projmux 0.15.2 → 0.16.0

package/docs/cli.md

@@ -39,7 +39,7 @@ Root parser bridges outside the route graph are censused from their parser token
 
 Every route declares one allowed-effect record over seven independent resource axes. A pipe separates conditional success outcomes; preflight refusal remains zero-effect. `domain-effect=null` means the route has no typed extension beyond this resource tuple.
 
-The machine-readable manifest contains 190 route-effect records, including hidden plumbing that the public route sections omit.
+The machine-readable manifest contains 194 route-effect records, including hidden plumbing that the public route sections omit.
 
 | Axis | Closed vocabulary |
 | --- | --- |
@@ -63,7 +63,7 @@ projmux <command> [args...]
 | [`projmux agent`](#projmux-agent) | canonical | Manage Agent state, messages, waits, capabilities, integrations, and account usage |
 | [`projmux attention`](#projmux-attention) | canonical | View and manage live tmux pane attention state |
 | [`projmux attach`](#projmux-attach) | canonical | Enter a Project runtime from outside tmux |
-| [`projmux config`](#projmux-config) | canonical | Edit AI split-mode settings; render or apply generated tmux configuration |
+| [`projmux config`](#projmux-config) | canonical | Edit AI split-mode and enabled-provider settings; render or apply generated tmux configuration |
 | [`projmux create`](#projmux-create) | canonical | Create Projmux resources |
 | [`projmux delete`](#projmux-delete) | canonical | Delete Projmux resources with an explicit cascade plan |
 | [`projmux describe`](#projmux-describe) | canonical | Describe one Projmux resource |
@@ -72,16 +72,17 @@ projmux <command> [args...]
 | [`projmux focus`](#projmux-focus) | canonical | Move the current client to a live resource |
 | [`projmux get`](#projmux-get) | canonical | Read Projmux resources by selector |
 | [`projmux hook`](#projmux-hook) | canonical | List, edit, validate, and trust lifecycle hook config |
+| [`projmux label`](#projmux-label) | canonical | Set or remove Projmux resource metadata.labels after creation |
 | [`projmux notification`](#projmux-notification) | canonical | Manage pending notification workflow state |
 | [`projmux open`](#projmux-open) | canonical | Open a Project runtime and move the current client to it |
+| [`projmux persona`](#projmux-persona) | canonical | List, show, edit, set, and delete Agent persona files |
 | [`projmux pin`](#projmux-pin) | canonical | Manage pinned project directories |
-| [`projmux prune`](#projmux-prune) | canonical | Prune stale Projects and snapshots |
+| [`projmux prune`](#projmux-prune) | canonical | Prune stale Projects and Agents |
 | [`projmux quit`](#projmux-quit) | shortcut | Quit the app-owned projmux tmux runtime |
 | [`projmux reconcile`](#projmux-reconcile) | canonical | Preview or repair Registry and exact tmux resource drift |
 | [`projmux rebind`](#projmux-rebind) | canonical | Rebind a Project to a new absolute root without moving files |
 | [`projmux rename`](#projmux-rename) | canonical | Rename a Projmux resource metadata.name |
 | [`projmux resources`](#projmux-resources) | shortcut | Inspect live Project, Window, and Pane CPU/RSS attribution |
-| [`projmux restore`](#projmux-restore) | canonical | Project a saved snapshot into one exact closed Project desired state |
 | [`projmux runtime`](#projmux-runtime) | canonical | Manage the live and ephemeral tmux runtime inventory |
 | [`projmux settings`](#projmux-settings) | shortcut | Configure projmux |
 | [`projmux setup`](#projmux-setup) | canonical | Probe terminal keys or remediate them with setup terminal |
@@ -118,22 +119,23 @@ projmux agent status [get [<agent-ref>] | set <unknown|idle|in_progress|approval
 projmux agent topic get|clear [<agent-ref>] [--agent <ref>]
 projmux agent topic set <text> [<agent-ref>] [--agent <ref>]
 projmux agent resume <ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
+projmux agent persona attach <agent-ref> <persona> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--yes] [--dry-run] [--socket <name> | --socket-path <absolute>] [-o json]
+projmux agent persona detach <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--yes] [--dry-run] [--socket <name> | --socket-path <absolute>] [-o json]
 projmux agent turn start|steer <agent-ref> -- <text>
 projmux agent turn interrupt <agent-ref>
 projmux agent approval review <agent-ref> [--request <normalized-id>]
 projmux agent review [<agent-ref>] [--agent <ref>] [--base <branch> | --commit <sha> | --instructions <text>]
 projmux agent integrate <codex|claude|antigravity|tmux-bell> [--remove] [--dry-run]
-projmux agent usage [--model <codex|claude|antigravity|all>] [--window <name>] [--json] [--force]
-projmux agent app-server upgrade qualify --receipt <absolute-json>
-projmux agent app-server upgrade plan|apply --request <absolute-json>
-projmux agent app-server upgrade resume|abort --operation <ref>
-projmux agent app-server handover plan|apply --request <absolute-json>
-projmux agent app-server handover resume|abort --operation <ref>
+projmux agent usage [--model <codex|claude|all>] [--window <name>] [--json] [--force]
 projmux agent capabilities [<agent-ref> | --provider <codex|claude|antigravity>] [-o json]
 projmux agent message send <agent-ref> [--source <agent-ref>] [--message-ref <ref>] [--reply-to <ref>] [--ttl <duration>] -- <text>
 projmux agent message status <message-ref> [-o json]
 projmux agent message qualify <claude-agent-ref> --evidence <absolute-private-json> --confirm-isolated-provider-push -o json
 projmux agent wait <agent-ref> [--until idle] [--timeout <duration>] [-o json]
+projmux agent question enable <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
+projmux agent question disable <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
+projmux agent question list <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [-o json]
+projmux agent question answer <agent-ref> <question-id> [--option <n>=<label>]... [--index <n>=<k>]... [--text <n>=<text>]... [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
 ```
 
 Subcommands:
@@ -143,17 +145,18 @@ Subcommands:
 | [`projmux agent status`](#projmux-agent-status) | Read or set semantic Agent interaction independently of lifecycle |
 | [`projmux agent topic`](#projmux-agent-topic) | Read, set, or clear one exact Agent topic annotation |
 | [`projmux agent resume`](#projmux-agent-resume) | Rebind an Offline or Failed Agent detached on its Window's exact shell or Agent anchor |
+| [`projmux agent persona`](#projmux-agent-persona) | Attach or detach a persona on one exact Claude Agent and resume it on the same conversation |
 | [`projmux agent turn`](#projmux-agent-turn) | Send, steer, or interrupt one exact native Codex turn |
 | [`projmux agent approval`](#projmux-agent-approval) | Review one exact pending native Codex approval |
 | [`projmux agent review`](#projmux-agent-review) | Start a native review on an exact-bound Codex Agent |
 | [`projmux agent integrate`](#projmux-agent-integrate) | Install, remove, or preview provider hooks and tmux-bell integration |
 | [`projmux agent usage`](#projmux-agent-usage) | Read provider account usage quota snapshots |
-| [`projmux agent app-server`](#projmux-agent-app-server) | Manage explicitly requested private Codex app-server generation operations |
 | [`projmux agent capabilities`](#projmux-agent-capabilities) | Read static provider support or one exact Agent's Registry-backed runtime eligibility |
 | [`projmux agent message`](#projmux-agent-message) | Exchange bounded untrusted coordination messages; --source selects a source Agent anchor, not caller authentication (default: active Pane) |
 | [`projmux agent wait`](#projmux-agent-wait) | Wait read-only for one exact Agent's Registry-backed idle observation |
+| [`projmux agent question`](#projmux-agent-question) | Answer one exact opted-in Claude Agent's AskUserQuestion prompts from the command line |
 
-Canonical spelling: `projmux agent status`, `projmux agent topic`, `projmux agent resume`, `projmux agent turn start`, `projmux agent turn steer`, `projmux agent turn interrupt`, `projmux agent approval review`, `projmux agent review`, `projmux agent integrate`, `projmux agent usage`, `projmux agent app-server upgrade qualify`, `projmux agent app-server upgrade plan`, `projmux agent app-server upgrade apply`, `projmux agent app-server upgrade resume`, `projmux agent app-server upgrade abort`, `projmux agent app-server handover plan`, `projmux agent app-server handover apply`, `projmux agent app-server handover resume`, `projmux agent app-server handover abort`, `projmux agent capabilities`, `projmux agent message send`, `projmux agent message status`, `projmux agent message qualify`, `projmux agent wait`
+Canonical spelling: `projmux agent status`, `projmux agent topic`, `projmux agent resume`, `projmux agent persona attach`, `projmux agent persona detach`, `projmux agent turn start`, `projmux agent turn steer`, `projmux agent turn interrupt`, `projmux agent approval review`, `projmux agent review`, `projmux agent integrate`, `projmux agent usage`, `projmux agent capabilities`, `projmux agent message send`, `projmux agent message status`, `projmux agent message qualify`, `projmux agent wait`, `projmux agent question enable`, `projmux agent question disable`, `projmux agent question list`, `projmux agent question answer`
 
 ### `projmux agent status`
 
@@ -219,9 +222,9 @@ Allowed effects:
 projmux agent resume <ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--selector key=value]...
 ```
 
