tmux-ide 2.7.0 → 2.8.0

package/packages/daemon/dist/lib/manifest-pack.js

@@ -0,0 +1,232 @@
+/**
+ * Remote agent-detection manifest packs — `tmux-ide update --manifests` (M25.4).
+ *
+ * Detection breadth shouldn't wait for an npm release: agent TUIs change their
+ * chrome between our versions, and a re-tuned manifest is pure data. This
+ * module fetches a versioned MANIFEST PACK from a static URL and installs it
+ * where the manifest loader already hot-merges from.
+ *
+ * ## The pack format (publish contract)
+ *
+ * A single JSON document:
+ *
+ * ```json
+ * {
+ *   "schema": 1,                       // this format's version — reject others
+ *   "pack": "2026.07.12",              // pack version (informational, any string)
+ *   "manifests": [                     // one AgentManifest per entry, exactly the
+ *     {                                //   override-file shape manifest-loader.ts
+ *       "id": "claude",                //   documents (id, commands[], states,
+ *       "commands": ["claude"],        //   optional confidence)
+ *       "confidence": "tuned",
+ *       "states": { "working": { "any": [{ "contains": "esc to interrupt" }] } }
+ *     }
+ *   ]
+ * }
+ * ```
+ *
+ * Publishing: attach the document as the `agent-manifests.json` asset on a
+ * GitHub release — {@link manifestPackUrl} constructs the same
+ * `releases/download/v<version>/<asset>` URL the TUI-binary download uses, so
+ * a pack rides every release and a NEWER pack can be re-attached to the
+ * CURRENT release tag at any time (the fetch always re-downloads; the pane
+ * option cache never pins it).
+ *
+ * ## Precedence (verified by tests)
+ *
+ * The pack installs into `<agent-detection>/pack/manifest-pack.json` — a
+ * SUBDIRECTORY of the user-override dir, so `readOverrideManifests` (which
+ * lists only `*.json` FILES in the top level) never sees it. The loader merges
+ * `bundled → pack → user`: a pack manifest replaces a bundled id or appends a
+ * new one, and a user's own `<agent-detection>/*.json` file ALWAYS beats both.
+ *
+ * ## Safety
+ *
+ * - Https only for remote URLs. `file://` and loopback `http://` are accepted
+ *   ONLY so tests/dev can exercise the flow without the network — anything
+ *   else is rejected before a byte is fetched.
+ * - The pack is schema-validated ({@link validateManifestPack}) BEFORE being
+ *   written; an invalid pack fails loudly and leaves the previous one intact.
+ * - The gated periodic refresh ({@link maybeRefreshManifestPack}) rides the
+ *   existing daily update check (see {@link ./update-check.ts}) — no timers or
+ *   daemons of its own — and is double-gated on `updates.check` (the caller)
+ *   and `updates.manifests` (read here, default false).
+ */
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { overrideDir, validateManifestShape } from "../tui/detect/manifest-loader.js";
+import { getAppConfig } from "./app-config.js";
+import { getCurrentVersion } from "./update-check.js";
+import { RELEASE_REPO } from "./tui-binary.js";
+/** The pack-format version this build understands. */
+export const MANIFEST_PACK_SCHEMA = 1;
+/** The release asset name a pack is published under. */
+export const MANIFEST_PACK_ASSET = "agent-manifests.json";
+/** Env override for the pack URL (tests/dev; may be `file://` or loopback http). */
+export const MANIFEST_PACK_URL_ENV = "TMUX_IDE_MANIFEST_PACK_URL";
+// ---------------------------------------------------------------------------
+// Pure
+// ---------------------------------------------------------------------------
+/**
+ * PURE — the default pack URL for a version:
+ * `https://github.com/<repo>/releases/download/v<version>/agent-manifests.json`
+ * (the same asset-URL construction as the TUI binary download).
+ */
+export function manifestPackUrl(version = getCurrentVersion()) {
+    const v = version.startsWith("v") ? version.slice(1) : version;
+    return `https://github.com/${RELEASE_REPO}/releases/download/v${v}/${MANIFEST_PACK_ASSET}`;
+}
+/**
+ * PURE — is `url` an acceptable pack source? `https:` always; `file:` and
+ * LOOPBACK `http:` (127.0.0.1 / localhost / [::1]) only so tests and local
+ * fixtures can drive the flow. Any other scheme/host is rejected.
+ */
+export function isAllowedPackUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return false;
+    }
+    if (parsed.protocol === "https:" || parsed.protocol === "file:")
+        return true;
+    if (parsed.protocol === "http:") {
+        return ["127.0.0.1", "localhost", "[::1]", "::1"].includes(parsed.hostname);
+    }
+    return false;
+}
+/**
+ * PURE — validate an untrusted pack document. Returns the typed pack or a
+ * human-readable reason. Every manifest entry must pass the SAME structural
+ * validation user override files do ({@link validateManifestShape}) — one bad
+ * entry rejects the whole pack (a partial install would be harder to reason
+ * about than a loud failure). Never throws.
