projmux 0.6.6 → 0.7.0

package/docs/configuration.md

@@ -87,14 +87,15 @@ language.
 ## Keymap File
 
 Settings > Keybindings is the normal in-app editor for action keys. It lists
-actions with current keybinding summaries, opens a simple detail screen, and
-offers `Add alias` plus reset. Saving writes safe tmux plain chords to
-`~/.config/projmux/keymap.toml`, rewrites `~/.config/projmux/tmux.conf`, and,
-when Settings is running inside tmux, sources that app config so tmux-level
-chords take effect immediately.
-
-Raw sequences that cannot be safely represented as a tmux plain chord are not
-persisted. Use Settings to save a safe direct alias. When key delivery needs
+actions with the current active keys and one state: Default, Custom, Available,
+or Unbound. Open an action to see the action label, state, a flat Keys list,
+Options, and a collapsed Troubleshooting row. Create flows start from
+`+ Add key`, deletion lives under each key's detail, and action-level state
+changes such as Unbind or Reset live under Options. Successful saves report the
+keybinding as saved; failures identify the stage that failed.
+
+Raw sequences that cannot be safely represented as a direct keybinding are not
+persisted. Use Settings to save a custom key. When key delivery needs
 terminal-layer remediation, first try the key in `projmux shell`, then run
 `projmux setup` from the raw terminal, then use `projmux init` for supported
 terminal adapters.
@@ -127,7 +128,13 @@ do not break. Settings preserves existing prefix entries when rewriting the
 file, but does not create new prefix keys, and generated tmux config no longer
 binds the old action prefix chords.
 
-Use an empty `keys` list to disable direct plain aliases for the action when
+Settings > Keybindings names `AISplitPickerToggle` as the AI split popup
+picker toggle. That action opens or closes the picker UI and is separate from
+the direct AI pane actions, `ai-split-right` and `ai-split-down`. The direct
+actions create a new managed AI pane each time they run, leaving existing AI
+panes in place. `right` and `down` choose where the new pane is created.
+
+Use an empty `keys` list to disable direct plain keys for the action when
 editing the file by hand:
 
 ```toml
@@ -151,7 +158,7 @@ The file currently affects generated tmux config from `projmux tmux
 print-config`, `projmux tmux install`, `projmux tmux print-app-config`,
 `projmux tmux install-app`, and `projmux shell`. Terminal init adapters such as
 Ghostty and Windows Terminal install built-in plain-byte mappings where needed;
-they do not read `keymap.toml` or copy saved aliases into terminal configs.
+they do not read `keymap.toml` or copy saved keys into terminal configs.
 Changing terminal-layer mappings still requires rerunning `projmux init` and
 restarting the terminal where that terminal requires it.
 
@@ -183,6 +190,14 @@ picker frames also apply the built-in fallback `background`/`foreground` tokens
 so picker-owned padding, empty rows, footer rows, and preview gaps do not
 inherit the terminal default background.
 
+Native picker popups launched through `projmux tmux popup-toggle` also pass a
+per-popup tmux 3.4 `display-popup -s` body style using the effective theme
+`background`/`foreground` tmux tokens. This styles only the tmux popup body
+before the native renderer draws. It does not set global `popup-style` or
+`popup-border-style`, and it does not change shell pane backgrounds,
+`default-style`, `window-style`, OSC terminal backgrounds, or the general
+status/window palette.
+
 Resolver schema shape:
 
 ```toml
@@ -273,11 +288,12 @@ user/global preference in this release.
 | `PROJMUX_FOCUS_DEBUG` | When non-empty, `projmux focus` prints one telemetry line to stderr. |
 | `PROJMUX_PICKER_BACKEND` | Legacy picker backend override. Any value, including old `fzf` settings, now resolves to the native picker. |
 | `PROJMUX_INSTALLER` | Installer source hint used by update flows. npm installs set this automatically; advanced release installs can set `github-release`. |
+| `PROJMUX_SHELL_UPDATE_CHECK_TIMEOUT_MS` | Timeout in milliseconds for the best-effort release check attempted by `projmux shell` when the update cache is missing or stale. Invalid, zero, or negative values use the default. |
 
