LibTmux.Engine

Description#

Daemon identity and explicit effects

Endpoint captures argv scope and sanitized environment without I/O. Runtime owns its executor; Observation and Incarnation retain values only. Observing capabilities reads the daemon's version separately from the client executable. Prepared projections and references are bound to that daemon incarnation.

Managed commands check Linux boot ID and process start ticks, then enter one tmux command-list branch fenced by PID and tmux start time. A replacement between those steps is refused unless it reuses the same PID and the same second-resolution start time. That narrow race remains outside this guarantee. Persistent control connections provide a separate, connection-bound lifetime.

Identity probes use a nonce-bearing invalid command with an equals sign and hyphen. They cannot match tmux command-alias keys or trigger display-message hooks. Normal dispatch of canonical built-in commands is assumed; this is not a protocol for authenticating a hostile daemon or rewriting its configuration.

Closing Runtime stops its owned clients. It does not stop the tmux daemon or undo effects already performed. raw preserves execution bounds but provides no managed identity or compatibility guarantee. Text passed to a command may still have command-specific FORMAT semantics beyond command-language quoting.