+ */
+export function validateManifestPack(value) {
+    if (typeof value !== "object" || value === null)
+        return { ok: false, reason: "not an object" };
+    const v = value;
+    if (v.schema !== MANIFEST_PACK_SCHEMA) {
+        return {
+            ok: false,
+            reason: `unsupported schema ${JSON.stringify(v.schema)} (want ${MANIFEST_PACK_SCHEMA})`,
+        };
+    }
+    if (typeof v.pack !== "string" || v.pack.trim().length === 0) {
+        return { ok: false, reason: "missing pack version string" };
+    }
+    if (!Array.isArray(v.manifests) || v.manifests.length === 0) {
+        return { ok: false, reason: "manifests must be a non-empty array" };
+    }
+    for (let i = 0; i < v.manifests.length; i++) {
+        if (!validateManifestShape(v.manifests[i])) {
+            return {
+                ok: false,
+                reason: `manifests[${i}] is not a valid AgentManifest (need id, commands[], states)`,
+            };
+        }
+    }
+    return {
+        ok: true,
+        pack: { schema: MANIFEST_PACK_SCHEMA, pack: v.pack, manifests: v.manifests },
+    };
+}
+// ---------------------------------------------------------------------------
+// io
+// ---------------------------------------------------------------------------
+/** The installed pack's directory: `<agent-detection>/pack/`. */
+export function packDir() {
+    return join(overrideDir(), "pack");
+}
+/** The installed pack's path: `<agent-detection>/pack/manifest-pack.json`. */
+export function packPath() {
+    return join(packDir(), "manifest-pack.json");
+}
+/**
+ * io — fetch and validate a pack. `file://` URLs are read from disk (Node's
+ * fetch does not speak file:); everything else goes through fetch with a
+ * timeout. THROWS with an actionable message on a disallowed URL, a failed
+ * fetch, malformed JSON, or a schema-invalid pack — the caller decides whether
+ * that is loud (CLI) or swallowed (the background refresh).
+ */
+export async function fetchManifestPack(url, timeoutMs = 5000) {
+    if (!isAllowedPackUrl(url)) {
+        throw new Error(`refusing manifest-pack URL ${url} — https only (file:// and loopback http are allowed for local testing)`);
+    }
+    let body;
+    if (url.startsWith("file:")) {
+        body = readFileSync(fileURLToPath(url), "utf8");
+    }
+    else {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        try {
+            const res = await fetch(url, { signal: controller.signal });
+            if (!res.ok) {
+                throw new Error(`manifest-pack download failed (${url} → HTTP ${res.status} ${res.statusText})`);
+            }
+            body = await res.text();
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        throw new Error(`manifest pack at ${url} is not valid JSON`);
+    }
+    const verdict = validateManifestPack(parsed);
+    if (!verdict.ok) {
+        throw new Error(`manifest pack at ${url} rejected: ${verdict.reason}`);
+    }
+    return verdict.pack;
+}
+/**
+ * io — write a validated pack into place atomically (temp-in-same-dir →
+ * rename, so a crash never leaves a half-written pack the loader would then
+ * warn about every run). Returns the installed path.
+ */
+export function installManifestPack(pack, dest = packPath()) {
+    mkdirSync(dirname(dest), { recursive: true });
+    const tmp = `${dest}.${process.pid}.tmp`;
+    writeFileSync(tmp, JSON.stringify(pack, null, 2));
+    renameSync(tmp, dest);
+    return dest;
+}
+/**
+ * io — the `tmux-ide update --manifests` flow: resolve the URL (env override →
+ * the release-asset default), fetch, validate, install. Throws loudly on any
+ * failure (the CLI surfaces it); returns what was installed for reporting.
+ */
+export async function updateManifestPack(opts = {}) {
+    const log = opts.log ?? (() => { });
+    const url = opts.url ?? process.env[MANIFEST_PACK_URL_ENV] ?? manifestPackUrl();
+    log(`fetching manifest pack from ${url}`);
+    const pack = await fetchManifestPack(url);
+    const path = installManifestPack(pack);
+    log(`installed pack ${pack.pack} (${pack.manifests.length} manifests) → ${path}`);
+    return { path, packVersion: pack.pack, count: pack.manifests.length };
+}
+/**
+ * io — the GATED background refresh the daily update check invokes (see
+ * `runUpdateCheck` in {@link ./update-check.ts}). Opt-in via
+ * `updates.manifests: true` (default false); NEVER throws — a failed refresh
+ * just keeps the previous pack, exactly like a failed version check keeps the
+ * previous `latest`.
+ */
+export async function maybeRefreshManifestPack() {
+    try {
+        if (!getAppConfig().updates.manifests)
+            return;
+        await updateManifestPack();
+    }
+    catch {
+        // Offline, a missing release asset, or an invalid pack — all degrade to
+        // "keep what we have"; the explicit CLI path reports errors loudly instead.
+    }
+}