 ## Welcome State
 
-`projmux shell` stores per-version welcome state under the projmux state
-directory, normally:
+`projmux shell` still reads and rewrites legacy per-version welcome state under
+the projmux state directory for attach-popup compatibility, normally:
 
 ```text
 ${XDG_STATE_HOME:-$HOME/.local/state}/projmux/welcomed-v<version>.json
@@ -295,11 +311,21 @@ The current schema is:
 }
 ```
 
-`skip_version` is the only field that suppresses the shell welcome. When it
-matches the current projmux version, `projmux shell` skips the welcome. When it
-is absent or names a different version, the welcome is shown again. Older state
-files that contain only `last_welcomed_version` remain readable, but that field
-does not count as a skip.
+This file no longer suppresses the shell-entry welcome. `skip_version` and
+`last_welcomed_version` remain readable for legacy state and pending attach
+popup compatibility, but the automatic shell prompt now uses release skip state
+instead.
+
+Update prompt skips are stored by latest release tag under the update cache
+directory:
+
+```text
+${XDG_CACHE_HOME:-$HOME/.cache}/projmux/update-skip.json
+```
+
+When `tag_name` matches the fresh cached latest release tag, `projmux shell`
+continues without offering the update actions. A newer latest tag makes the
+prompt eligible again.
 
 Example:
 
@@ -401,7 +427,9 @@ only a generic in-app queue/sidebar/statusbar row; it does not fire OS toast,
 The OS-level dispatch carries three modes. The in-app notify queue, the
 statusbar segment, and the attention badge stay live regardless of which
 mode is active — only the toast / notify-send / auto-raise fan-out is
-gated here.
+gated here. The same mode also gates `projmux focus` post-switch osfocus
+dispatch: only `raise` asks the host terminal to come forward after a
+successful tmux focus.
 
 | Mode | On push | On click |
 | --- | --- | --- |
@@ -413,7 +441,8 @@ Click activation is wired only for `raise`. The `projmux://` URI handler is
 registered on the first `raise` Notify of each tmux server (gated by the
 `@projmux_uri_protocol_registered_v6` marker). The
 mode only controls whether a toast fires at all and whether to follow it
-up with an on-push auto-raise.
+up with an on-push auto-raise. `off` / `none` and `notify` also suppress
+the focus-triggered osfocus raise after `projmux focus`.
 
 Resolution order (highest priority first):
 
@@ -551,8 +580,8 @@ while `on` and `off` take precedence. Auto-save only updates the latest
 snapshot. Named snapshots are manual and are never updated by auto-save.
 
 Project open from the Alt-1 sidebar defaults to opening a closed project as an
-`Empty session`. The optional `Settings > Labs > Sidebar startup picker` toggle
-enables the native sidebar `Start project` step. Rows appear as `Latest
+`Empty session`. The optional `Settings > Session State > Sidebar startup
+picker` toggle enables the native sidebar `Start project` step. Rows appear as `Latest
 snapshot`, named snapshot rows, `Empty session`, and `Back`. `Latest snapshot`
 is the snapshot auto-save that changes as auto-save runs; named snapshots are
 fixed snapshots. Rows include saved-at date/time metadata when projmux can
@@ -571,7 +600,7 @@ Default `projmux shell` no longer opens a startup picker or replays session-stat
 snapshots before attach. It still derives the default app session identity and
 startup directory from the current project context when available; otherwise it
 uses the `home` target and home directory. Session-state restore selection is
-limited to the Labs sidebar startup picker.
+limited to the Session State sidebar startup picker.
 
 Settings > Session State is global settings only: global auto-save, auto-save
 interval, and storage/retention policy. Settings > Project > Session State

package/docs/hooks.md

@@ -606,6 +606,39 @@ Codex and are managed from `Settings > Notifications > Hook quiet policy`.
 They only affect ingest delivery; `projmux ai integrate claude` still uses the
 catalog `install` field for installed hook events.
 
