tmux-ide 2.9.0-beta.19 → 2.9.0-beta.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tmux-ide",
-  "version": "2.9.0-beta.19",
+  "version": "2.9.0-beta.21",
   "description": "A visual, agent-aware IDE for any tmux session, with optional workspace presets",
   "type": "module",
   "bin": {
@@ -39,6 +39,7 @@
     "typecheck": "echo \"root typecheck deferred to per-package turbo run\"",
     "dev": "node bin/cli.js",
     "dev:instance": "node scripts/development-instance.mjs",
+    "dev:pilotty": "node scripts/pilotty-dev.mjs",
     "dev:web": "node scripts/dev-web.mjs",
     "test": "pnpm -r --workspace-concurrency=1 --filter @tmux-ide/daemon --filter @tmux-ide/contracts --filter @tmux-ide/core --filter @tmux-ide/daemon-client --filter @tmux-ide/sdk --filter @tmux-ide/desktop-renderer --filter @tmux-ide/web-workspace --filter @tmux-ide/electron-shell run test",
     "test:unit": "pnpm -r --workspace-concurrency=1 --filter @tmux-ide/daemon --filter @tmux-ide/contracts --filter @tmux-ide/core --filter @tmux-ide/daemon-client --filter @tmux-ide/sdk --filter @tmux-ide/desktop-renderer --filter @tmux-ide/web-workspace --filter @tmux-ide/electron-shell run test",
@@ -63,11 +64,12 @@
     "postinstall": "node scripts/postinstall.js",
     "docs": "turbo run dev --filter=@tmux-ide/docs",
     "demo:tui": "bun --preload @opentui/solid/preload docs/scripts/render-tui-demo.tsx",
-    "test:tui-renderer": "bun test --preload @opentui/solid/preload --preload ./packages/daemon/test-support/opentui-renderer-preload.ts ./packages/daemon/src/tui/mirror/pane-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/native-grid-projection-renderer.test.tsx ./packages/daemon/src/tui/mirror/widget-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/missions-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/recipes-gallery-renderer.test.tsx ./packages/daemon/src/tui/mirror/shell-chrome-renderer.test.tsx ./packages/daemon/src/tui/mirror/sidebar-renderer.test.tsx ./packages/daemon/src/tui/mirror/home-files-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/changes-terminal-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/activity-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/features/files/session-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-terminal-workspace-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-shell-view-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-root-error-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-backpressure-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-demand-cadence-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/files-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/changes-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/missions-activity-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/dialogs-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/optional-feature-registry-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/palette-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/pane-scoped-terminal-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/features/rich-preview/feature.test.ts ./packages/daemon/src/tui/mirror/runtime/rich-preview-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/application-shell-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/pane-frame-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/terminal-pane-chrome-view.test.tsx ./packages/daemon/src/tui/mirror/workspace/terminal-window-strip-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/workbench-shell-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/workbench-dock-dual-host-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/agent-terminal-canvas-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/command-palette-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/opentui-insertion-stability-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-shell-home-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/terminal-pane-header-polish-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-home-agent-roster-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-home-agent-flow-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-shell-sidebar-catalog-renderer.test.tsx ./packages/daemon/src/tui/mirror/ui/ui-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-machine-sidebar-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-add-machine-dialog-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-fleet-switcher-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-palette-preview-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-fleet-palette-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-fleet-session-actions-renderer.test.tsx",
+    "test:tui-renderer": "bun test --preload @opentui/solid/preload --preload ./packages/daemon/test-support/opentui-renderer-preload.ts ./packages/daemon/src/tui/mirror/automatic-contrast-renderer.test.tsx ./packages/daemon/src/tui/mirror/pane-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/native-grid-projection-renderer.test.tsx ./packages/daemon/src/tui/mirror/widget-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/missions-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/recipes-gallery-renderer.test.tsx ./packages/daemon/src/tui/mirror/shell-chrome-renderer.test.tsx ./packages/daemon/src/tui/mirror/sidebar-renderer.test.tsx ./packages/daemon/src/tui/mirror/home-files-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/changes-terminal-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/activity-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/features/files/session-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-terminal-workspace-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-shell-view-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-root-error-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-backpressure-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-demand-cadence-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/files-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/changes-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/missions-activity-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/dialogs-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/optional-feature-registry-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/palette-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/pane-scoped-terminal-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/features/rich-preview/feature.test.ts ./packages/daemon/src/tui/mirror/runtime/rich-preview-optional-feature-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/application-shell-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/pane-frame-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/terminal-pane-chrome-view.test.tsx ./packages/daemon/src/tui/mirror/workspace/terminal-window-strip-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/workbench-shell-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/workbench-dock-dual-host-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/agent-terminal-canvas-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/command-palette-surface-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/opentui-insertion-stability-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-shell-home-renderer.test.tsx ./packages/daemon/src/tui/mirror/workspace/terminal-pane-header-polish-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-home-agent-roster-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-home-agent-flow-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-shell-sidebar-catalog-renderer.test.tsx ./packages/daemon/src/tui/mirror/ui/ui-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-machine-sidebar-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-add-machine-dialog-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-fleet-switcher-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-palette-preview-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-fleet-palette-renderer.test.tsx ./packages/daemon/src/tui/mirror/runtime/application-fleet-session-actions-renderer.test.tsx",
     "test:tui-smoke": "bun scripts/smoke-tui-missions.mjs",
     "test:tui-live": "node scripts/tui-testdrive.mjs smoke",
     "test:tui-testdrive": "node --test scripts/lib/tui-testdrive-clipboard-hook.test.mjs scripts/lib/tui-testdrive-input.test.mjs",
     "test:performance-qualification": "node scripts/performance-qualification.mjs",
+    "qualify:installed-latency": "node packages/daemon/scripts/qualify-installed-latency.mjs",
     "benchmark:comparative": "node scripts/comparative-terminal.mjs",
     "test:contracts-initializer-purity": "node --test scripts/lib/contracts-initializer-purity.test.mjs",
     "test:benchmark-comparative": "node --test scripts/comparative-terminal-support.test.mjs scripts/lib/terminal-scroll-observations.test.mjs scripts/lib/comparative-terminal-resources.test.mjs scripts/lib/comparative-terminal-report.test.mjs",