package/packages/daemon/dist/lib/state-home.d.ts

@@ -0,0 +1,2 @@
+/** Absolute path to the state home directory (not created here). */
+export declare function stateHome(): string;

package/packages/daemon/dist/lib/state-home.js

@@ -0,0 +1,12 @@
+/**
+ * THE tmux-ide state home — `TMUX_IDE_HOME` when set (tests / per-run
+ * overrides), else `~/.tmux-ide`. The same resolution the welcome marker,
+ * update cache, and app state each grew locally; new state files should
+ * resolve through here so none of them can drift from the override again.
+ */
+import { homedir } from "node:os";
+import { join } from "node:path";
+/** Absolute path to the state home directory (not created here). */
+export function stateHome() {
+    return process.env.TMUX_IDE_HOME ?? join(homedir(), ".tmux-ide");
+}

package/packages/daemon/dist/lib/update-check.js

@@ -223,6 +223,11 @@ export async function runUpdateCheck({ now = Date.now() } = {}) {
     const cache = readUpdateCache();
     if (!shouldCheck(cache?.lastCheckedAt ?? null, now))
         return;
+    // The agent-detection manifest-pack refresh RIDES this same daily throttle
+    // (M25.4) — no timer of its own, gated again inside on `updates.manifests`
+    // (default false) and never throwing. Dynamic import: manifest-pack imports
+    // this module for getCurrentVersion, so a static import would be a cycle.
+    void import("./manifest-pack.js").then((m) => m.maybeRefreshManifestPack()).catch(() => { });
     const fetched = await fetchLatestVersion();
     writeUpdateCache({
         lastCheckedAt: now,