+## Antigravity Hook Ingest
+
+`projmux ai ingest antigravity-hook < payload.json` is available for manual
+Antigravity CLI `agy` hook/statusline payloads. Projmux does not provide
+`projmux ai integrate antigravity`, does not install Antigravity hooks, and
+does not mutate Antigravity user config. The Delivery sources diagnostic
+therefore reports Antigravity as a read-only unsupported/manual row. If users
+wire it by hand, use an absolute `projmux` command path or a known cwd because
+relative command paths failed the Phase 0b smoke.
+
+The default known Antigravity catalog records only observed Phase 0b signals
+and marks them `install: false`:
+
+| Event/signal | Behavior |
+| --- | --- |
+| `PostInvocation` | marks the matched pane hook-active and writes a quiet ingest diagnostic; no notify queue entry is pushed |
+| `Stop` | pushes a completion row, or a critical error row when `error` is present or `terminationReason` is non-normal |
+| `Statusline` with `tool_confirmation_pending=true` | pushes a critical approval row; this is only active when a statusline/manual status payload is wired to ingest |
+| `Statusline` without `tool_confirmation_pending=true` | marks the matched pane hook-active and writes a quiet ingest diagnostic |
+| unknown events | mark the matched pane hook-active and write quiet ingest diagnostics only |
+
+Antigravity notify rows use `agent=antigravity` metadata. Accepted fields
+include `conversationId`/`conversation_id`, `cwd`, `workspace.path`,
+`transcriptPath`, `terminationReason`, `error`, `fullyIdle`, `agent_state`,
+`context_window`, and nested `statusline.tool_confirmation_pending`.
+Antigravity ingest uses `conversationId` as pane thread metadata for matching
+and as session-state resume metadata. Session restore uses
+`agy --conversation <uuid>` only when that id is present and UUID-shaped;
+otherwise preview and doctor render `resume unavailable`. Antigravity usage
+quota HUD support remains unsupported because the stable usage signal is
+`context-window-only` statusline data, not 5-hour/weekly quota data. Raw
+payloads or transcript contents are not stored.
+
 ## Ingest Debug Log
 