package/packages/contracts/src/__tests__/daemon-wire.test.ts

@@ -4,6 +4,7 @@ import { describe, expect, it } from "vitest";
 import {
   CanonicalDaemonInfoSchema,
   DAEMON_WIRE_PROTOCOL_VERSION,
+  DaemonProvenanceSchema,
   DaemonHealthSchema,
   DaemonHealthzSchema,
   DaemonIdentitySchema,
@@ -115,3 +116,34 @@ describe("environment identity (additive, both directions)", () => {
     expect(withId.daemon.startedAt).toBe(identityFields.startedAt);
   });
 });
+
+describe("daemon provenance (additive)", () => {
+  const fixture = JSON.parse(readFileSync(fixturePath, "utf8")) as {
+    canonical: Record<string, unknown>;
+  };
+  const provenance = {
+    launcher: "headless",
+    supervisor: "systemd",
+    parentPid: 1,
+    stdout: { kind: "file", path: "/var/log/tmux-ide.out", dev: 1, ino: 2 },
+    stderr: { kind: "socket" },
+    warnings: ["stderr: path unresolved"],
+  };
+
+  it("parses records with and without provenance", () => {
+    expect(CanonicalDaemonInfoSchema.parse(fixture.canonical).provenance).toBeUndefined();
+    expect(
+      CanonicalDaemonInfoSchema.parse({ ...fixture.canonical, provenance }).provenance,
+    ).toEqual(provenance);
+    expect(DaemonProvenanceSchema.parse(provenance)).toEqual(provenance);
+  });
+
+  it("rejects unknown supervisors and stream kinds", () => {
+    expect(DaemonProvenanceSchema.safeParse({ ...provenance, supervisor: "cron" }).success).toBe(
+      false,
+    );
+    expect(
+      DaemonProvenanceSchema.safeParse({ ...provenance, stdout: { kind: "journal" } }).success,
+    ).toBe(false);
+  });
+});

package/packages/contracts/src/daemon-events.ts

@@ -268,21 +268,21 @@ export const DaemonEventFleetChangedFrameSchemaZ = z
   .strict();
 