-### `projmux agent turn`
+### `projmux agent persona`
 
-Send, steer, or interrupt one exact native Codex turn
+Attach or detach a persona on one exact Claude Agent and resume it on the same conversation
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -237,65 +240,68 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux agent turn start|steer <agent-ref> -- <text>
-projmux agent turn interrupt <agent-ref>
+projmux agent persona attach <agent-ref> <persona> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--yes] [--dry-run] [--socket <name> | --socket-path <absolute>] [-o json]
+projmux agent persona detach <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--yes] [--dry-run] [--socket <name> | --socket-path <absolute>] [-o json]
 ```
 
 Subcommands:
 
 | Route | Summary |
 | --- | --- |
-| [`projmux agent turn start`](#projmux-agent-turn-start) | Send a new turn to one exact idle Codex thread |
-| [`projmux agent turn steer`](#projmux-agent-turn-steer) | Request provider acceptance for one exact current Codex turn; delivery remains unconfirmed |
-| [`projmux agent turn interrupt`](#projmux-agent-turn-interrupt) | Interrupt one exact current Codex turn |
+| [`projmux agent persona attach`](#projmux-agent-persona-attach) | Give one exact Claude Agent a persona and restart it on the same conversation |
+| [`projmux agent persona detach`](#projmux-agent-persona-detach) | Take the persona off one exact Claude Agent and restart it on the same conversation |
 
-Canonical spelling: `projmux agent turn start`, `projmux agent turn steer`, `projmux agent turn interrupt`
+Canonical spelling: `projmux agent persona attach`, `projmux agent persona detach`
 
-#### `projmux agent turn start`
+#### `projmux agent persona attach`
 
-Send a new turn to one exact idle Codex thread
+Give one exact Claude Agent a persona and restart it on the same conversation
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 Allowed effects:
 
-- `identity=unchanged`
+- `identity=unchanged|reused`
 - `address=unchanged`
-- `topology=unchanged`
-- `desired-state=unchanged`
-- `runtime=unchanged`
+- `topology=unchanged|replaced`
+- `desired-state=unchanged|replaced`
+- `runtime=unchanged|materialized`
 - `focus=unchanged`
 - `cardinality=exact-one`
 - `domain-effect=null`
 
 ```
-projmux agent turn start <agent-ref> -- <text>
+projmux agent persona attach <agent-ref> <persona> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--yes] [--dry-run] [--socket <name> | --socket-path <absolute>] [-o json]
 ```
 
-#### `projmux agent turn steer`
+Output modes (`-o`): `json`
 
-Request provider acceptance for one exact current Codex turn; delivery remains unconfirmed
+#### `projmux agent persona detach`
+
+Take the persona off one exact Claude Agent and restart it on the same conversation
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 Allowed effects:
 
-- `identity=unchanged`
+- `identity=unchanged|reused`
 - `address=unchanged`
-- `topology=unchanged`
-- `desired-state=unchanged`
-- `runtime=unchanged`
+- `topology=unchanged|replaced`
+- `desired-state=unchanged|replaced`
+- `runtime=unchanged|materialized`
 - `focus=unchanged`
 - `cardinality=exact-one`
 - `domain-effect=null`
 
 ```
-projmux agent turn steer <agent-ref> -- <text>
+projmux agent persona detach <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--yes] [--dry-run] [--socket <name> | --socket-path <absolute>] [-o json]
 ```
 
-#### `projmux agent turn interrupt`
+Output modes (`-o`): `json`
 
-Interrupt one exact current Codex turn
+### `projmux agent turn`
+
+Send, steer, or interrupt one exact native Codex turn
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -311,41 +317,23 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
+projmux agent turn start|steer <agent-ref> -- <text>
 projmux agent turn interrupt <agent-ref>
 ```
 
-### `projmux agent approval`
-
-Review one exact pending native Codex approval
-
-Selectorless authority: `explicit-target` — the route or caller must name the exact target.
-
-Allowed effects:
-
-- `identity=unchanged`
-- `address=unchanged`
-- `topology=unchanged`
-- `desired-state=unchanged`
-- `runtime=unchanged`
-- `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=null`
-
-```
-projmux agent approval review <agent-ref> [--request <normalized-id>]
-```
-
 Subcommands:
 
 | Route | Summary |
 | --- | --- |
-| [`projmux agent approval review`](#projmux-agent-approval-review) | Review one exact pending native Codex approval |
+| [`projmux agent turn start`](#projmux-agent-turn-start) | Send a new turn to one exact idle Codex thread |
+| [`projmux agent turn steer`](#projmux-agent-turn-steer) | Request provider acceptance for one exact current Codex turn; delivery remains unconfirmed |
+| [`projmux agent turn interrupt`](#projmux-agent-turn-interrupt) | Interrupt one exact current Codex turn |
 
-Canonical spelling: `projmux agent approval review`
+Canonical spelling: `projmux agent turn start`, `projmux agent turn steer`, `projmux agent turn interrupt`
 
-#### `projmux agent approval review`
+#### `projmux agent turn start`
 
-Review one exact pending native Codex approval
+Send a new turn to one exact idle Codex thread
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -357,37 +345,16 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=null`
-
-```
-projmux agent approval review <agent-ref> [--request <normalized-id>]
-```
-
-### `projmux agent review`
-
-Start a native review on an exact-bound Codex Agent
-
-Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
-
-Allowed effects:
-
-- `identity=unchanged`
-- `address=unchanged`
-- `topology=unchanged`
-- `desired-state=unchanged`
-- `runtime=unchanged`
-- `focus=unchanged`
-- `cardinality=unchanged`
+- `cardinality=exact-one`
 - `domain-effect=null`
 
 ```
-projmux agent review [<agent-ref>] [--agent <ref>] [--base <branch> | --commit <sha> | --instructions <text>]
+projmux agent turn start <agent-ref> -- <text>
 ```
 
-### `projmux agent integrate`
+#### `projmux agent turn steer`
 
-Install, remove, or preview provider hooks and tmux-bell integration
+Request provider acceptance for one exact current Codex turn; delivery remains unconfirmed
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -399,39 +366,18 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=null`
-
-```
-projmux agent integrate <codex|claude|antigravity|tmux-bell> [--remove] [--dry-run]
-```
-
-### `projmux agent usage`
-
-Read provider account usage quota snapshots
-
-Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
-
-Allowed effects:
-
-- `identity=unchanged`
-- `address=unchanged`
-- `topology=unchanged`
-- `desired-state=unchanged`
-- `runtime=unchanged`
-- `focus=unchanged`
-- `cardinality=unchanged`
+- `cardinality=exact-one`
 - `domain-effect=null`
 
 ```
-projmux agent usage [--model <codex|claude|antigravity|all>] [--window <name>] [--json] [--force]
+projmux agent turn steer <agent-ref> -- <text>
 ```
 
-### `projmux agent app-server`
+#### `projmux agent turn interrupt`
 
-Manage explicitly requested private Codex app-server generation operations
+Interrupt one exact current Codex turn
 
-Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 Allowed effects:
 
@@ -441,27 +387,18 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=unchanged`
+- `cardinality=exact-one`
 - `domain-effect=null`
 
 ```
-projmux agent app-server
+projmux agent turn interrupt <agent-ref>
 ```
 
-Subcommands:
-
-| Route | Summary |
-| --- | --- |
-| [`projmux agent app-server upgrade`](#projmux-agent-app-server-upgrade) | Plan, apply, resume, or abort one exact rolling generation operation |
-| [`projmux agent app-server handover`](#projmux-agent-app-server-handover) | Plan, apply, resume, or abort one exact generation-wide handover |
-
-Canonical spelling: `projmux agent app-server upgrade qualify`, `projmux agent app-server upgrade plan`, `projmux agent app-server upgrade apply`, `projmux agent app-server upgrade resume`, `projmux agent app-server upgrade abort`, `projmux agent app-server handover plan`, `projmux agent app-server handover apply`, `projmux agent app-server handover resume`, `projmux agent app-server handover abort`
-
-#### `projmux agent app-server upgrade`
+### `projmux agent approval`
 
-Plan, apply, resume, or abort one exact rolling generation operation
+Review one exact pending native Codex approval
 
-Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 Allowed effects:
 