 Every `projmux ai ingest ...` path appends compact JSONL diagnostics to

package/docs/install.md

@@ -28,14 +28,14 @@ projmux shell
 ```
 
 Each `projmux shell` launch prints a short welcome with the current version,
-detach/exit keys, core app shortcuts, and cached update status when available.
-Press Enter to continue for this run, or press `s` to skip the welcome for the
-current projmux version. The next projmux version shows the welcome again.
-
-If an installer-supported update is available, the same prompt keeps update
-actions separate from welcome skip: press `u` to run `projmux update apply`,
-`n` to print the manual update command, or `d` to skip daily update prompts for
-that release.
+detach/exit keys, a bootstrap reminder, and cached release status when
+available. Press Enter to continue into the shell.
+
+If an update is available, the same shell-entry prompt uses one action
+vocabulary: Enter continues, `u` upgrades by invoking `projmux update apply`,
+and `s` skips that latest release tag until a newer tag appears. For `source`
+or unknown installer sources, `u` prints installer guidance and then continues
+shell entry.
 
 To revisit the guide later, run `projmux welcome`, or use Settings > About >
 Welcome inside the app to open it in a visible viewer. Set `PROJMUX_WELCOME=off` before

package/docs/keybindings.md

@@ -4,7 +4,7 @@ projmux is keyboard-driven, but the guaranteed launch contract is small:
 fresh installs bind `Alt-1` through `Alt-5` as plain Meta sequences
 (`M-1`..`M-5`, bytes `\x1b1`..`\x1b5`). Other actions remain discoverable in
 Settings > Keybindings. Transport-dependent actions keep their built-in
-transport default key, and Settings can add separate safe tmux plain aliases to
+transport default key, and Settings can add separate safe tmux plain keys to
 the same action. They are not installed as terminal-specific User-key
 fallbacks. `UserN` and `CSI-u` are legacy/removal/unsupported targets, not
 supported fallback guidance.
@@ -15,14 +15,13 @@ The recommended path when a key does not fire:
 2. Run `projmux setup` outside tmux to see which bytes reach the process.
 3. For supported terminals, preview `projmux init [terminal]`; add `--apply`
    only after reviewing the merge.
-4. For unsupported terminals, configure plain Meta bytes or add a tmux alias in
+4. For unsupported terminals, configure plain Meta bytes or add a custom key in
    Settings > Keybindings.
 
-Settings writes safe tmux plain chords to
-`~/.config/projmux/keymap.toml`, regenerates
-`~/.config/projmux/tmux.conf`, and hot-reloads the live tmux config when it is
-running inside tmux. Raw escape payloads, Windows Terminal `sendInput` strings,
-and tmux User keys are rejected as aliases.
+Settings saves safe tmux plain chords for actions. Successful saves use simple
+confirmation copy; if saving, runtime config update, or active tmux reload
+fails, the error names the failed stage. Raw escape payloads, Windows Terminal
+`sendInput` strings, and tmux User keys are rejected as action keys.
 
 ## Quick Start
 
@@ -32,10 +31,14 @@ These shortcuts are the guaranteed launch defaults. They need no tmux prefix.
 | --- | --- |
 | `Alt-1` | Project sidebar |
 | `Alt-2` | Notify sidebar |
-| `Alt-3` | Existing session popup |
-| `Alt-4` | AI split picker |
+| `Alt-3` | Recent Windows |
+| `Alt-4` | AI split popup picker |
 | `Alt-5` | Settings |
 
+`RecentWindows:Open` opens the cross-project recent windows queue. It switches
+to the selected live tmux window using that window's current active pane; it is
+separate from `last-pane` and from the existing-session popup.
+
 The tmux prefix remains the upstream default `Ctrl-b`. Inside a running
 session, `Ctrl-b ?` lists the live tmux bindings.
 
@@ -43,43 +46,60 @@ session, `Ctrl-b ?` lists the live tmux bindings.
 
 Settings > Keybindings lists the full action catalogue. In particular, sidebar
 keymap actions, pane switching, window switching, and rename actions remain
-visible. Transport-dependent rows show the default transport key separately
-from editable plain aliases.
-
-The Settings flow is intentionally simple: the root is one action list with