 /**
- * RECEIPT — a pane's ground-truth agent authority (`@agent_state`) completed a
- * turn: the daemon's agent-status watcher observed `working` transition to
- * `done` or `idle`. Unlike the `agent-status.changed` invalidation (a re-fetch
- * hint), this is a typed completion event a consumer can WAIT on without
- * polling: the dock chip, the fleet sidebar, and `tmux-ide wait agent-status`
- * all want exactly "an agent finished".
+ * RECEIPT — a sampled pane-state transition: the daemon's agent-status watcher
+ * observed `@agent_state` change from `working` to `done` or `idle` while the
+ * runtime pane and durable pane stamp remained equal. This does not establish
+ * agent process continuity or success of a submitted task. Session-status
+ * waits use it as a hint to re-read aggregate status, since another agent in
+ * the session may still be working or blocked.
  *
- * `agentId` is the wire-safe durable agent identity — the same
+ * `agentId` is the wire-safe durable pane-derived agent identity — the same
  * `agent.<digest>` id the application-shell sidebar mints from the pane's
  * durable `@tmux_ide_pane_id` stamp — or `null` when the pane carries no valid
- * stamp (receipts still fire; correlation is best-effort). No raw tmux
- * runtime id or path ever crosses this frame. `at` is the daemon's
- * observation time (the watcher polls, so it trails the hook stamp by at most
- * one poll interval). One receipt per completing pane per poll tick; the poll
- * interval is a hard emission floor, so a flapping pane cannot storm clients.
+ * stamp. Anonymous receipts provide no per-agent correlation. No raw tmux
+ * runtime id or path ever crosses this frame. `at` is the daemon's observation
+ * time, not the hook or task completion time. Transitions entirely between
+ * successful polling samples may be missed; this is not a durable turn log.
+ * At most one receipt is emitted per completing pane per poll tick.
  */
 export const DaemonEventAgentTurnCompletedFrameSchemaZ = z
   .object({

package/packages/contracts/src/daemon-wire.ts

@@ -67,6 +67,35 @@ export const CanonicalDaemonReservationSchema = z
   .strict();
 export type CanonicalDaemonReservation = z.infer<typeof CanonicalDaemonReservationSchema>;
 
+/**
+ * Where a daemon's stdout/stderr actually go, captured by the running process
+ * at startup. `dev`/`ino` identify a regular file even when its path could not
+ * be resolved, so a provenance report can match on-disk log files against the
+ * live destination instead of guessing from file names.
+ */
+export const DaemonLogStreamSchema = z.object({
+  kind: z.enum(["file", "tty", "pipe", "socket", "null", "unknown"]),
+  path: z.string().min(1).max(4096).optional(),
+  dev: z.number().int().nonnegative().optional(),
+  ino: z.number().int().nonnegative().optional(),
+  detail: z.string().max(256).optional(),
+});
+export type DaemonLogStream = z.infer<typeof DaemonLogStreamSchema>;
+
+export const DaemonSupervisorKindSchema = z.enum(["manual", "launchd", "systemd", "embedded"]);
+export type DaemonSupervisorKind = z.infer<typeof DaemonSupervisorKindSchema>;
+
+/** Startup provenance stamped into the daemon record; never carries credentials. */
+export const DaemonProvenanceSchema = z.object({
+  launcher: z.enum(["headless", "embedded"]),
+  supervisor: DaemonSupervisorKindSchema,
+  parentPid: z.number().int().nonnegative(),
+  stdout: DaemonLogStreamSchema,
+  stderr: DaemonLogStreamSchema,
+  warnings: z.array(z.string().max(256)).max(8).optional(),
+});
+export type DaemonProvenance = z.infer<typeof DaemonProvenanceSchema>;
+
 export const CanonicalDaemonInfoSchema = z.object({
   supervisionId: DaemonSupervisionIdSchema.optional(),
   pid: z.number().int().positive(),
@@ -78,6 +107,7 @@ export const CanonicalDaemonInfoSchema = z.object({
   environmentId: EnvironmentIdSchema.optional(),
   bindHostname: z.string().trim().min(1),
   authToken: z.string().min(1).nullable(),
+  provenance: DaemonProvenanceSchema.optional(),
 });
 export type CanonicalDaemonInfo = z.infer<typeof CanonicalDaemonInfoSchema>;
 