@@ -475,24 +412,20 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux agent app-server upgrade
+projmux agent approval review <agent-ref> [--request <normalized-id>]
 ```
 
 Subcommands:
 
 | Route | Summary |
 | --- | --- |
-| [`projmux agent app-server upgrade qualify`](#projmux-agent-app-server-upgrade-qualify) | Install one measured version-pair qualification receipt for the generation entry paths |
-| [`projmux agent app-server upgrade plan`](#projmux-agent-app-server-upgrade-plan) | Read the mutation-zero plan for one exact private generation upgrade |
-| [`projmux agent app-server upgrade apply`](#projmux-agent-app-server-upgrade-apply) | Apply one exact crash-resumable private generation admission switch |
-| [`projmux agent app-server upgrade resume`](#projmux-agent-app-server-upgrade-resume) | Resume one exact durable rolling generation operation |
-| [`projmux agent app-server upgrade abort`](#projmux-agent-app-server-upgrade-abort) | Abort one pre-admission operation and clean only its exact candidate |
+| [`projmux agent approval review`](#projmux-agent-approval-review) | Review one exact pending native Codex approval |
 
-Canonical spelling: `projmux agent app-server upgrade qualify`, `projmux agent app-server upgrade plan`, `projmux agent app-server upgrade apply`, `projmux agent app-server upgrade resume`, `projmux agent app-server upgrade abort`
+Canonical spelling: `projmux agent approval review`
 
-##### `projmux agent app-server upgrade qualify`
+#### `projmux agent approval review`
 
-Install one measured version-pair qualification receipt for the generation entry paths
+Review one exact pending native Codex approval
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -508,14 +441,14 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux agent app-server upgrade qualify --receipt <absolute-json>
+projmux agent approval review <agent-ref> [--request <normalized-id>]
 ```
 
-##### `projmux agent app-server upgrade plan`
+### `projmux agent review`
 
-Read the mutation-zero plan for one exact private generation upgrade
+Start a native review on an exact-bound Codex Agent
 
-Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 Allowed effects:
 
@@ -529,12 +462,12 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux agent app-server upgrade plan --request <absolute-json>
+projmux agent review [<agent-ref>] [--agent <ref>] [--base <branch> | --commit <sha> | --instructions <text>]
 ```
 
-##### `projmux agent app-server upgrade apply`
+### `projmux agent integrate`
 
-Apply one exact crash-resumable private generation admission switch
+Install, remove, or preview provider hooks and tmux-bell integration
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -550,14 +483,14 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux agent app-server upgrade apply --request <absolute-json>
+projmux agent integrate <codex|claude|antigravity|tmux-bell> [--remove] [--dry-run]
 ```
 
-##### `projmux agent app-server upgrade resume`
+### `projmux agent usage`
 
-Resume one exact durable rolling generation operation
+Read provider account usage quota snapshots
 
-Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
 
 Allowed effects:
 
@@ -571,14 +504,14 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux agent app-server upgrade resume --operation <ref>
+projmux agent usage [--model <codex|claude|all>] [--window <name>] [--json] [--force]
 ```
 
-##### `projmux agent app-server upgrade abort`
+### `projmux agent capabilities`
 
-Abort one pre-admission operation and clean only its exact candidate
+Read static provider support or one exact Agent's Registry-backed runtime eligibility
 
-Selectorless authority: `explicit-target` — the route or caller must name the exact target.
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 Allowed effects:
 
@@ -588,16 +521,18 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=unchanged`
+- `cardinality=exact-one`
 - `domain-effect=null`
 
 ```
-projmux agent app-server upgrade abort --operation <ref>
+projmux agent capabilities [<agent-ref> | --provider <codex|claude|antigravity>] [-o json]
 ```
 
-#### `projmux agent app-server handover`
+Output modes (`-o`): `json`
+
+### `projmux agent message`
 
-Plan, apply, resume, or abort one exact generation-wide handover
+Exchange bounded untrusted coordination messages; --source selects a source Agent anchor, not caller authentication (default: active Pane)
 
 Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
 
@@ -609,27 +544,28 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=null`
+- `cardinality=exact-one`
+- `domain-effect=agent-delivery`
 
 ```
-projmux agent app-server handover
+projmux agent message send <agent-ref> [--source <agent-ref>] [--message-ref <ref>] [--reply-to <ref>] [--ttl <duration>] -- <text>
+projmux agent message status <message-ref> [-o json]
+projmux agent message qualify <claude-agent-ref> --evidence <absolute-private-json> --confirm-isolated-provider-push -o json
 ```
 
 Subcommands:
 
 | Route | Summary |
 | --- | --- |
-| [`projmux agent app-server handover plan`](#projmux-agent-app-server-handover-plan) | Read the exact target-set generation handover plan |
-| [`projmux agent app-server handover apply`](#projmux-agent-app-server-handover-apply) | Apply one crash-resumable generation-wide handover |
-| [`projmux agent app-server handover resume`](#projmux-agent-app-server-handover-resume) | Resume one exact durable generation handover |
-| [`projmux agent app-server handover abort`](#projmux-agent-app-server-handover-abort) | Abort one exact pre-stop generation handover |
+| [`projmux agent message send`](#projmux-agent-message-send) | Submit bounded peer coordination; --source selects a source Agent anchor, not caller authentication (default: active Pane); exits nonzero after printing a failed, refused, expired, or stale receipt |
+| [`projmux agent message status`](#projmux-agent-message-status) | Read a payload-free broker delivery receipt |
+| [`projmux agent message qualify`](#projmux-agent-message-qualify) | Explicitly qualify one exact Claude target using owned current-version isolation evidence and one marker push |
 
-Canonical spelling: `projmux agent app-server handover plan`, `projmux agent app-server handover apply`, `projmux agent app-server handover resume`, `projmux agent app-server handover abort`
+Canonical spelling: `projmux agent message send`, `projmux agent message status`, `projmux agent message qualify`
 
-##### `projmux agent app-server handover plan`
+#### `projmux agent message send`
 
-Read the exact target-set generation handover plan
+Submit bounded peer coordination; --source selects a source Agent anchor, not caller authentication (default: active Pane); exits nonzero after printing a failed, refused, expired, or stale receipt
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -641,16 +577,16 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=null`
+- `cardinality=exact-one`
+- `domain-effect=agent-delivery`
 
 ```
-projmux agent app-server handover plan --request <absolute-json>
+projmux agent message send <agent-ref> [--source <agent-ref>] [--message-ref <ref>] [--reply-to <ref>] [--ttl <duration>] -- <text>
 ```
 
-##### `projmux agent app-server handover apply`
+#### `projmux agent message status`
 
-Apply one crash-resumable generation-wide handover
+Read a payload-free broker delivery receipt
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -663,36 +599,17 @@ Allowed effects:
 - `runtime=unchanged`
 - `focus=unchanged`
 - `cardinality=unchanged`
-- `domain-effect=null`
+- `domain-effect=agent-delivery`
 
 ```
-projmux agent app-server handover apply --request <absolute-json>
+projmux agent message status <message-ref> [-o json]
 ```
 
-##### `projmux agent app-server handover resume`
-
-Resume one exact durable generation handover
-
-Selectorless authority: `explicit-target` — the route or caller must name the exact target.
-
-Allowed effects:
-
-- `identity=unchanged`
-- `address=unchanged`
-- `topology=unchanged`
-- `desired-state=unchanged`
-- `runtime=unchanged`
-- `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=null`
-
-```
-projmux agent app-server handover resume --operation <ref>
-```
+Output modes (`-o`): `json`
 
-##### `projmux agent app-server handover abort`
+#### `projmux agent message qualify`
 
-Abort one exact pre-stop generation handover
+Explicitly qualify one exact Claude target using owned current-version isolation evidence and one marker push
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -704,18 +621,20 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=null`
+- `cardinality=exact-one`
+- `domain-effect=agent-delivery`
 
 ```
-projmux agent app-server handover abort --operation <ref>
+projmux agent message qualify <claude-agent-ref> --evidence <absolute-private-json> --confirm-isolated-provider-push -o json
 ```
 
-### `projmux agent capabilities`
+Output modes (`-o`): `json`
 
-Read static provider support or one exact Agent's Registry-backed runtime eligibility
+### `projmux agent wait`
 
-Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+Wait read-only for one exact Agent's Registry-backed idle observation
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 Allowed effects:
 
@@ -729,16 +648,16 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux agent capabilities [<agent-ref> | --provider <codex|claude|antigravity>] [-o json]
+projmux agent wait <agent-ref> [--until idle] [--timeout <duration>] [-o json]
 ```
 