package/packages/daemon/dist/native/TmuxIdeNotifier.app/Contents/Info.plist

@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleDevelopmentRegion</key>
+  <string>en</string>
+  <key>CFBundleDisplayName</key>
+  <string>tmux-ide</string>
+  <key>CFBundleExecutable</key>
+  <string>tmux-ide-notifier</string>
+  <key>CFBundleIconFile</key>
+  <string>AppIcon</string>
+  <key>CFBundleIconName</key>
+  <string>AppIcon</string>
+  <key>CFBundleIdentifier</key>
+  <string>com.wavyrai.tmuxide.notifier</string>
+  <key>CFBundleInfoDictionaryVersion</key>
+  <string>6.0</string>
+  <key>CFBundleName</key>
+  <string>tmux-ide</string>
+  <key>CFBundlePackageType</key>
+  <string>APPL</string>
+  <key>CFBundleShortVersionString</key>
+  <string>2.8.0</string>
+  <key>CFBundleVersion</key>
+  <string>2.8.0</string>
+  <key>LSMinimumSystemVersion</key>
+  <string>11.0</string>
+  <key>LSUIElement</key>
+  <true/>
+  <key>NSPrincipalClass</key>
+  <string>NSApplication</string>
+</dict>
+</plist>

package/packages/daemon/dist/native/TmuxIdeNotifier.app/Contents/PkgInfo

@@ -0,0 +1 @@
+APPL????

package/packages/daemon/dist/native/TmuxIdeNotifier.app/Contents/_CodeSignature/CodeResources

@@ -0,0 +1,139 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>files</key>
+	<dict>
+		<key>Resources/AppIcon.icns</key>
+		<data>
+		X3UpT06Bz44e6JibpJhhiMxRfno=
+		</data>
+		<key>Resources/Assets.car</key>
+		<data>
+		I3z+NDxWadVSrUS0xGMi1yZxHfA=
+		</data>
+	</dict>
+	<key>files2</key>
+	<dict>
+		<key>Resources/AppIcon.icns</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			tkz+Ee3lkawLrys701JjQo2Z+YlNtbudhtH13NTsrQw=
+			</data>
+		</dict>
+		<key>Resources/Assets.car</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			vuVGO00nkAAaL21f21SA22M7NZ311c+KH7/lizezdck=
+			</data>
+		</dict>
+	</dict>
+	<key>rules</key>
+	<dict>
+		<key>^Resources/</key>
+		<true/>
+		<key>^Resources/.*\.lproj/</key>
+		<dict>
+			<key>optional</key>
+			<true/>
+			<key>weight</key>
+			<real>1000</real>
+		</dict>
+		<key>^Resources/.*\.lproj/locversion.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>1100</real>
+		</dict>
+		<key>^Resources/Base\.lproj/</key>
+		<dict>
+			<key>weight</key>
+			<real>1010</real>
+		</dict>
+		<key>^version.plist$</key>
+		<true/>
+	</dict>
+	<key>rules2</key>
+	<dict>
+		<key>.*\.dSYM($|/)</key>
+		<dict>
+			<key>weight</key>
+			<real>11</real>
+		</dict>
+		<key>^(.*/)?\.DS_Store$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>2000</real>
+		</dict>
+		<key>^(Frameworks|SharedFrameworks|PlugIns|Plug-ins|XPCServices|Helpers|MacOS|Library/(Automator|Spotlight|LoginItems))/</key>
+		<dict>
+			<key>nested</key>
+			<true/>
+			<key>weight</key>
+			<real>10</real>
+		</dict>
+		<key>^.*</key>
+		<true/>
+		<key>^Info\.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^PkgInfo$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^Resources/</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^Resources/.*\.lproj/</key>
+		<dict>
+			<key>optional</key>
+			<true/>
+			<key>weight</key>
+			<real>1000</real>
+		</dict>
+		<key>^Resources/.*\.lproj/locversion.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>1100</real>
+		</dict>
+		<key>^Resources/Base\.lproj/</key>
+		<dict>
+			<key>weight</key>
+			<real>1010</real>
+		</dict>
+		<key>^[^/]+$</key>
+		<dict>
+			<key>nested</key>
+			<true/>
+			<key>weight</key>
+			<real>10</real>
+		</dict>
+		<key>^embedded\.provisionprofile$</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^version\.plist$</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+	</dict>
+</dict>
+</plist>