package/packages/daemon/dist/command-center/agent-status-watch.js

@@ -74,6 +74,10 @@ export function diffChangedSessions(previous, next) {
  * Completed turns between two readings: panes present in BOTH whose state word
  * left `working` for `done` or `idle`. A pane that vanished mid-turn completed
  * nothing; a pane that appeared already-done transitioned nothing we observed.
+ * The durable stamp must remain equal: gaining, losing or replacing it is not
+ * evidence that the replacement completed the prior turn. Two unstamped reads
+ * retain anonymous receipts for compatibility, without process/task correlation.
+ * These sampled status transitions do not prove submitted-task success.
  * Sorted (session, then pane key) for deterministic emission order.
  */
 export function diffTurnCompletions(previous, next) {
@@ -87,12 +91,15 @@ export function diffTurnCompletions(previous, next) {
             const prior = before.get(paneId);
             if (prior === undefined || agentStateWord(prior.state) !== "working")
                 continue;
-            const word = agentStateWord(panes.get(paneId).state);
+            const current = panes.get(paneId);
+            if (prior.paneStamp !== current.paneStamp)
+                continue;
+            const word = agentStateWord(current.state);
             if (word !== "done" && word !== "idle")
                 continue;
             completions.push({
                 sessionName,
-                paneStamp: panes.get(paneId).paneStamp,
+                paneStamp: current.paneStamp,
                 fromStatus: "working",
                 toStatus: word,
             });

package/packages/daemon/dist/command-center/diagnostics.js

@@ -0,0 +1,65 @@
+import { performance } from "node:perf_hooks";
+import { requireOwnerAuthority } from "./owner-authority.js";
+/** One synchronous, demand-only sample. No observers, discovery, or retained baseline. */
+export function sampleDaemonDiagnostics(daemon) {
+    const sampledAtMs = Date.now();
+    const memory = process.memoryUsage();
+    const cpu = process.cpuUsage();
+    const eventLoop = performance.eventLoopUtilization();
+    // Fixed output cardinality. Unknown runtime resource labels are never echoed.
+    const activeResources = {
+        Timeout: 0,
+        Immediate: 0,
+        TCPServerWrap: 0,
+        TCPSocketWrap: 0,
+        PipeWrap: 0,
+        ProcessWrap: 0,
+        FSEventWrap: 0,
+        other: 0,
+    };
+    const resourceNames = process.getActiveResourcesInfo?.();
+    for (const resource of resourceNames ?? []) {
+        if (Object.hasOwn(activeResources, resource) && resource !== "other") {
+            activeResources[resource]++;
+        }
+        else {
+            activeResources.other++;
+        }
+    }
+    return {
+        daemon: {
+            protocolVersion: daemon.protocolVersion,
+            productVersion: daemon.productVersion,
+            instanceId: daemon.instanceId,
+            startedAt: daemon.startedAt,
+            ...(daemon.environmentId !== undefined ? { environmentId: daemon.environmentId } : {}),
+        },
+        pid: process.pid,
+        uptimeMs: process.uptime() * 1000,
+        sampledAtMs,
+        memory: {
+            rss: memory.rss,
+            heapTotal: memory.heapTotal,
+            heapUsed: memory.heapUsed,
+            external: memory.external,
+            arrayBuffers: memory.arrayBuffers,
+        },
+        cpu: { user: cpu.user, system: cpu.system },
+        eventLoop: {
+            idle: eventLoop.idle,
+            active: eventLoop.active,
+            utilization: eventLoop.utilization,
+        },
+        activeResources: resourceNames === undefined ? null : activeResources,
+    };
+}
+export function mountDiagnosticsRoute(app, options) {
+    app.get("/api/diagnostics", requireOwnerAuthority(options.ownerToken, {
+        whenOwnerless: "unavailable",
+        unavailableMessage: "Diagnostics unavailable",
+        mismatchMessage: "Diagnostics require owner authority",
+    }), (c) => {
+        c.header("Cache-Control", "no-store");
+        return c.json(sampleDaemonDiagnostics(options.daemon));
+    });
+}

package/packages/daemon/dist/command-center/log-stream.js

@@ -8,6 +8,7 @@ export async function streamBoundedLogs(stream, options) {
     let wake = null;
     let unsubscribe = () => { };
     let timer = null;
+    let heartbeatTimer = null;
     let cancelWrite = null;
     const cleanup = () => {
         if (closed)
@@ -19,6 +20,9 @@ export async function streamBoundedLogs(stream, options) {
         if (timer)
             clearTimeout(timer);
         timer = null;
+        if (heartbeatTimer)
+            clearInterval(heartbeatTimer);
+        heartbeatTimer = null;
         wake?.();
         wake = null;
         cancelWrite?.();
@@ -51,6 +55,11 @@ export async function streamBoundedLogs(stream, options) {
         unsubscribe();
         return;
     }
+    heartbeatTimer = setInterval(() => {
+        if (!closed && queue.length === 0 && !push({ event: "heartbeat", data: "keep-alive" }))
+            abort();
+    }, options.heartbeatIntervalMs ?? 15_000);
+    heartbeatTimer.unref?.();
     try {
         // Keep newest bounded history, reserving room for gap/bookmark metadata.
         const retained = [];