-current key summaries, and each action detail shows the action, current
-keybinding/aliases, `Add alias`, and reset. Diagnostic/probe/init workflows are
-not first-class Settings tabs; use `projmux setup` and `projmux init` from the
-terminal when key delivery needs remediation.
-
-Optional direct aliases can be added for actions such as:
+visible.
+
+The Settings flow is intentionally simple: the root is one action list with a
+key summary and state. The key summary uses the first key plus `+N`, or
+`Not bound` when no key is active. State vocabulary is limited to Default,
+Custom, Available, and Unbound. Each action detail shows the action label,
+state, a flat Keys list with `+ Add key`, Options, and a collapsed
+Troubleshooting row with Test key delivery and Advanced... entry points. Key
+rows open key detail for Remove key and Test key. Add key opens Press a key by
+default; Enter key name and raw diagnostics live under Advanced. Options covers
+unbinding the action and reset/use-default flows. Diagnostic/probe/init
+workflows are not first-class Settings tabs; use `projmux setup` and
+`projmux init` from the terminal when key delivery needs remediation.
+
+Optional direct keys can be added for actions such as:
 
 | Canonical action | Meaning |
 | --- | --- |
+| `RecentWindows:Open` | Recent windows queue across projects |
 | `ProjectSwitcherToggle` | Project switcher popup |
+| `AISplitPickerToggle` | AI split popup picker; pressing again closes the picker popup |
+| `ai-split-right` | Open a new direct AI split to the right |
+| `ai-split-down` | Open a new direct AI split below |
 | `new-window` | New tmux window in the current pane directory |
 | `rename-window` | Rename the current tmux window |
 
+`AISplitPickerToggle` is the `Alt-4` popup picker toggle. It opens or closes
+the picker UI where the user chooses the AI split mode. It is separate from
+the direct `ai-split-right` and `ai-split-down` actions.
+
+The direct AI split actions create a new managed AI pane each time they run.
+Existing AI panes are left in place; the requested direction controls where the
+new pane is created.
+
 Pane switching is catalogued as transport-dependent and the generated app tmux
 config binds `M-Left`, `M-Right`, `M-Up`, and `M-Down` to `select-pane`
 movement. Previous/next window remain transport-dependent and the generated app
 tmux config binds `M-S-Left` / `M-S-Right` to the tmux window navigation
 commands. These default transport keys are always rendered by projmux, because
 delivery still depends on the terminal forwarding the modifier-arrow sequence.
-Settings can add extra safe plain aliases, such as `M-[` for
-`previous-window`; those aliases are saved to `keymap.toml` as `keys = [...]`
+Settings can add extra safe plain keys, such as `M-[` for
+`previous-window`; those keys are saved to `keymap.toml` as `keys = [...]`
 without storing or replacing the transport default. Rename actions no longer
 have a built-in terminal fallback; use tmux's prefix rename flow or configure
-an explicit safe alias where the action is editable.
+an explicit safe key where the action is editable.
 
 ## Product Requirements
 
 Settings > Keybindings stays a discovery surface. It must continue to expose
 launch toggles, sidebar keymap actions, picker-local actions, pane switching,
-window switching, and rename actions. The primary Settings flow is not the
-terminal remediation surface: replace-primary, disable-default, typed fallback,
-terminal mapping preview/apply, and init execution rows stay out of the action
-detail.
+window switching, and rename actions. The basic Settings flow is not the
+terminal remediation surface: key-role replacement, disable-default, typed
+fallback, terminal mapping preview/apply, and init execution rows stay out of
+the action detail.
 
 The product model does not support `UserN` or `CSI-u` as fallback guidance.
 Windows Terminal and Ghostty adapters use built-in plain Meta/control bytes or
@@ -99,10 +119,14 @@ by different picker surfaces, while conflicts inside one surface are rejected.
 | `SessionPopup:KillSession` | Kill the focused session |
 | `SessionPopup:CyclePreviewWindowPrev` / `SessionPopup:CyclePreviewWindowNext` | Preview windows |