 Output modes (`-o`): `json`
 
-### `projmux agent message`
+### `projmux agent question`
 
-Exchange bounded untrusted coordination messages; --source selects a source Agent anchor, not caller authentication (default: active Pane)
+Answer one exact opted-in Claude Agent's AskUserQuestion prompts from the command line
 
-Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 Allowed effects:
 
@@ -749,27 +668,29 @@ Allowed effects:
 - `runtime=unchanged`
 - `focus=unchanged`
 - `cardinality=exact-one`
-- `domain-effect=agent-delivery`
+- `domain-effect=null`
 
 ```
-projmux agent message send <agent-ref> [--source <agent-ref>] [--message-ref <ref>] [--reply-to <ref>] [--ttl <duration>] -- <text>
-projmux agent message status <message-ref> [-o json]
-projmux agent message qualify <claude-agent-ref> --evidence <absolute-private-json> --confirm-isolated-provider-push -o json
+projmux agent question enable <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
+projmux agent question disable <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
+projmux agent question list <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [-o json]
+projmux agent question answer <agent-ref> <question-id> [--option <n>=<label>]... [--index <n>=<k>]... [--text <n>=<text>]... [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
 ```
 
 Subcommands:
 
 | Route | Summary |
 | --- | --- |
-| [`projmux agent message send`](#projmux-agent-message-send) | Submit bounded peer coordination; --source selects a source Agent anchor, not caller authentication (default: active Pane) |
-| [`projmux agent message status`](#projmux-agent-message-status) | Read a payload-free broker delivery receipt |
-| [`projmux agent message qualify`](#projmux-agent-message-qualify) | Explicitly qualify one exact Claude target using owned current-version isolation evidence and one marker push |
+| [`projmux agent question enable`](#projmux-agent-question-enable) | Opt one exact Claude Agent into answering its AskUserQuestion prompts from the command line |
+| [`projmux agent question disable`](#projmux-agent-question-disable) | Opt one exact Claude Agent out and hand its waiting questions back to its own prompt |
+| [`projmux agent question list`](#projmux-agent-question-list) | List one exact Claude Agent's waiting and recent questions |
+| [`projmux agent question answer`](#projmux-agent-question-answer) | Answer one waiting question by option label, option number, or explicit free text |
 
-Canonical spelling: `projmux agent message send`, `projmux agent message status`, `projmux agent message qualify`
+Canonical spelling: `projmux agent question enable`, `projmux agent question disable`, `projmux agent question list`, `projmux agent question answer`
 
-#### `projmux agent message send`
+#### `projmux agent question enable`
 
-Submit bounded peer coordination; --source selects a source Agent anchor, not caller authentication (default: active Pane)
+Opt one exact Claude Agent into answering its AskUserQuestion prompts from the command line
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -782,15 +703,15 @@ Allowed effects:
 - `runtime=unchanged`
 - `focus=unchanged`
 - `cardinality=exact-one`
-- `domain-effect=agent-delivery`
+- `domain-effect=null`
 
 ```
-projmux agent message send <agent-ref> [--source <agent-ref>] [--message-ref <ref>] [--reply-to <ref>] [--ttl <duration>] -- <text>
+projmux agent question enable <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
 ```
 
-#### `projmux agent message status`
+#### `projmux agent question disable`
 
-Read a payload-free broker delivery receipt
+Opt one exact Claude Agent out and hand its waiting questions back to its own prompt
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -802,18 +723,16 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=agent-delivery`
+- `cardinality=exact-one`
+- `domain-effect=null`
 
 ```
-projmux agent message status <message-ref> [-o json]
+projmux agent question disable <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
 ```
 
-Output modes (`-o`): `json`
-
-#### `projmux agent message qualify`
+#### `projmux agent question list`
 
-Explicitly qualify one exact Claude target using owned current-version isolation evidence and one marker push
+List one exact Claude Agent's waiting and recent questions
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -826,17 +745,17 @@ Allowed effects:
 - `runtime=unchanged`
 - `focus=unchanged`
 - `cardinality=exact-one`
-- `domain-effect=agent-delivery`
+- `domain-effect=null`
 
 ```
-projmux agent message qualify <claude-agent-ref> --evidence <absolute-private-json> --confirm-isolated-provider-push -o json
+projmux agent question list <agent-ref> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [-o json]
 ```
 
 Output modes (`-o`): `json`
 
-### `projmux agent wait`
+#### `projmux agent question answer`
 
-Wait read-only for one exact Agent's Registry-backed idle observation
+Answer one waiting question by option label, option number, or explicit free text
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -852,11 +771,9 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux agent wait <agent-ref> [--until idle] [--timeout <duration>] [-o json]
+projmux agent question answer <agent-ref> <question-id> [--option <n>=<label>]... [--index <n>=<k>]... [--text <n>=<text>]... [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
 ```
 
-Output modes (`-o`): `json`
-
 ## `projmux attention`
 
 View and manage live tmux pane attention state
@@ -1047,7 +964,7 @@ projmux attach project <ref>
 
 ## `projmux config`
 
-Edit AI split-mode settings; render or apply generated tmux configuration
+Edit AI split-mode and enabled-provider settings; render or apply generated tmux configuration
 
 Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
 
@@ -1064,6 +981,7 @@ Allowed effects:
 
 ```
 projmux config edit [--get|--set <mode>]
+projmux config providers [--enable <id>|--disable <id>]
 projmux config render standalone|app [--bin <path>]
 projmux config apply [--bin <path>] [--config <path>] [--socket <name>]
 ```
@@ -1073,10 +991,11 @@ Subcommands:
 | Route | Summary |
 | --- | --- |
 | [`projmux config edit`](#projmux-config-edit) | Edit the AI split-mode configuration |
+| [`projmux config providers`](#projmux-config-providers) | List AI providers as enabled or disabled; --enable or --disable changes one |
 | [`projmux config render`](#projmux-config-render) | Print a generated tmux config to stdout; writes nothing |
 | [`projmux config apply`](#projmux-config-apply) | Write the generated app tmux config and reload the live projmux server |
 
-Canonical spelling: `projmux config edit`, `projmux config render`, `projmux config apply`
+Canonical spelling: `projmux config edit`, `projmux config providers`, `projmux config render`, `projmux config apply`
 
 ### `projmux config edit`
 
@@ -1099,9 +1018,32 @@ Allowed effects:
 projmux config edit [--get|--set <mode>]
 ```
 
-### `projmux config render`
+### `projmux config providers`
 
-Print a generated tmux config to stdout; writes nothing
+List AI providers as enabled or disabled; --enable or --disable changes one
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=unchanged`
+- `domain-effect=null`
+
+```
+projmux config providers
+projmux config providers --enable <id>
+projmux config providers --disable <id>
+```
+
+### `projmux config render`
+
+Print a generated tmux config to stdout; writes nothing
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -1214,13 +1156,12 @@ Allowed effects:
 
 ```
 projmux create project --root <absolute-path> [--name <name>] [--label key=value]... [-o <mode>]
-projmux create window [--project <ref> | -p <ref>] [--name <name>] [--label key=value]... [-o <mode>] [-- <payload>]
-projmux create pane [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--create-window] [--all-windows | --primary-window] [--placement right|down] [-o <mode>] [-- <payload>]
-projmux create agent --provider <provider> [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--interactive-only] [--window <ref> | -w <ref>]... [--pane <ref>]... [--create-window] [--all-windows | --primary-window] [--placement right|down] [-o <mode>] [-- <payload>]
-projmux create codex [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--interactive-only] [--window <ref> | -w <ref>]... [--create-window] [--all-windows | --primary-window] [--placement right|down] [-o <mode>] [-- <payload>]
-projmux create claude|antigravity [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--create-window] [--all-windows | --primary-window] [--placement right|down] [-o <mode>] [-- <payload>]
+projmux create window [--project <ref> | -p <ref>] [--provider shell|<provider>] [--name <name>] [--label key=value]... [-o <mode>] [-- <payload>]
+projmux create pane [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--create-window] [--all-windows | --primary-window] [--placement right|down] [--cwd-from project|pane] [-o <mode>] [-- <payload>]
+projmux create agent --provider <provider> [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--interactive-only] [--model <model>] [--effort <level>] [--persona <name>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--create-window] [--all-windows | --primary-window] [--placement right|down] [--cwd-from project|pane] [-o <mode>] [-- <payload>]
+projmux create codex [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--interactive-only] [--persona <name>] [--window <ref> | -w <ref>]... [--create-window] [--all-windows | --primary-window] [--placement right|down] [--cwd-from project|pane] [-o <mode>] [-- <payload>]
+projmux create claude|antigravity [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--create-window] [--all-windows | --primary-window] [--placement right|down] [--cwd-from project|pane] [-o <mode>] [-- <payload>]
 projmux create notification --text <s> --target <SESSION[:WINDOW[.PANE]]> [--socket <s>]
-projmux create snapshot
 ```
 