package/packages/daemon/dist/command-center/resources/fleet-preview-route.js

@@ -5,7 +5,7 @@ import { ownerAuthorityGate } from "../owner-authority.js";
 import { discoverLiveSessionSummaries } from "../discovery.js";
 const cleanText = (value) => stripVTControlCharacters(value).replace(/[^\P{Cc}\n\t]/gu, "");
 export function createFleetPreviewCapture(run) {
-    const snapshot = async (liveSessionId, signal, windowId) => {
+    const snapshot = async (liveSessionId, signal, windowId, paneId) => {
         const readSessions = async () => {
             const raw = await run(["list-panes", "-a", "-F", "#{pid}\t#{session_id}\t#{session_created}\t#{session_name}"], signal);
             return discoverLiveSessionSummaries(() => raw);
@@ -41,7 +41,14 @@ export function createFleetPreviewCapture(run) {
                     .slice(0, 80));
         }
         const windowRows = rows.filter((row) => /^@\d+$/u.test(row[3] ?? ""));
-        const selectedWindowId = windowId ?? windowRows.find((row) => row[1] === "1")?.[3] ?? windowRows[0]?.[3] ?? null;
+        const requestedPane = paneId ? windowRows.find((row) => row[0] === paneId) : undefined;
+        if (paneId && (!requestedPane || (windowId && requestedPane[3] !== windowId)))
+            return null;
+        const selectedWindowId = requestedPane?.[3] ??
+            windowId ??
+            windowRows.find((row) => row[1] === "1")?.[3] ??
+            windowRows[0]?.[3] ??
+            null;
         if (windowId && !windowRows.some((row) => row[3] === windowId))
             return null;
         const toWindow = (row) => ({
@@ -80,7 +87,7 @@ export function createFleetPreviewCapture(run) {
         }
         windows.sort((a, b) => a.index - b.index);
         const candidates = selectedWindowId ? rows.filter((r) => r[3] === selectedWindowId) : rows;
-        const pane = candidates.find((r) => r[2] === "1")?.[0] ?? candidates[0]?.[0];
+        const pane = paneId ?? candidates.find((r) => r[2] === "1")?.[0] ?? candidates[0]?.[0];
         if (!pane || !/^%\d+$/u.test(pane))
             return null;
         // Passive capture never changes active windows, size, input or terminal ownership.
@@ -92,6 +99,7 @@ export function createFleetPreviewCapture(run) {
             return null;
         return {
             windows,
+            selectedPaneId: pane,
             selectedWindowId,
             text: cleanText(captured)
                 .split("\n")
@@ -106,6 +114,10 @@ export function createFleetPreviewCapture(run) {
 }
 const requestSchema = z.strictObject({
     expectedInstanceId: z.uuid(),
+    paneId: z
+        .string()
+        .regex(/^%\d+$/u)
+        .optional(),
     windowId: z
         .string()
         .regex(/^@\d+$/u)
@@ -152,10 +164,10 @@ export function mountFleetPreviewRoute(app, options) {
         pending = true;
         try {
             const signal = AbortSignal.any([c.req.raw.signal, AbortSignal.timeout(1500)]);
-            if (input.data.windowId && !options.capture.snapshot)
+            if ((input.data.windowId || input.data.paneId) && !options.capture.snapshot)
                 return c.json({ error: "Window preview unavailable" }, 503);
             const snapshot = options.capture.snapshot
-                ? await options.capture.snapshot(input.data.liveSessionId, signal, input.data.windowId)
+                ? await options.capture.snapshot(input.data.liveSessionId, signal, input.data.windowId, input.data.paneId)
                 : null;
             // Older capture providers remain valid for the original text-only contract.
             const legacy = !options.capture.snapshot
@@ -169,7 +181,11 @@ export function mountFleetPreviewRoute(app, options) {
                     liveSessionId: input.data.liveSessionId,
                     text,
                     ...(snapshot
-                        ? { windows: snapshot.windows, selectedWindowId: snapshot.selectedWindowId }
+                        ? {
+                            windows: snapshot.windows,
+                            selectedWindowId: snapshot.selectedWindowId,
+                            selectedPaneId: snapshot.selectedPaneId,
+                        }
                         : {}),
                 });
         }