 | `SessionPopup:CyclePreviewPanePrev` / `SessionPopup:CyclePreviewPaneNext` | Preview panes |
-| `NotifySidebar:Ack` / `NotifySidebar:ClearNonCritical` / `NotifySidebar:ClearAll` | Manage notifications |
+| `NotifySidebar:Ack` / `NotifySidebar:AckGroup` / `NotifySidebar:ClearNonCritical` / `NotifySidebar:ClearAll` | Manage notifications |
+
+Notify sidebar Right/Left child-row show/hide behavior is picker-local and is
+not part of the Settings action catalog. `NotifySidebar:AckGroup` defaults to
+uppercase `A`, distinct from `NotifySidebar:Ack` on lowercase `a`.
 
-Runtime picker footers render key guides from the merged keymap, preferring the
-default alias when it is present and otherwise using the first configured alias.
+Runtime picker footers render key guides from the merged keymap, using the
+first active key as the representative key.
 
 ## Keymap File
 
@@ -132,12 +156,14 @@ Legacy popup IDs such as `sessionizer-sidebar`, `notify-sidebar`,
 `session-popup`, `ai-split-picker-right`, `ai-split-settings`, and
 `sessionizer` still read. Settings and new docs show the canonical toggle
 names: `ProjectSidebarToggle`, `NotifySidebarToggle`, `SessionPopupToggle`,
-`AISplitPickerToggle`, `SettingsToggle`, and `ProjectSwitcherToggle`.
+`AISplitPickerToggle`, `SettingsToggle`, and `ProjectSwitcherToggle`. Direct
+AI split actions keep their command IDs, `ai-split-right` and `ai-split-down`,
+so Settings can distinguish them from the `Alt-4` popup picker toggle.
 
 ## Diagnose: `projmux setup`
 
 Run `projmux setup` outside tmux to find out which projmux keys reach the raw
-terminal. Settings > Keybindings remains the action/alias editor; setup is the
+terminal. Settings > Keybindings remains the action-key editor; setup is the
 terminal delivery diagnostic.
 
 | Status | Meaning |
@@ -171,7 +197,7 @@ projmux init --allow-symlink
 
 The merge is idempotent: matching bindings are no-ops, missing bindings are
 added, and keys already mapped to a different user action are skipped with a
-warning. `projmux init` does not read `keymap.toml`; direct tmux aliases still
+warning. `projmux init` does not read `keymap.toml`; direct tmux keys still
 belong in Settings > Keybindings or the keymap file.
 
 ### Ghostty
@@ -206,7 +232,7 @@ previous/next window:
   "actions": [
     { "command": { "action": "sendInput", "input": "\u001b1" }, "id": "User.projmuxSidebar" },
     { "command": { "action": "sendInput", "input": "\u001b2" }, "id": "User.projmuxNotifySidebar" },
-    { "command": { "action": "sendInput", "input": "\u001b3" }, "id": "User.projmuxSessions" },
+    { "command": { "action": "sendInput", "input": "\u001b3" }, "id": "User.projmuxRecentWindows" },
     { "command": { "action": "sendInput", "input": "\u001b4" }, "id": "User.projmuxAIPicker" },
     { "command": { "action": "sendInput", "input": "\u001b5" }, "id": "User.projmuxSettings" },
     { "command": { "action": "sendInput", "input": "\u0002r" }, "id": "User.projmuxAISplitRight" },

package/docs/native-picker-no-fzf-poc.md

@@ -112,7 +112,7 @@ The fzf compatibility surface for the native engine is tracked in
   the top border off screen.
 - Native preview panes normalize tabs and control bytes before horizontal
   clipping, preventing long preview rows from wrapping and consuming extra
-  vertical viewport rows in Alt-3/session popups.
+  vertical viewport rows in session popups.
 - Native sidebar list scrollbars use the fixed list viewport as their track and
   measure multi-line cards in rendered rows, so the thumb does not shrink or
   jump when card heights vary.
@@ -179,8 +179,9 @@ Manual UX checks for the Docker sandbox:
 - Alt-1 opens with the top border/title visible, not clipped.
 - Vertical borders stay continuous while moving Up/Down.
 - Alt-1 closes the sidebar immediately when pressed again.
-- Alt-2, Alt-3, Alt-4, and Alt-5 open their matching native popups and close
+- Alt-2, Alt-4, and Alt-5 open their matching native popups and close
   on the same Alt key immediately.
+- Alt-3 opens Recent Windows.
 - Arrow keys move selection without leaking `^[[` text into the query.
 
 `fzf` is intentionally not installed in the image.