package/packages/daemon/dist/restore.d.ts

@@ -32,19 +32,46 @@ export interface RestorePlan {
  * config; failing that, we raw-rebuild from the recorded windows/panes.
  */
 export declare function buildRestorePlan(snapshot: FleetSnapshot, liveSessionNames: Iterable<string>, ideProjects?: Map<string, string>): RestorePlan;
+/**
+ * The native session-resume invocation per agent kind (M24.1 — the table was
+ * claude-only until then). ONLY VERIFIED entries ship; each spelling's source:
+ *  - `claude --resume <id>`: the shipped integration (its hooks record the id).
+ *  - `codex resume <id>`: `codex resume --help` — "Usage: codex resume
+ *    [OPTIONS] [SESSION_ID]  … Session id (UUID) or session name".
+ *  - `opencode --session <id>`: `opencode --help` — "-s, --session  session id
+ *    to continue".
+ *  - `cursor-agent --resume <id>`: `cursor-agent --help` — "--resume [chatId]
+ *    Select a session to resume".
+ *  - `copilot --resume=<id>`: GitHub Copilot CLI command reference —
+ *    "--resume[=VALUE]  Resume a previous interactive session … Optionally
+ *    specify a session ID" (the `=` form, since the value is optional).
+ * Unverified (no entry): gemini, aider, goose, amp — no confirmed native
+ * per-session resume invocation at the time of writing.
+ *
+ * How `@agent_session_id` gets recorded per kind (M25.3):
+ *  - claude — the hooks integration (`integration install claude`).
+ *  - opencode — the plugin integration (`integration install opencode`).
+ *  - codex, cursor — automatic: the chrome updater probes the agent's own
+ *    on-disk session state ({@link ./tui/detect/session-id.ts}).
+ *  - copilot — no automatic capture (skipped with evidence — see the
+ *    session-id module header); fires only for panes whose agent self-reported
+ *    the id per the agent contract
+ *    (`tmux set-option -p @agent_session_id <id>`), which any kind may do.
+ */
+export declare const AGENT_RESUME_COMMANDS: Record<string, (id: string) => string>;
 /**
  * PURE — the command to relaunch a pane so its agent conversation is revived,
  * or `null` for "no resume — leave it a plain shell (or replay `command`)".
  *
  * Decision table (only fires when `resumeAgents` is on):
- *  - claude + a recorded `@agent_session_id` → `claude --resume <id>`. The id is
- *    a uuid, but we don't trust the snapshot: unless it matches
- *    {@link SAFE_SESSION_ID} (`[A-Za-z0-9-]`) we bail to `null` rather than risk
- *    feeding shell metacharacters into send-keys.
- *  - claude with NO session id → `null`. `claude --continue` would be too
- *    magical here (it resumes the most-recent conversation in the cwd, which may
- *    belong to a different pane); a fresh shell is the safe, predictable default.
- *  - any other agent → `null`. No native resume story yet.
+ *  - a kind in {@link AGENT_RESUME_COMMANDS} + a recorded `@agent_session_id` →
+ *    that kind's resume invocation. The id is uuid-ish, but we don't trust the
+ *    snapshot: unless it matches {@link SAFE_SESSION_ID} we bail to `null`
+ *    rather than risk feeding shell metacharacters into send-keys.
+ *  - a known kind with NO session id → `null`. A "continue most recent" flag
+ *    would be too magical here (it resumes the cwd's most-recent conversation,
+ *    which may belong to a different pane); a fresh shell is the safe default.
+ *  - any other agent → `null`. No VERIFIED resume story.
  *  - `resumeAgents` off → always `null`.
  */
 export declare function paneResumeCommand(pane: PaneSnapshot, opts: {

