Some checks failed
tamq-ci / test (push) Failing after 6s
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a03397-4d51-7fd1-8ff2-946eb22ea2bc
109 lines
3.1 KiB
Markdown
109 lines
3.1 KiB
Markdown
---
|
|
id: TAMQ-WP-0007
|
|
type: workplan
|
|
title: "Target-pane terminal output notifications"
|
|
domain: communication
|
|
repo: tmux-amq
|
|
status: active
|
|
owner: codex
|
|
topic_slug: coulomb-social
|
|
planning_priority: P0
|
|
planning_order: 12
|
|
created: "2026-08-24"
|
|
updated: "2026-08-24"
|
|
---
|
|
|
|
# Target-pane terminal output notifications
|
|
|
|
Make a durably routed message visibly appear in its target repository terminal
|
|
without turning any bytes into input for the pane occupant.
|
|
|
|
## Required operator contract
|
|
|
|
```bash
|
|
tamq flex-auth audit-core
|
|
# in flex-auth
|
|
@audit-core: Some message!
|
|
```
|
|
|
|
The `audit-core` pane receives terminal output equivalent to:
|
|
|
|
```text
|
|
#flex-auth: Some message! [m-...]
|
|
```
|
|
|
|
Tamq resolves the target pane's pseudo-terminal through tmux and writes a
|
|
sanitized notification to that device's output queue. It never uses
|
|
`send-keys`, never sends Enter, and never alters the foreground process's stdin.
|
|
The notification may visually interleave with a prompt or be redrawn by a
|
|
full-screen program; the durable inbox remains authoritative.
|
|
|
|
Messages remain pending after display until `tamq ack` or a successful explicit
|
|
inbox filter. A persisted display timestamp prevents successful notifications
|
|
from being emitted repeatedly after broker polls or restarts.
|
|
|
|
## Specify and isolate the output channel
|
|
|
|
```task
|
|
id: TAMQ-WP-0007-T01
|
|
status: progress
|
|
priority: high
|
|
```
|
|
|
|
Define terminal-output delivery separately from legacy pane-input injection.
|
|
Resolve only tmux-reported `/dev/pts/<number>` character devices owned by the
|
|
current user, sanitize terminal control bytes, use bounded non-blocking writes,
|
|
and document visual interleaving as a display limitation rather than an input
|
|
safety failure.
|
|
|
|
## Persist one-time display state
|
|
|
|
```task
|
|
id: TAMQ-WP-0007-T02
|
|
status: todo
|
|
priority: high
|
|
```
|
|
|
|
Add a migration-safe `displayed_at` marker. Claim a pending message before
|
|
output, record successful display and release its lease atomically, retain its
|
|
pending acknowledgement state, and make broker restart/poll behavior
|
|
idempotent after a successful write.
|
|
|
|
## Make terminal output the normal managed-session mode
|
|
|
|
```task
|
|
id: TAMQ-WP-0007-T03
|
|
status: todo
|
|
priority: high
|
|
```
|
|
|
|
Register ordinary started sessions in `output` mode and advertise the required
|
|
broker capability. Preserve `--tap --command` as explicit pane-input mode,
|
|
provide `--no-display` for durable inbox-only operation, and restart an older
|
|
broker before registering the new mode.
|
|
|
|
## Prove output without input
|
|
|
|
```task
|
|
id: TAMQ-WP-0007-T04
|
|
status: todo
|
|
priority: high
|
|
```
|
|
|
|
Use a real pseudo-terminal and real tmux acceptance to prove the notification
|
|
appears in pane output, never reaches foreground-process stdin, remains pending
|
|
for acknowledgement, emits only once across polls, handles multiline/control
|
|
content safely, retries failed output, and retains manual and explicit tap
|
|
modes.
|
|
|
|
## Install and document the operator workflow
|
|
|
|
```task
|
|
id: TAMQ-WP-0007-T05
|
|
status: todo
|
|
priority: high
|
|
```
|
|
|
|
Update help, README, SCOPE, and installed-package acceptance. Install the
|
|
verified build, recreate or re-register a live two-repository session, exchange
|
|
and acknowledge one visible smoke message, and record State Hub evidence.
|