 Subcommands:
@@ -1228,11 +1169,10 @@ Subcommands:
 | Route | Summary |
 | --- | --- |
 | [`projmux create project`](#projmux-create-project) | Register one exact filesystem path as a Registry Project; no runtime is materialized |
-| [`projmux create window`](#projmux-create-window) | Create a Window and its initial Pane below one Project; the runtime is materialized detached |
+| [`projmux create window`](#projmux-create-window) | Create a Window below one Project, opening on a shell Pane or on one Agent; the runtime is materialized detached |
 | [`projmux create pane`](#projmux-create-pane) | Create a shell Pane detached on an explicit Pane or the Window's exact shell or Agent anchor |
 | [`projmux create agent`](#projmux-create-agent) | Create an Agent detached on an explicit Pane or the Window's exact shell or Agent anchor; --provider is required |
 | [`projmux create notification`](#projmux-create-notification) | Create a pending notification row |
-| [`projmux create snapshot`](#projmux-create-snapshot) | Create a session snapshot |
 
 Provider shortcuts:
 
@@ -1242,7 +1182,7 @@ Provider shortcuts:
 | [`projmux create claude`](#projmux-create-claude) | Provider shortcut for create agent --provider claude |
 | [`projmux create antigravity`](#projmux-create-antigravity) | Provider shortcut for create agent --provider antigravity |
 
-Canonical spelling: `projmux create project`, `projmux create window`, `projmux create pane`, `projmux create agent`, `projmux create notification`, `projmux create snapshot`, `projmux create codex`, `projmux create claude`, `projmux create antigravity`
+Canonical spelling: `projmux create project`, `projmux create window`, `projmux create pane`, `projmux create agent`, `projmux create notification`, `projmux create codex`, `projmux create claude`, `projmux create antigravity`
 
 ### `projmux create project`
 
@@ -1265,11 +1205,15 @@ Allowed effects:
 projmux create project --root <absolute-path> [--name <name>] [--label key=value]... [-o <mode>]
 ```
 
+Without `--name` a new Project is named after its root directory, sanitized into a valid name (`my repo` becomes `my-repo`). When that basename is empty (the filesystem root) or another Project already holds it, the Project is named by its exact uid instead; no numbered variant is ever invented.
+
+An explicit `--name` that another Project holds exits 2 with no Registry write. A root that is already registered reuses its Project; an explicit `--name` there must match the stored name.
+
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`, `receipt`
 
 ### `projmux create window`
 
-Create a Window and its initial Pane below one Project; the runtime is materialized detached
+Create a Window below one Project, opening on a shell Pane or on one Agent; the runtime is materialized detached
 
 Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
@@ -1285,7 +1229,7 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux create window [--project <ref> | -p <ref>] [--name <name>] [--label key=value]... [-o <mode>] [-- <payload>]
+projmux create window [--project <ref> | -p <ref>] [--provider shell|<provider>] [--name <name>] [--label key=value]... [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`, `receipt`
@@ -1308,7 +1252,7 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux create pane [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--all-windows | --primary-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
+projmux create pane [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--all-windows | --primary-window] [--name <name>] [--label key=value]... [--placement right|down] [--cwd-from project|pane] [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`, `receipt`
@@ -1331,7 +1275,7 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux create agent --provider <provider> [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--interactive-only] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--all-windows | --primary-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
+projmux create agent --provider <provider> [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--interactive-only] [--model <model>] [--effort <level>] [--persona <name>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--all-windows | --primary-window] [--name <name>] [--label key=value]... [--placement right|down] [--cwd-from project|pane] [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`, `receipt`
@@ -1357,27 +1301,6 @@ Allowed effects:
 projmux create notification --text <s> --target <SESSION[:WINDOW[.PANE]]> [--socket <s>]
 ```
 
-### `projmux create snapshot`
-
-Create a session snapshot
-
-Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
-
-Allowed effects:
-
-- `identity=unchanged`
-- `address=unchanged`
-- `topology=unchanged`
-- `desired-state=unchanged`
-- `runtime=unchanged`
-- `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=null`
-
-```
-projmux create snapshot
-```
-
 ### `projmux create codex`
 
 Provider shortcut for create agent --provider codex
@@ -1396,7 +1319,7 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux create codex [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--interactive-only] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--all-windows | --primary-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
+projmux create codex [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--interactive-only] [--persona <name>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--all-windows | --primary-window] [--name <name>] [--label key=value]... [--placement right|down] [--cwd-from project|pane] [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`, `receipt`
@@ -1419,7 +1342,7 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux create claude [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--all-windows | --primary-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
+projmux create claude [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--model <model>] [--effort <level>] [--persona <name>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--all-windows | --primary-window] [--name <name>] [--label key=value]... [--placement right|down] [--cwd-from project|pane] [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`, `receipt`
@@ -1442,7 +1365,7 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux create antigravity [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--all-windows | --primary-window] [--name <name>] [--label key=value]... [--placement right|down] [-o <mode>] [-- <payload>]
+projmux create antigravity [--project <ref> | -p <ref>] [--cwd <path>] [--add-dir <path>]... [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [--create-window] [--all-windows | --primary-window] [--name <name>] [--label key=value]... [--placement right|down] [--cwd-from project|pane] [-o <mode>] [-- <payload>]
 ```
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `pane-id`, `none`, `receipt`
@@ -1475,18 +1398,17 @@ Subcommands:
 
 | Route | Summary |
 | --- | --- |
-| [`projmux delete project`](#projmux-delete-project) | Deprecated alias of unregister project; unregisters Projects and Registry descendants while preserving roots, Git/worktrees, snapshots, and runtime |
+| [`projmux delete project`](#projmux-delete-project) | Deprecated alias of unregister project; unregisters Projects and Registry descendants while preserving roots, Git/worktrees, and runtime |
 | [`projmux delete window`](#projmux-delete-window) | Delete Registry Windows and every descendant Agent and Pane, killing an exact live tmux mirror when present; no selector inside tmux means the active Window, and --all means every Window in the registry |
 | [`projmux delete pane`](#projmux-delete-pane) | Delete Panes; an Agent-owned current Pane leaves its Agent Offline; no selector inside tmux means the active Pane, and --all means every Pane in the registry |
 | [`projmux delete agent`](#projmux-delete-agent) | Delete Agents and their managed Panes; no selector inside tmux means the active Agent, and --all means every Agent in the registry |
 | [`projmux delete notification`](#projmux-delete-notification) | Delete pending notification rows |
-| [`projmux delete snapshot`](#projmux-delete-snapshot) | Delete saved session snapshots |
 
-Canonical spelling: `projmux unregister project`, `projmux delete window`, `projmux delete pane`, `projmux delete agent`, `projmux delete notification`, `projmux delete snapshot`
+Canonical spelling: `projmux unregister project`, `projmux delete window`, `projmux delete pane`, `projmux delete agent`, `projmux delete notification`
 
 ### `projmux delete project`
 
-Deprecated alias of unregister project; unregisters Projects and Registry descendants while preserving roots, Git/worktrees, snapshots, and runtime
+Deprecated alias of unregister project; unregisters Projects and Registry descendants while preserving roots, Git/worktrees, and runtime
 
 Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
@@ -1601,29 +1523,6 @@ projmux delete notification
 
 Aliases: `notifications`
 
-### `projmux delete snapshot`
-
-Delete saved session snapshots
-
-Selectorless authority: `explicit-target` — the route or caller must name the exact target.
-
-Allowed effects:
-
-- `identity=unchanged`
-- `address=unchanged`
-- `topology=unchanged`
-- `desired-state=unchanged`
-- `runtime=unchanged`
-- `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=null`
-
-```
-projmux delete snapshot
-```
-
-Aliases: `snapshots`
-
 ## `projmux describe`
 
 Describe one Projmux resource
@@ -1896,7 +1795,9 @@ Allowed effects:
 ```
 projmux focus project <ref>
 projmux focus window <ref> {--project <ref> | -p <ref>}
+projmux focus window uid:<uid> [--project <ref> | -p <ref>]
 projmux focus pane <ref> {--project <ref> | -p <ref>} {--window <ref> | -w <ref>}
+projmux focus pane uid:<uid> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]
 ```
 
 Subcommands:
@@ -1930,6 +1831,8 @@ Allowed effects:
 projmux focus project <ref> [--socket <path>] [--client <tty>] [--json]
 ```
 
+`<ref>` is the live tmux session name, or `uid:<uid>` for a Registry Project, which resolves to its `status.session.name`. A `uid:` ref uses the Project's recorded socket; an explicit `--socket` naming another server exits 2. The resolved session must still be live.
+
 ### `projmux focus window`
 
