tmux_command

Description#

Arguments remain binary values. Rendering protects trailing semicolons from tmux's command separator parser. This is distinct from shell quoting and from format expansion. A raw command is trusted application code; external services must apply their own command allowlist and write policy.

Use literal_format/1 only for a whole argument that tmux expands as a format, such as a new name or cwd. It does not encode a value nested in a format expression. tmux's stored-name escaping and session-name substitutions still apply. Use literal_format/2 with mode time for commands such as display-message that also expand strftime percent directives. This protects one format-expansion pass, not later visual style rendering or recursive/nested expansion. No renderer reverses stored-name semantics.

launch/1 distinguishes executable argv from an explicitly requested shell command. A singleton argv uses the installed helper's exec-only mode because tmux otherwise passes one argument to its default shell. Empty argv is invalid; default_shell explicitly requests tmux's configured default command/shell. The internal helper uses an absolute path so a child's cwd does not change helper resolution. Relative executable arguments retain their native meaning.

Empty shell commands have command-specific lifetime. split-window creates a process-free pane. new-session executes an empty shell command and can remove the new object immediately. new-window does likewise before tmux 3.8; tmux 3.8 creates a process-free pane. Use a persistent job for parent sessions/windows that must remain available across supported versions.

Submit commands through tmux_server:command/3 or tmux_operation:start/3. sequence/1 combines flat command values for one-shot execution with combined output and a possible completed prefix on error. The job guide shows submission, completion and cancellation. tmux_session:rename_command/2 and tmux_pane:resize_command/2 build values bound to their row's captured origin. Execution through another endpoint returns different_owner before native work. Construction does not validate endpoint liveness or authorize an automatic mutation retry.

wait_for/2 builds native channel signals, waits and advisory locks. source_file/2 builds configuration loading from stdin or a literal absolute path. Both return command values without opening an endpoint or doing I/O. to_config/1 renders a command or bounded command list for native configuration input, preserving argument bytes through tmux's lexer.