package/docs/native-picker-parity.md

@@ -32,6 +32,7 @@ native picker engine and is not a public dependency-policy change.
 | close `--bind key:abort` | Esc, Ctrl-C, Alt-N, Ctrl-Alt-S variants | Covered | `CloseActions`; `TestNativeRunnerUsesSharedCloseActions` |
 | terminal modified-key encoding | legacy parser fixtures, Ghostty/kitty-style modified keys | Covered | native handles app-specific parser fixtures, generic modified letters/digits, and non-text keys such as Enter/Esc/Backspace/Tab; this is backend parity, not product fallback guidance; `TestNativeInteractiveSupportsCSIuAppKeyBindings` |
 | `execute-silent(...)+refresh-preview` | switch/session preview cycling | Covered for command execution and rerender loop | `pickercompat.PickerOptions`/`pickercompat.OptionsFromPicker`; `TestNativeInteractiveRunsCustomActionCommandAndRefreshes`; `TestPickerOptionsMapsCompatBindingsToContractActions`; Docker no-fzf e2e sends `Right` and `Alt-Down` before selection |
+| action-local/event-backed mutable refresh | notify sidebar `a` ack and `x` non-critical clear; notify sidebar queue-write event refresh; switch sidebar `Ctrl-X` kill | Covered for in-session row/live-state refresh without picker restart | `picker.Action.Mutate` returns a `DeferredUpdate`, notify queue-write events trigger the same `DeferredUpdate` path after an event arrives, and both reuse the native frame diff renderer plus value-then-clamp selection preservation; `TestNativeInteractiveCustomActionMutatesItemsAndRefreshes`; `TestNativeInteractiveCustomActionRefreshPreservesSelectedValue`; `TestNativeInteractiveDeferredUpdateTriggerRefreshesRepeatedly`; notify sidebar app tests assert one picker invocation with refreshed rows/live state and event subscription; switch sidebar kill app tests assert one native picker invocation with refreshed rows/preview and previous-live-session guard preservation |
 | `focus:execute-silent(...)` | switch sidebar focus | Covered | native renders the selection frame diff before running sidebar focus commands so movement stays visible before tmux focus side effects; `runNativeFocusAction`; `TestNativeInteractiveRunsFocusActionOnSelectionChange` |
 | `start:pos(N)` | switch sidebar initial row | Covered | `pickercompat.PickerOptions`/`pickercompat.OptionsFromPicker`; `TestPickerOptionsFromCompatPickerMapsStartPosToInitialIndex`; `TestPickerOptionsMapsCompatBindingsToContractActions` |
 | `--preview` | switch, sessions | Covered by command output | `nativePreviewLines`; `TestNativeInteractiveRendersSelectedPreview` |
@@ -47,7 +48,7 @@ native picker engine and is not a public dependency-policy change.
 | alternate-screen lifecycle | fzf fullscreen picker screen restore | Covered | native frame updates and screen exit return to column 0 before terminal control sequences, screen exit resets styles plus clears the alternate buffer from the home cursor before restore, and real TTY restores get a short settle window before caller handoff; `nativeScreenEnter`; `TestNativeInteractiveUsesAlternateScreen`; `TestRenderFullFrameUpdateAlwaysHomesAndWritesFrame` |
 | frame content width | fzf border inner width | Covered | `ContentLayout` uses the frame inner width so separators and rows reach the right border; `TestRendererContentLayoutUsesFrameInnerWidth` |
 | picker-owned app background | native picker frame interior | Covered for renderer-owned cells | `ThemeFromEffective` applies built-in fallback and explicit effective background/foreground SGR to the native frame, and frame rows resume the app style after embedded resets so content padding, empty no-footer rows, footer rows, scrollbars, and preview gaps do not leak terminal default background; `TestThemeFromEffectiveFallbackPaintsFrameBackground`; `TestRendererFrameBackgroundResumesAfterContentResetBeforePadding`; `TestNativeInteractiveNoFooterBlankRowsUseThemeBackground`; `TestNativeInteractiveSplitPreviewGapsUseThemeBackground`; `TestNativeInteractiveSettingsAIBadgeStyleLongPreviewClampsFrameRows` |