 Move the current client to an already-live Window in an exact live root session; never materializes
@@ -1949,8 +1852,13 @@ Allowed effects:
 
 ```
 projmux focus window <ref> {--project <ref> | -p <ref>} [--socket <path>] [--client <tty>] [--json]
+projmux focus window uid:<uid> [--project <ref> | -p <ref>] [--socket <path>] [--client <tty>] [--json]
 ```
 
+A plain `<ref>` is a live window name or `@id` and requires `--project`. `uid:<uid>` names a Registry Window, which resolves to its `status.runtimeID` inside its owning Project's session, so `--project` is optional; when given it must be that Project (`uid:` or its session name) or the route exits 2. `--project uid:<uid>` also works with a plain `<ref>`.
+
+A `uid:` resolution uses the Project's recorded socket; an explicit `--socket` naming another server exits 2. The resolved window must still be live.
+
 ### `projmux focus pane`
 
 Move the current client to an already-live Pane in an exact live root session; never materializes
@@ -1970,8 +1878,13 @@ Allowed effects:
 
 ```
 projmux focus pane <ref> {--project <ref> | -p <ref>} {--window <ref> | -w <ref>} [--socket <path>] [--json]
+projmux focus pane uid:<uid> [--project <ref> | -p <ref>] [--window <ref> | -w <ref>] [--socket <path>] [--json]
 ```
 
+A plain `<ref>` is a live pane name or `%id` and requires `--project` and `--window`. `uid:<uid>` names a Registry Pane, which resolves to its `status.activation.runtimeID` inside its owning Window and Project, so both flags are optional; when given they must match that owner chain or the route exits 2. `--project` and `--window` also accept `uid:<uid>` with a plain `<ref>`.
+
+A `uid:` resolution uses the Project's recorded socket; an explicit `--socket` naming another server exits 2. The resolved pane must still be live.
+
 ## `projmux get`
 
 Read Projmux resources by selector
@@ -2009,10 +1922,9 @@ Subcommands:
 | [`projmux get agents`](#projmux-get-agents) | List Agent resources as NAME STATUS ACTIONS AGE; route-implied KIND is omitted, shifting stdout positions; -o wide retains KIND and diagnostics, and -o json retains kind and invocation context; inside tmux defaults to the active managed root, and --all-projects lists the whole Registry |
 | [`projmux get runtime`](#projmux-get-runtime) | List every tmux Session, Window, and Pane on one exact server with its attribution |
 | [`projmux get notifications`](#projmux-get-notifications) | List pending notification rows |
-| [`projmux get snapshots`](#projmux-get-snapshots) | List saved session snapshots |
 | [`projmux get pane`](#projmux-get-pane) | Read one Pane resource; with no selector inside tmux, the active Pane |
 
-Canonical spelling: `projmux get projects`, `projmux get windows`, `projmux get panes`, `projmux get agents`, `projmux get runtime sessions`, `projmux get runtime windows`, `projmux get runtime panes`, `projmux get notifications`, `projmux get snapshots`, `projmux get pane`
+Canonical spelling: `projmux get projects`, `projmux get windows`, `projmux get panes`, `projmux get agents`, `projmux get runtime sessions`, `projmux get runtime windows`, `projmux get runtime panes`, `projmux get notifications`, `projmux get pane`
 
 ### `projmux get projects`
 
@@ -2112,11 +2024,257 @@ Aliases: `agent`
 
 Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`, `wide`
 
-### `projmux get runtime`
+### `projmux get runtime`
+
+List every tmux Session, Window, and Pane on one exact server with its attribution
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=zero-or-more`
+- `domain-effect=null`
+
+```
+projmux get runtime sessions [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
+projmux get runtime windows [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
+projmux get runtime panes [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
+```
+
+Subcommands:
+
+| Route | Summary |
+| --- | --- |
+| [`projmux get runtime sessions`](#projmux-get-runtime-sessions) | List every tmux session on one exact server with its attribution |
+| [`projmux get runtime windows`](#projmux-get-runtime-windows) | List every tmux window on one exact server with its attribution |
+| [`projmux get runtime panes`](#projmux-get-runtime-panes) | List every tmux pane on one exact server with its attribution |
+
+Canonical spelling: `projmux get runtime sessions`, `projmux get runtime windows`, `projmux get runtime panes`
+
+#### `projmux get runtime sessions`
+
+List every tmux session on one exact server with its attribution
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=zero-or-more`
+- `domain-effect=null`
+
+```
+projmux get runtime sessions [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
+```
+
+Output modes (`-o`): `wide`, `json`, `none`
+
+#### `projmux get runtime windows`
+
+List every tmux window on one exact server with its attribution
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=zero-or-more`
+- `domain-effect=null`
+
+```
+projmux get runtime windows [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
+```
+
+Output modes (`-o`): `wide`, `json`, `none`
+
+#### `projmux get runtime panes`
+
+List every tmux pane on one exact server with its attribution
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=zero-or-more`
+- `domain-effect=null`
+
+```
+projmux get runtime panes [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
+```
+
+Output modes (`-o`): `wide`, `json`, `none`
+
+### `projmux get notifications`
+
+List pending notification rows
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=zero-or-more`
+- `domain-effect=null`
+
+```
+projmux get notifications
+```
+
+Aliases: `notification`
+
+### `projmux get pane`
+
+Read one Pane resource; with no selector inside tmux, the active Pane
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=exact-one`
+- `domain-effect=null`
+
+```
+projmux get pane [--current] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [-o <mode>]
+```
+
+Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
+
+Field projections (`-o`): `cwd`
+
+## `projmux hook`
+
+List, edit, validate, and trust lifecycle hook config
+
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=unchanged`
+- `domain-effect=null`
+
+```
+projmux hook list|edit|validate|trust|untrust
+```
+
+Subcommands:
+
+| Route | Summary |
+| --- | --- |
+| [`projmux hook list`](#projmux-hook-list) | List global and project lifecycle hooks |
+| [`projmux hook edit`](#projmux-hook-edit) | Edit lifecycle hook config |
+| [`projmux hook validate`](#projmux-hook-validate) | Validate lifecycle hook config |
+| [`projmux hook trust`](#projmux-hook-trust) | Trust the current project hook config |
+| [`projmux hook untrust`](#projmux-hook-untrust) | Revoke project hook config trust |
+
+Canonical spelling: `projmux hook list`, `projmux hook edit`, `projmux hook validate`, `projmux hook trust`, `projmux hook untrust`
+
+### `projmux hook list`
+
+List global and project lifecycle hooks
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=unchanged`
+- `domain-effect=null`
+
+```
+projmux hook list
+```
+
+### `projmux hook edit`
+
+Edit lifecycle hook config
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=unchanged`
+- `domain-effect=null`
+
+```
+projmux hook edit
+```
+
+### `projmux hook validate`
+
+Validate lifecycle hook config
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+
+Allowed effects:
+
+- `identity=unchanged`
+- `address=unchanged`
+- `topology=unchanged`
+- `desired-state=unchanged`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=unchanged`
+- `domain-effect=null`
+
+```
+projmux hook validate
+```
+
+### `projmux hook trust`
 
-List every tmux Session, Window, and Pane on one exact server with its attribution
+Trust the current project hook config
 
-Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 Allowed effects:
 
@@ -2126,30 +2284,18 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=zero-or-more`
+- `cardinality=unchanged`
 - `domain-effect=null`
 
 ```
-projmux get runtime sessions [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
-projmux get runtime windows [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
-projmux get runtime panes [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
+projmux hook trust
 ```
 
-Subcommands:
-
-| Route | Summary |
-| --- | --- |
-| [`projmux get runtime sessions`](#projmux-get-runtime-sessions) | List every tmux session on one exact server with its attribution |
-| [`projmux get runtime windows`](#projmux-get-runtime-windows) | List every tmux window on one exact server with its attribution |
-| [`projmux get runtime panes`](#projmux-get-runtime-panes) | List every tmux pane on one exact server with its attribution |
-
-Canonical spelling: `projmux get runtime sessions`, `projmux get runtime windows`, `projmux get runtime panes`
-
-#### `projmux get runtime sessions`
+### `projmux hook untrust`
 
-List every tmux session on one exact server with its attribution
+Revoke project hook config trust
 
-Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 Allowed effects:
 
@@ -2159,20 +2305,18 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=zero-or-more`
+- `cardinality=unchanged`
 - `domain-effect=null`
 
 ```
-projmux get runtime sessions [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
+projmux hook untrust
 ```
 
-Output modes (`-o`): `wide`, `json`, `none`
-
-#### `projmux get runtime windows`
+## `projmux label`
 
-List every tmux window on one exact server with its attribution
+Set or remove Projmux resource metadata.labels after creation
 
-Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
 
 Allowed effects:
 