package/packages/daemon/dist/restore.js

@@ -13,9 +13,11 @@
  *
  * `--resume-agents` (or `{ "restore": { "resumeAgents": true } }` in
  * `~/.tmux-ide/config.json`) layers native agent-resume on top: a rebuilt
- * claude pane that carries a recorded `@agent_session_id` relaunches as
- * `claude --resume <id>`, reviving the actual conversation rather than opening
- * a fresh shell. See {@link paneResumeCommand} for the exact decision table.
+ * agent pane that carries a recorded `@agent_session_id` relaunches with its
+ * kind's VERIFIED resume invocation (`claude --resume <id>`, `codex resume
+ * <id>`, … — {@link AGENT_RESUME_COMMANDS}), reviving the actual conversation
+ * rather than opening a fresh shell. See {@link paneResumeCommand} for the
+ * exact decision table.
  *
  * {@link buildRestorePlan} + {@link paneResumeCommand} + {@link restorePrefs}
  * are PURE (unit-tested); {@link restore} is the thin io wrapper that reads the
@@ -58,32 +60,67 @@ export function buildRestorePlan(snapshot, liveSessionNames, ideProjects = new M
 // ---------------------------------------------------------------------------
 // Pure — agent resume decision
 // ---------------------------------------------------------------------------
-/** A session id is trusted only if it's the uuid alphabet — nothing shell-active. */
-const SAFE_SESSION_ID = /^[A-Za-z0-9-]+$/;
+/** A session id is trusted only if it's uuid-ish (`[A-Za-z0-9_-]` — underscore
+ *  covers opencode's `ses_…` ids) — nothing shell-active. */
+const SAFE_SESSION_ID = /^[A-Za-z0-9_-]+$/;
+/**
+ * The native session-resume invocation per agent kind (M24.1 — the table was
+ * claude-only until then). ONLY VERIFIED entries ship; each spelling's source:
+ *  - `claude --resume <id>`: the shipped integration (its hooks record the id).
+ *  - `codex resume <id>`: `codex resume --help` — "Usage: codex resume
+ *    [OPTIONS] [SESSION_ID]  … Session id (UUID) or session name".
+ *  - `opencode --session <id>`: `opencode --help` — "-s, --session  session id
+ *    to continue".
+ *  - `cursor-agent --resume <id>`: `cursor-agent --help` — "--resume [chatId]
+ *    Select a session to resume".
+ *  - `copilot --resume=<id>`: GitHub Copilot CLI command reference —
+ *    "--resume[=VALUE]  Resume a previous interactive session … Optionally
+ *    specify a session ID" (the `=` form, since the value is optional).
+ * Unverified (no entry): gemini, aider, goose, amp — no confirmed native
+ * per-session resume invocation at the time of writing.
+ *
+ * How `@agent_session_id` gets recorded per kind (M25.3):
+ *  - claude — the hooks integration (`integration install claude`).
+ *  - opencode — the plugin integration (`integration install opencode`).
+ *  - codex, cursor — automatic: the chrome updater probes the agent's own
+ *    on-disk session state ({@link ./tui/detect/session-id.ts}).
+ *  - copilot — no automatic capture (skipped with evidence — see the
+ *    session-id module header); fires only for panes whose agent self-reported
+ *    the id per the agent contract
+ *    (`tmux set-option -p @agent_session_id <id>`), which any kind may do.
+ */
+export const AGENT_RESUME_COMMANDS = {
+    claude: (id) => `claude --resume ${id}`,
+    codex: (id) => `codex resume ${id}`,
+    opencode: (id) => `opencode --session ${id}`,
+    cursor: (id) => `cursor-agent --resume ${id}`,
+    copilot: (id) => `copilot --resume=${id}`,
+};
 /**
  * PURE — the command to relaunch a pane so its agent conversation is revived,
  * or `null` for "no resume — leave it a plain shell (or replay `command`)".
  *
  * Decision table (only fires when `resumeAgents` is on):
- *  - claude + a recorded `@agent_session_id` → `claude --resume <id>`. The id is
- *    a uuid, but we don't trust the snapshot: unless it matches
- *    {@link SAFE_SESSION_ID} (`[A-Za-z0-9-]`) we bail to `null` rather than risk
- *    feeding shell metacharacters into send-keys.
- *  - claude with NO session id → `null`. `claude --continue` would be too
- *    magical here (it resumes the most-recent conversation in the cwd, which may
- *    belong to a different pane); a fresh shell is the safe, predictable default.
- *  - any other agent → `null`. No native resume story yet.
+ *  - a kind in {@link AGENT_RESUME_COMMANDS} + a recorded `@agent_session_id` →
+ *    that kind's resume invocation. The id is uuid-ish, but we don't trust the
+ *    snapshot: unless it matches {@link SAFE_SESSION_ID} we bail to `null`
+ *    rather than risk feeding shell metacharacters into send-keys.
+ *  - a known kind with NO session id → `null`. A "continue most recent" flag
+ *    would be too magical here (it resumes the cwd's most-recent conversation,
+ *    which may belong to a different pane); a fresh shell is the safe default.
+ *  - any other agent → `null`. No VERIFIED resume story.
  *  - `resumeAgents` off → always `null`.
  */
 export function paneResumeCommand(pane, opts) {
     if (!opts.resumeAgents)
         return null;
-    if (pane.agent !== "claude")
+    const resume = pane.agent ? AGENT_RESUME_COMMANDS[pane.agent] : undefined;
+    if (!resume)
         return null;
     const id = pane.agentSessionId;
     if (!id || !SAFE_SESSION_ID.test(id))
         return null;
-    return `claude --resume ${id}`;
+    return resume(id);
 }
 /** PURE — how many of a session's panes would resume under `resumeAgents`. */
 export function countResumableAgents(session, resumeAgents) {