-| tmux popup frame interaction | native picker popups launched through `popup-toggle` | Covered for native backend popups | `popup-toggle` passes tmux `display-popup -B` when `PROJMUX_PICKER_BACKEND=native`, so the native picker owns the visible frame instead of double-drawing with the tmux popup border; native Alt-1 uses a compact native-only minimum while fzf keeps the previous project sidebar minimum; Alt-1/Alt-2 sidebar heights reserve two bottom statusbar rows; Alt-2 notify sidebar keeps the fzf-like `24%` / min `64` baseline; `TestAppRunTmuxPopupToggleUsesBorderlessPopupForNativeBackend`; `TestSessionizerSidebarWidthKeepsFZFMinimum`; `TestSidebarPopupHeightLeavesStatusbarRows`; `TestNotifySidebarWidthMatchesFZFBaseline`; `TestAppRunTmuxPopupToggleKeepsNotifySidebarFZFSizingForNative` |
+| tmux popup frame interaction | native picker popups launched through `popup-toggle` | Covered for native backend popups | `popup-toggle` passes tmux `display-popup -B` when `PROJMUX_PICKER_BACKEND=native`, so the native picker owns the visible frame instead of double-drawing with the tmux popup border; tmux 3.4 per-command `display-popup -s` is used for the popup body style, setting `bg`/`fg` from the same effective theme tmux background/foreground tokens so tmux's blank/pre-draw popup body matches the native picker surface before the app renderer paints; no global `popup-style`, `popup-border-style`, shell pane background, `default-style`, `window-style`, OSC background, or status/window palette options are changed; native Alt-1 uses a compact native-only minimum while fzf keeps the previous project sidebar minimum; Alt-1/Alt-2 sidebar heights reserve two bottom statusbar rows; Alt-2 notify sidebar keeps the fzf-like `24%` / min `64` baseline; `TestAppRunTmuxPopupToggleUsesBorderlessPopupForNativeBackend`; `TestAppRunTmuxPopupToggleUsesNativePopupBodyStyleFromEffectiveTheme`; `TestBuildPopupToggleWithPickerBackendStylesNativeOnly`; `TestBuildDisplayPopupArgsAddsBodyStyle`; `TestSessionizerSidebarWidthKeepsFZFMinimum`; `TestSidebarPopupHeightLeavesStatusbarRows`; `TestNotifySidebarWidthMatchesFZFBaseline`; `TestAppRunTmuxPopupToggleKeepsNotifySidebarFZFSizingForNative` |
 | optional native titlebar | native picker popup frame | Covered for empty-title compatibility and opt-in titles | `picker.Options.Title`; `RenderFrameWithTitle`; `ContentLayoutWithTitle`; empty titles keep the prior frame unchanged, non-empty titles render in a picker-owned section below the top border, titlebar text/divider/chip gaps inherit the frame background/foreground instead of a separate titlebar overlay ANSI layer, and the native Alt-1 project sidebar opts into `Projects`; `TestRendererRenderFrameWithTitleKeepsDefaultWhenTitleEmpty`; `TestRendererRenderFrameWithTitleUsesTitlebarRow`; `TestRendererContentLayoutWithTitleReservesTitlebarRow`; `TestNativeInteractiveRendersOptionalTitlebar`; `TestSwitchCommandNativeSidebarSetsTitle` |
 | redraw flicker/top clipping | keyboard navigation in exact-height tmux popup | Partially covered | native redraws use synchronized updates plus coalesced row diffs after the first frame, skip unchanged frames, render frame diffs before sidebar focus commands, frame rendering avoids trailing bottom-border CRLF, and screen exit clears the alternate buffer before restore; `TestNativeInteractiveWrapsRedrawsInSynchronizedUpdates`; `TestFrameUpdateRendererSkipsUnchangedFrame`; `TestFrameUpdateRendererCoalescesEachFrameUpdate`; `TestRendererRenderFrameUsesCRLFRowsForRawTTY`; `TestNativeInteractiveUsesAlternateScreen` |
 
@@ -110,8 +111,10 @@ contract; native popups still rely on the existing borderless tmux popup path.
   the right-side preview layout instead of inline preview, asserts the stored
   preview cursor, selects `bravo-web`, and asserts tmux reports the selected
   session's active target on the expected window with the expected pane path.
-- `notify sidebar`: native routing is unit-covered; Docker no-fzf e2e pushes a
-  notification, presses printable expect key `a`, and verifies the row is acked.
+- `notify sidebar`: native routing is unit-covered; app tests cover
+  queue-write event subscription and picker tests cover repeated
+  event-triggered deferred refresh. Docker no-fzf e2e pushes a notification,
+  presses printable expect key `a`, and verifies the row is acked.
 
 ## Experimental Boundaries