
 
 ### `projmux rename window`
 
-Rename a Projmux Window resource; with no selector inside tmux, the active Window
+Rename a Projmux Window resource; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Window
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
 projmux rename window [<ref>] --name <name> [--project <ref> | -p <ref>]
@@ -990,7 +1358,9 @@ Aliases: `windows`
 
 ### `projmux rename pane`
 
-Rename a Projmux Pane resource; with no selector inside tmux, the active Pane; does not change tmux pane_title
+Rename a Projmux Pane resource; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Pane; does not change tmux pane_title
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
 projmux rename pane [<ref>] --name <name> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
@@ -1000,7 +1370,9 @@ Aliases: `panes`
 
 ### `projmux rename agent`
 
-Rename an Agent stable resource name without changing its topic, provider, or managed Pane
+Rename an Agent stable resource name within the active Project or ControlSession without changing its topic, provider, or managed Pane
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 ```
 projmux rename agent [<ref>] --name <name> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
@@ -1012,40 +1384,49 @@ Aliases: `agents`
 
 Inspect live Project, Window, and Pane CPU/RSS attribution
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux resources
 ```
 
 ## `projmux restore`
 
-Preview a saved session snapshot restore (--dry-run only in this release)
+Project a saved snapshot into one exact closed Project desired state
+
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
 
 ```
-projmux restore snapshot --dry-run [--session <name>]
+projmux restore snapshot --session <name> [--project <ref> | -p <ref>] [--dry-run | --yes] [--client <tmux-client>]
 ```
 
 Subcommands:
 
 | Route | Summary |
 | --- | --- |
-| [`projmux restore snapshot`](#projmux-restore-snapshot) | Preview a saved session snapshot restore; --dry-run is required |
+| [`projmux restore snapshot`](#projmux-restore-snapshot) | Project a saved snapshot into one exact closed Project desired state |
 
 Canonical spelling: `projmux restore snapshot`
 
 ### `projmux restore snapshot`
 
-Preview a saved session snapshot restore; --dry-run is required
+Project a saved snapshot into one exact closed Project desired state
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 ```
-projmux restore snapshot --dry-run [--session <name>]
+projmux restore snapshot --session <name> [--project <ref> | -p <ref>] [--dry-run | --yes] [--client <tmux-client>]
 ```
 
 ## `projmux runtime`
 
 Manage the live and ephemeral tmux runtime inventory
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux runtime sessions [--ui=popup|sidebar]
+projmux runtime diagnostics [--socket <name> | --socket-path <absolute>] [--ui=popup|sidebar]
 projmux runtime attach [--keep=N] [--fallback=home|ephemeral]
 projmux runtime stop [<session>...]
 projmux runtime tag list|toggle|clear
@@ -1057,25 +1438,40 @@ Subcommands:
 | Route | Summary |
 | --- | --- |
 | [`projmux runtime sessions`](#projmux-runtime-sessions) | Pick a live or ephemeral tmux session |
+| [`projmux runtime diagnostics`](#projmux-runtime-diagnostics) | Inspect every tmux object on one exact server, with attribution and safe actions |
 | [`projmux runtime attach`](#projmux-runtime-attach) | Attach a live or ephemeral runtime without Project identity |
 | [`projmux runtime stop`](#projmux-runtime-stop) | Terminate live tmux sessions by tagged selection |
 | [`projmux runtime tag`](#projmux-runtime-tag) | Manage the ephemeral tagged session selection |
 | [`projmux runtime prune`](#projmux-runtime-prune) | Trim old ephemeral tmux sessions |
 
-Canonical spelling: `projmux runtime sessions`, `projmux runtime attach`, `projmux runtime stop`, `projmux runtime tag`, `projmux runtime prune`
+Canonical spelling: `projmux runtime sessions`, `projmux runtime diagnostics`, `projmux runtime attach`, `projmux runtime stop`, `projmux runtime tag`, `projmux runtime prune`
 
 ### `projmux runtime sessions`
 
 Pick a live or ephemeral tmux session
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux runtime sessions
 ```
 
+### `projmux runtime diagnostics`
+
+Inspect every tmux object on one exact server, with attribution and safe actions
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
+```
+projmux runtime diagnostics [--socket <name> | --socket-path <absolute>] [--ui=popup|sidebar]
+```
+
 ### `projmux runtime attach`
 
 Attach a live or ephemeral runtime without Project identity
 
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+
 ```
 projmux runtime attach
 ```
@@ -1084,6 +1480,8 @@ projmux runtime attach
 
 Terminate live tmux sessions by tagged selection
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux runtime stop
 ```
@@ -1092,6 +1490,8 @@ projmux runtime stop
 
 Manage the ephemeral tagged session selection
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux runtime tag
 ```
@@ -1100,6 +1500,8 @@ projmux runtime tag
 
 Trim old ephemeral tmux sessions
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux runtime prune
 ```
@@ -1108,6 +1510,8 @@ projmux runtime prune
 
 Configure projmux
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux settings
 ```
@@ -1116,6 +1520,8 @@ projmux settings
 
 Probe terminal keys or remediate them with setup terminal
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux setup
 projmux setup terminal [terminal] [--apply]
@@ -1133,6 +1539,8 @@ Canonical spelling: `projmux setup terminal`
 
 Show or apply terminal key remediation
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux setup terminal [terminal] [--apply] [--config <path>] [--allow-symlink]
 ```
@@ -1141,6 +1549,8 @@ projmux setup terminal [terminal] [--apply] [--config <path>] [--allow-symlink]
 
 Open the isolated projmux tmux app
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux shell [--session <name>]
 ```
@@ -1149,6 +1559,8 @@ projmux shell [--session <name>]
 
 Pick and open a project tmux session
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux switch [<project>]
 ```
@@ -1159,6 +1571,8 @@ Canonical spelling: `projmux focus project`
 
 Check installer-aware release update status
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux update status|check|apply
 ```
@@ -1177,6 +1591,8 @@ Canonical spelling: `projmux update status`, `projmux update check`, `projmux up
 
 Show read-only update status
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux update status
 ```
@@ -1185,6 +1601,8 @@ projmux update status
 
 Check for a newer release and refresh the cache
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux update check
 ```
@@ -1193,6 +1611,8 @@ projmux update check
 
 Apply an available update
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux update apply
 ```
@@ -1201,6 +1621,8 @@ projmux update apply
 
 Reprint the shell welcome guide
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux welcome [--popup [--force]]
 ```
@@ -1209,6 +1631,8 @@ projmux welcome [--popup [--force]]
 
 Open recent window navigation surfaces
 
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
 ```
 projmux window record|recent
 ```
@@ -1226,6 +1650,8 @@ Canonical spelling: `projmux get windows`, `projmux describe window`, `projmux c
 
 Record the current window into the MRU store
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux window record
 ```
@@ -1236,6 +1662,8 @@ Canonical spelling: `projmux get windows`
 
 Open the recent-window navigation picker
 
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
 ```
 projmux window recent
 ```
@@ -1246,6 +1674,8 @@ Canonical spelling: `projmux get windows`
 
 Show bootstrap help
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux help
 projmux --help
@@ -1256,8 +1686,9 @@ projmux <route> --help
 
 Print the current version
 
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
 ```
 projmux version
 projmux --version
 ```
-