package/packages/daemon/dist/send.d.ts

@@ -1,4 +1,4 @@
-import { type PaneInfo } from "./widgets/lib/pane-comms.ts";
+import { type PaneInfo, type PaneBusyStatus } from "./widgets/lib/pane-comms.ts";
 export declare const LONG_MESSAGE_THRESHOLD = 150;
 /**
  * Write a long message to a dispatch file and return the short trigger command.
@@ -23,5 +23,37 @@ interface SendOptions {
  * 5. Case-insensitive partial title match
  */
 export declare function resolvePane(panes: PaneInfo[], target: string): PaneInfo | null;
+/** What a delivery reports back (the `send --json` payload, and the control
+ *  socket's `send` verb data). */
+export interface DeliverResult {
+    ok: true;
+    session: string;
+    target: {
+        paneId: string;
+        name: string | null;
+        title: string;
+        role: string | null;
+    };
+    message: string;
+    busyStatus: PaneBusyStatus;
+    sentViaFile: boolean;
+    warning?: "agent_busy";
+}
+/**
+ * Deliver `message` to a pane of `session` — the SHARED core behind the
+ * `tmux-ide send` CLI case and the control socket's `send` verb. Resolves
+ * `target` (pane id / @ide_name / title / role / partial title), adapts to
+ * the pane's busy status, and routes long messages through a dispatch file
+ * under `dir` when one is given (without a `dir` the text is sent directly).
+ * Throws `IdeError` (SESSION_NOT_FOUND / PANE_NOT_FOUND) — no printing here.
+ */
+export declare function deliverMessage(opts: {
+    session: string;
+    target: string;
+    message: string;
+    noEnter?: boolean;
+    /** The project dir long messages are dispatched through as a file. */
+    dir?: string;
+}): DeliverResult;
 export declare function send(targetDir: string | undefined, opts: SendOptions): Promise<void>;
 export {};