@@ -2182,20 +2326,32 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=zero-or-more`
+- `cardinality=unchanged`
 - `domain-effect=null`
 
 ```
-projmux get runtime windows [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
+projmux label project [<ref>] <key=value|key->... [--project <ref> | -p <ref>]
+projmux label window [<ref>] <key=value|key->... [--project <ref> | -p <ref>]
+projmux label pane [<ref>] <key=value|key->... [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
+projmux label agent [<ref>] <key=value|key->... [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
 ```
 
-Output modes (`-o`): `wide`, `json`, `none`
+Subcommands:
 
-#### `projmux get runtime panes`
+| Route | Summary |
+| --- | --- |
+| [`projmux label project`](#projmux-label-project) | Set or remove Project labels; with no selector inside tmux, the active Project |
+| [`projmux label window`](#projmux-label-window) | Set or remove Window labels; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Window |
+| [`projmux label pane`](#projmux-label-pane) | Set or remove Pane labels; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Pane |
+| [`projmux label agent`](#projmux-label-agent) | Set or remove Agent labels within the active Project or ControlSession without changing its name, topic, provider, or managed Pane |
 
-List every tmux pane on one exact server with its attribution
+Canonical spelling: `projmux label project`, `projmux label window`, `projmux label pane`, `projmux label agent`
 
-Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+### `projmux label project`
+
+Set or remove Project labels; with no selector inside tmux, the active Project
+
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 Allowed effects:
 
@@ -2205,20 +2361,20 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=zero-or-more`
+- `cardinality=exact-one`
 - `domain-effect=null`
 
 ```
-projmux get runtime panes [--socket <name> | --socket-path <absolute>] [-o wide|json|none]
+projmux label project [<ref>] <key=value|key->... [--project <ref> | -p <ref>]
 ```
 
-Output modes (`-o`): `wide`, `json`, `none`
+Aliases: `projects`
 
-### `projmux get notifications`
+### `projmux label window`
 
-List pending notification rows
+Set or remove Window labels; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Window
 
-Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 Allowed effects:
 
@@ -2228,20 +2384,20 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=zero-or-more`
+- `cardinality=exact-one`
 - `domain-effect=null`
 
 ```
-projmux get notifications
+projmux label window [<ref>] <key=value|key->... [--project <ref> | -p <ref>]
 ```
 
-Aliases: `notification`
+Aliases: `windows`
 
-### `projmux get snapshots`
+### `projmux label pane`
 
-List saved session snapshots
+Set or remove Pane labels; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Pane
 
-Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
 Allowed effects:
 
@@ -2251,18 +2407,18 @@ Allowed effects:
 - `desired-state=unchanged`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=zero-or-more`
+- `cardinality=exact-one`
 - `domain-effect=null`
 
 ```
-projmux get snapshots
+projmux label pane [<ref>] <key=value|key->... [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
 ```
 
-Aliases: `snapshot`
+Aliases: `panes`
 
-### `projmux get pane`
+### `projmux label agent`
 
-Read one Pane resource; with no selector inside tmux, the active Pane
+Set or remove Agent labels within the active Project or ControlSession without changing its name, topic, provider, or managed Pane
 
 Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
@@ -2278,16 +2434,14 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux get pane [--current] [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]... [--pane <ref>]... [--selector key=value]... [-o <mode>]
+projmux label agent [<ref>] <key=value|key->... [--project <ref> | -p <ref>] [--window <ref> | -w <ref>]...
 ```
 
-Output modes (`-o`): `uid`, `name`, `ref`, `metadata`, `json`, `none`
-
-Field projections (`-o`): `cwd`
+Aliases: `agents`
 
-## `projmux hook`
+## `projmux notification`
 
-List, edit, validate, and trust lifecycle hook config
+Manage pending notification workflow state
 
 Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
 
@@ -2303,26 +2457,24 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux hook list|edit|validate|trust|untrust
+projmux notification ack <id> | --all
+projmux notification reconcile [--json]
 ```
 
 Subcommands:
 
 | Route | Summary |
 | --- | --- |
-| [`projmux hook list`](#projmux-hook-list) | List global and project lifecycle hooks |
-| [`projmux hook edit`](#projmux-hook-edit) | Edit lifecycle hook config |
-| [`projmux hook validate`](#projmux-hook-validate) | Validate lifecycle hook config |
-| [`projmux hook trust`](#projmux-hook-trust) | Trust the current project hook config |
-| [`projmux hook untrust`](#projmux-hook-untrust) | Revoke project hook config trust |
+| [`projmux notification ack`](#projmux-notification-ack) | Acknowledge notification rows |
+| [`projmux notification reconcile`](#projmux-notification-reconcile) | Reconcile the notification queue against live targets |
 
-Canonical spelling: `projmux hook list`, `projmux hook edit`, `projmux hook validate`, `projmux hook trust`, `projmux hook untrust`
+Canonical spelling: `projmux notification ack`, `projmux notification reconcile`
 
-### `projmux hook list`
+### `projmux notification ack`
 
-List global and project lifecycle hooks
+Acknowledge notification rows
 
-Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 Allowed effects:
 
@@ -2336,14 +2488,14 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux hook list
+projmux notification ack <id> | --all
 ```
 
-### `projmux hook edit`
+### `projmux notification reconcile`
 
-Edit lifecycle hook config
+Reconcile the notification queue against live targets
 
-Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
 
 Allowed effects:
 
@@ -2357,14 +2509,14 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux hook edit
+projmux notification reconcile [--json]
 ```
 
-### `projmux hook validate`
+## `projmux open`
 
-Validate lifecycle hook config
+Open a Project runtime and move the current client to it
 
-Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
 
 Allowed effects:
 
@@ -2378,14 +2530,22 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux hook validate
+projmux open project <ref> [-o receipt|none]
 ```
 
-### `projmux hook trust`
+Subcommands:
 
-Trust the current project hook config
+| Route | Summary |
+| --- | --- |
+| [`projmux open project`](#projmux-open-project) | Materialize an offline Project runtime when needed and move the current tmux client to it; outside tmux it refuses and points at attach |
 
-Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+Canonical spelling: `projmux open project`
+
+### `projmux open project`
+
+Materialize an offline Project runtime when needed and move the current tmux client to it; outside tmux it refuses and points at attach
+
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 Allowed effects:
 
@@ -2393,20 +2553,22 @@ Allowed effects:
 - `address=unchanged`
 - `topology=unchanged`
 - `desired-state=unchanged`
-- `runtime=unchanged`
-- `focus=unchanged`
-- `cardinality=unchanged`
+- `runtime=materialized|already-live`
+- `focus=moved-current-client`
+- `cardinality=exact-one`
 - `domain-effect=null`
 
 ```
-projmux hook trust
+projmux open project <ref> [-o receipt|none]
 ```
 
-### `projmux hook untrust`
+Output modes (`-o`): `receipt`, `none`
 
-Revoke project hook config trust
+## `projmux persona`
 
-Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
+List, show, edit, set, and delete Agent persona files
+
+Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
 
 Allowed effects:
 
@@ -2420,14 +2582,30 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux hook untrust
+projmux persona list
+projmux persona show <name>
+projmux persona edit <name>
+projmux persona set <name> [--file <path> | -]
+projmux persona delete <name> --yes
 ```
 
-## `projmux notification`
+Subcommands:
 
-Manage pending notification workflow state
+| Route | Summary |
+| --- | --- |
+| [`projmux persona list`](#projmux-persona-list) | List every stored persona with its digest, size, and modification time |
+| [`projmux persona show`](#projmux-persona-show) | Print one persona's content exactly as stored |
+| [`projmux persona edit`](#projmux-persona-edit) | Edit one persona in $EDITOR or $VISUAL, creating it when missing |
+| [`projmux persona set`](#projmux-persona-set) | Write one persona from a file or stdin without an editor |
+| [`projmux persona delete`](#projmux-persona-delete) | Delete one persona file; Agents already started with it keep their snapshot |
 
-Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+Canonical spelling: `projmux persona list`, `projmux persona show`, `projmux persona edit`, `projmux persona set`, `projmux persona delete`
+
+### `projmux persona list`
+
+List every stored persona with its digest, size, and modification time
+
+Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
 
 Allowed effects:
 
@@ -2441,22 +2619,12 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux notification ack <id> | --all
-projmux notification reconcile [--json]
+projmux persona list
 ```
 
-Subcommands:
-
-| Route | Summary |
-| --- | --- |
-| [`projmux notification ack`](#projmux-notification-ack) | Acknowledge notification rows |
-| [`projmux notification reconcile`](#projmux-notification-reconcile) | Reconcile the notification queue against live targets |
-
-Canonical spelling: `projmux notification ack`, `projmux notification reconcile`
-
-### `projmux notification ack`
+### `projmux persona show`
 
-Acknowledge notification rows
+Print one persona's content exactly as stored
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -2472,14 +2640,14 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux notification ack <id> | --all
+projmux persona show <name>
 ```
 