package/packages/daemon/dist/command-center/server.js

@@ -63,6 +63,7 @@ import { mountWorkspaceResourceRoutes } from "./resources/workspace-resource-rou
 import { mountFleetResourceRoute } from "./resources/fleet-resource-route.js";
 import { mountWorkspaceMissionsRoute } from "./resources/workspace-missions-route.js";
 import { ownerAuthorityGate, requireOwnerAuthority } from "./owner-authority.js";
+import { mountDiagnosticsRoute } from "./diagnostics.js";
 import { mountStartupReadinessRoute, } from "./resources/startup-readiness-route.js";
 import { readWidgetAsset } from "../lib/widget-asset-store.js";
 const defaultApplicationShellAppWindowBackend = {
@@ -316,6 +317,12 @@ export function createApp(options = {}) {
     const app = new Hono();
     // Allow cross-origin (Next.js dashboard, Tailscale, etc.)
     app.use("/*", cors());
+    // Owner-only reads use the same early routing boundary as issuance below:
+    // remote/project credentials neither authorize nor block the owner bearer.
+    mountDiagnosticsRoute(app, {
+        daemon: daemonInstanceIdentity,
+        ownerToken: options.remoteAccess?.ownerToken ?? null,
+    });
     // This exact route carries its own owner-only bearer and correlation gate.
     // Mount it before remote and project auth so a valid host capability is
     // neither rejected nor confused with any remotely shared user credential.

package/packages/daemon/dist/doctor.js

@@ -9,6 +9,7 @@ import { findCompiledTui, hasDevelopmentTuiSource, isBunAvailable } from "./tui/
 import { claudeSettingsPath } from "./tui/integrations/claude.js";
 import { readNotificationPrefs, resolveNativeMacosNotifierPath } from "./tui/chrome/notify.js";
 import { resolveConfig } from "./lib/resolved-config.js";
+import { collectDaemonProvenanceReport, } from "./lib/daemon-provenance.js";
 /**
  * PURE — the "agent integrations" doctor rows, one per DISCOVERED agent (absent
  * agents produce nothing — no noise). All rows are optional (informational, they
@@ -91,6 +92,52 @@ export function notifierRow(present) {
         optional: true,
     };
 }
+/**
+ * PURE — the "canonical daemon" row from a provenance report. Optional: a
+ * machine without a running daemon is healthy; the row exists so triage sees
+ * identity, supervisor and the real log destination without a second command.
+ */
+export function daemonProvenanceRow(report) {
+    const label = "canonical daemon";
+    const historical = report.logFiles.filter((f) => f.status === "historical").length;
+    const suffix = historical
+        ? ` — ${historical} historical log file${historical === 1 ? "" : "s"} (see \`tmux-ide daemon info\`)`
+        : "";
+    const d = report.daemon;
+    switch (report.status) {
+        case "running":
+            return {
+                label,
+                pass: true,
+                detail: `running v${d.productVersion} pid ${d.pid} (${d.supervisor ?? "unknown supervisor"}) · ` +
+                    `logs → ${d.logDestination}${suffix}`,
+                optional: true,
+            };
+        case "stale-record":
+            return {
+                label,
+                pass: false,
+                detail: `record names pid ${d.pid} (v${d.productVersion}) but it is not running${suffix}`,
+                optional: true,
+            };
+        case "record-invalid":
+            return {
+                label,
+                pass: false,
+                detail: `record invalid (${report.record.status === "invalid" ? report.record.reason : "unknown"})${suffix}`,
+                optional: true,
+            };
+        default:
+            return {
+                label,
+                pass: true,
+                detail: report.record.status === "reserved"
+                    ? `not running (reserved for supervisor ${report.record.supervisionId})${suffix}`
+                    : `not running${suffix}`,
+                optional: true,
+            };
+    }
+}
 function check(label, fn, { optional = false } = {}) {
     try {
         const result = fn();
@@ -248,6 +295,21 @@ export async function doctor({ json, } = {}) {
         }
         return `in sync (v${installed})`;
     }, { optional: true }));
+    // Canonical daemon identity + log provenance (credential-free), so a triage
+    // never chases a stale, manually redirected log file.
+    checks.push((() => {
+        try {
+            return daemonProvenanceRow(collectDaemonProvenanceReport());
+        }
+        catch (e) {
+            return {
+                label: "canonical daemon",
+                pass: false,
+                detail: `provenance unavailable: ${e.message}`,
+                optional: true,
+            };
+        }
+    })());
     // Native branded sender: only when the macOS channel is actually on.
     if (process.platform === "darwin" && readNotificationPrefs().macos) {
         checks.push(notifierRow(resolveNativeMacosNotifierPath() !== null));