-### `projmux notification reconcile`
+### `projmux persona edit`
 
-Reconcile the notification queue against live targets
+Edit one persona in $EDITOR or $VISUAL, creating it when missing
 
-Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 Allowed effects:
 
@@ -2493,14 +2661,14 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux notification reconcile [--json]
+projmux persona edit <name>
 ```
 
-## `projmux open`
+### `projmux persona set`
 
-Open a Project runtime and move the current client to it
+Write one persona from a file or stdin without an editor
 
-Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
+Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
 Allowed effects:
 
@@ -2514,20 +2682,12 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux open project <ref> [-o receipt|none]
+projmux persona set <name> [--file <path> | -]
 ```
 
-Subcommands:
-
-| Route | Summary |
-| --- | --- |
-| [`projmux open project`](#projmux-open-project) | Materialize an offline Project runtime when needed and move the current tmux client to it; outside tmux it refuses and points at attach |
-
-Canonical spelling: `projmux open project`
-
-### `projmux open project`
+### `projmux persona delete`
 
-Materialize an offline Project runtime when needed and move the current tmux client to it; outside tmux it refuses and points at attach
+Delete one persona file; Agents already started with it keep their snapshot
 
 Selectorless authority: `explicit-target` — the route or caller must name the exact target.
 
@@ -2537,17 +2697,15 @@ Allowed effects:
 - `address=unchanged`
 - `topology=unchanged`
 - `desired-state=unchanged`
-- `runtime=materialized|already-live`
-- `focus=moved-current-client`
-- `cardinality=exact-one`
+- `runtime=unchanged`
+- `focus=unchanged`
+- `cardinality=unchanged`
 - `domain-effect=null`
 
 ```
-projmux open project <ref> [-o receipt|none]
+projmux persona delete <name> --yes
 ```
 
-Output modes (`-o`): `receipt`, `none`
-
 ## `projmux pin`
 
 Manage pinned project directories
@@ -2600,7 +2758,7 @@ projmux pin project list|add|remove|toggle|clear
 
 ## `projmux prune`
 
-Prune stale Projects and snapshots
+Prune stale Projects and Agents
 
 Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
 
@@ -2616,22 +2774,22 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux prune snapshot [--older-than <duration>]
 projmux prune project --missing --older-than <duration> [--yes]
+projmux prune agent --older-than <duration> [--no-session-ref] [--no-pane] [--exclude <agent-ref>]... [--yes]
 ```
 
 Subcommands:
 
 | Route | Summary |
 | --- | --- |
+| [`projmux prune agent`](#projmux-prune-agent) | Delete Offline or Failed Agents past a bounded age whose session ref or managed Panes are gone; live Panes and Running Agents are never selected |
 | [`projmux prune project`](#projmux-prune-project) | Delete Projects whose spec.root has been missing for a bounded age |
-| [`projmux prune snapshot`](#projmux-prune-snapshot) | Inspect or delete preserved session snapshots (canonical spelling) |
 
-Canonical spelling: `projmux prune project`, `projmux prune snapshot`
+Canonical spelling: `projmux prune agent`, `projmux prune project`
 
-### `projmux prune project`
+### `projmux prune agent`
 
-Delete Projects whose spec.root has been missing for a bounded age
+Delete Offline or Failed Agents past a bounded age whose session ref or managed Panes are gone; live Panes and Running Agents are never selected
 
 Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
 
@@ -2647,33 +2805,30 @@ Allowed effects:
 - `domain-effect=null`
 
 ```
-projmux prune project --missing --older-than <duration> [--yes]
+projmux prune agent --older-than <duration> [--no-session-ref] [--no-pane] [--exclude <agent-ref>]... [--yes]
 ```
 
-### `projmux prune snapshot`
+### `projmux prune project`
 
-Inspect or delete preserved session snapshots (canonical spelling)
+Delete Projects whose spec.root has been missing for a bounded age
 
 Selectorless authority: `explicit-fan-out` — the route spelling is an intentional global or whole-set opt-in.
 
 Allowed effects:
 
-- `identity=unchanged`
-- `address=unchanged`
-- `topology=unchanged`
-- `desired-state=unchanged`
+- `identity=removed`
+- `address=released`
+- `topology=removed`
+- `desired-state=removed`
 - `runtime=unchanged`
 - `focus=unchanged`
-- `cardinality=unchanged`
+- `cardinality=zero-or-more`
 - `domain-effect=null`
 
 ```
-projmux prune snapshot [--older-than <duration>]
-projmux prune snapshot delete <session>...
+projmux prune project --missing --older-than <duration> [--yes]
 ```
 
-Canonical spelling: `projmux delete snapshot`
-
 ## `projmux quit`
 
 Quit the app-owned projmux tmux runtime
@@ -2847,7 +3002,7 @@ Subcommands:
 | Route | Summary |
 | --- | --- |
 | [`projmux rename project`](#projmux-rename-project) | Rename a Projmux Project resource; with no selector inside tmux, the active Project |
-| [`projmux rename window`](#projmux-rename-window) | Rename a Projmux Window resource; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Window |
+| [`projmux rename window`](#projmux-rename-window) | Rename a Projmux Window resource; inside tmux a reference resolves within the active Project or ControlSession, no selector means the active Window, and the tmux tab is renamed with it |
 | [`projmux rename pane`](#projmux-rename-pane) | Rename a Projmux Pane resource; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Pane; does not change tmux pane_title |
 | [`projmux rename agent`](#projmux-rename-agent) | Rename an Agent stable resource name within the active Project or ControlSession without changing its topic, provider, or managed Pane |
 
@@ -2880,7 +3035,7 @@ Output modes (`-o`): `receipt`, `none`
 
 ### `projmux rename window`
 
-Rename a Projmux Window resource; inside tmux a reference resolves within the active Project or ControlSession and no selector means the active Window
+Rename a Projmux Window resource; inside tmux a reference resolves within the active Project or ControlSession, no selector means the active Window, and the tmux tab is renamed with it
 
 Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.
 
@@ -2974,56 +3129,6 @@ Allowed effects:
 projmux resources
 ```
 
-## `projmux restore`
-
-Project a saved snapshot into one exact closed Project desired state
-
-Selectorless authority: `refusal` — there is no safe selectorless action; refuse before output or mutation.
-
-Allowed effects:
-
-- `identity=unchanged`
-- `address=unchanged`
-- `topology=unchanged`
-- `desired-state=unchanged`
-- `runtime=unchanged`
-- `focus=unchanged`
-- `cardinality=unchanged`
-- `domain-effect=null`
-
-```
-projmux restore snapshot --session <name> [--project <ref> | -p <ref>] [--dry-run | --yes] [--client <tmux-client>]
-```
-
-Subcommands:
-
-| Route | Summary |
-| --- | --- |
-| [`projmux restore snapshot`](#projmux-restore-snapshot) | Project a saved snapshot into one exact closed Project desired state |
-
-Canonical spelling: `projmux restore snapshot`
-
-### `projmux restore snapshot`
-
-Project a saved snapshot into one exact closed Project desired state
-
-Selectorless authority: `explicit-target` — the route or caller must name the exact target.
-
-Allowed effects:
-
-- `identity=unchanged|created|reused|removed|replaced`
-- `address=unchanged|allocated|released`
-- `topology=unchanged|established|removed|replaced`
-- `desired-state=unchanged|created|removed|replaced`
-- `runtime=unchanged|materialized`
-- `focus=unchanged|moved-current-client|attached-caller`
-- `cardinality=unchanged|one-or-more`
-- `domain-effect=null`
-
-```
-projmux restore snapshot --session <name> [--project <ref> | -p <ref>] [--dry-run | --yes] [--client <tmux-client>]
-```
-
 ## `projmux runtime`
 
 Manage the live and ephemeral tmux runtime inventory
@@ -3434,13 +3539,13 @@ Subcommands:
 
 | Route | Summary |
 | --- | --- |
-| [`projmux unregister project`](#projmux-unregister-project) | Unregister Projects and their Registry descendants while preserving roots, Git/worktrees, snapshots, and runtime |
+| [`projmux unregister project`](#projmux-unregister-project) | Unregister Projects and their Registry descendants while preserving roots, Git/worktrees, and runtime |
 
 Canonical spelling: `projmux unregister project`
 
 ### `projmux unregister project`
 
-Unregister Projects and their Registry descendants while preserving roots, Git/worktrees, snapshots, and runtime
+Unregister Projects and their Registry descendants while preserving roots, Git/worktrees, and runtime
 
 Selectorless authority: `natural-omitted` — omission resolves one predictable current resource or documented contextual read/scope; any selector replaces it.