Report and stop stale cmux-tui servers

.github/workflows/ci.yml

@@ -104,6 +104,9 @@ jobs:
       - name: Validate TUI npm package artifact transfer
         run: python3 tests/test_tui_npm_package_artifact.py
 
+      - name: Validate TUI package launchers
+        run: python3 tests/test_tui_package_launchers.py
+
       - name: Validate Claude launch environment policy generation
         run: python3 scripts/generate-claude-launch-environment-policy.py --check
 

.github/workflows/cmux-tui-build-package.yml

@@ -215,6 +215,13 @@ jobs:
         shell: bash
         run: rustup target add ${{ matrix.target }}
 
+      - name: Configure macOS deployment target
+        if: runner.os == 'macOS'
+        shell: bash
+        run: |
+          target="$(tr -d '[:space:]' < cmux-tui/dist/macos-deployment-target.txt)"
+          printf 'MACOSX_DEPLOYMENT_TARGET=%s\n' "$target" >> "$GITHUB_ENV"
+
       - name: Install cargo-zigbuild
         if: matrix.cross == true && runner.os == 'Linux'
         shell: bash
@@ -223,8 +230,8 @@ jobs:
       - name: Build cmux-tui (native)
         if: matrix.cross == false
         env:
-          CMUX_TUI_DISTRIBUTION_VERSION: ${{ inputs.version }}
           PACKAGE_NPM: ${{ inputs.package_npm }}
+          VERSION: ${{ inputs.version }}
         working-directory: cmux-tui
         shell: bash
         run: |
@@ -233,9 +240,10 @@ jobs:
           unset CMUX_GHOSTTY_SRC
           CMUX_TUI_BUILD_COMMIT="$(git -C .. rev-parse HEAD)"
           CMUX_TUI_GHOSTTY_COMMIT="$(git -C ../ghostty rev-parse HEAD)"
+          CMUX_TUI_DISTRIBUTION_VERSION="$VERSION"
           export CMUX_TUI_BUILD_COMMIT CMUX_TUI_GHOSTTY_COMMIT CMUX_TUI_DISTRIBUTION_VERSION
           if [[ "$PACKAGE_NPM" == "true" ]]; then
-            CMUX_TUI_NPM_BOOTSTRAP_VERSION="$CMUX_TUI_DISTRIBUTION_VERSION"
+            CMUX_TUI_NPM_BOOTSTRAP_VERSION="$VERSION"
             export CMUX_TUI_NPM_BOOTSTRAP_VERSION
           fi
           cargo build -p cmux-tui --bin cmux-tui --bin cmux-tui-hook --release --locked --target ${{ matrix.build_target }}
@@ -244,8 +252,8 @@ jobs:
       - name: Build cmux-tui (Linux cross)
         if: matrix.cross == true && runner.os == 'Linux'
         env:
-          CMUX_TUI_DISTRIBUTION_VERSION: ${{ inputs.version }}
           PACKAGE_NPM: ${{ inputs.package_npm }}
+          VERSION: ${{ inputs.version }}
         working-directory: cmux-tui
         shell: bash
         run: |
@@ -254,13 +262,19 @@ jobs:
           unset CMUX_GHOSTTY_SRC
           CMUX_TUI_BUILD_COMMIT="$(git -C .. rev-parse HEAD)"
           CMUX_TUI_GHOSTTY_COMMIT="$(git -C ../ghostty rev-parse HEAD)"
+          CMUX_TUI_DISTRIBUTION_VERSION="$VERSION"
           export CMUX_TUI_BUILD_COMMIT CMUX_TUI_GHOSTTY_COMMIT CMUX_TUI_DISTRIBUTION_VERSION
           if [[ "$PACKAGE_NPM" == "true" ]]; then
-            CMUX_TUI_NPM_BOOTSTRAP_VERSION="$CMUX_TUI_DISTRIBUTION_VERSION"
+            CMUX_TUI_NPM_BOOTSTRAP_VERSION="$VERSION"
             export CMUX_TUI_NPM_BOOTSTRAP_VERSION
           fi
-          cargo zigbuild -p cmux-tui --bin cmux-tui --bin cmux-tui-hook --release --locked --target ${{ matrix.build_target }}
-          cargo zigbuild -p cmux-relay --bin cmux-relay --release --locked --target ${{ matrix.build_target }}
+          if [[ "$RUNNER_OS" == macOS ]]; then
+            cargo build -p cmux-tui --bin cmux-tui --bin cmux-tui-hook --release --locked --target ${{ matrix.build_target }}
+            cargo build -p cmux-relay --bin cmux-relay --release --locked --target ${{ matrix.build_target }}
+          else
+            cargo zigbuild -p cmux-tui --bin cmux-tui --bin cmux-tui-hook --release --locked --target ${{ matrix.build_target }}
+            cargo zigbuild -p cmux-relay --bin cmux-relay --release --locked --target ${{ matrix.build_target }}
+          fi
 
       - name: Build cmux-tui (macOS cross)
         if: matrix.cross == true && runner.os == 'macOS'
@@ -300,6 +314,27 @@ jobs:
           fi
           ls -la dist
 
+      - name: Verify macOS deployment target
+        if: runner.os == 'macOS'
+        shell: bash
+        run: |
+          binary="dist/cmux-tui-${{ matrix.target }}${{ matrix.ext }}"
+          expected="$(tr -d '[:space:]' < cmux-tui/dist/macos-deployment-target.txt)"
+          actual="$(xcrun vtool -show-build "$binary" | awk '$1 == "minos" { print $2; exit }')"
+          test "$actual" = "$expected"
+
+      - name: Verify native binary identity
+        if: matrix.cross == false
+        shell: bash
+        env:
+          EXPECTED_VERSION: ${{ inputs.version }}
+        run: |
+          python3 cmux-tui/dist/scripts/verify_artifact_identity.py \
+            --binary "dist/cmux-tui-${{ matrix.target }}${{ matrix.ext }}" \
+            --version "$EXPECTED_VERSION" \
+            --build-commit "$(git rev-parse HEAD)" \
+            --ghostty-commit "$(git -C ghostty rev-parse HEAD)"
+
       - name: Verify non-npm binaries disable SSH auto-install
         if: runner.os == 'Linux' && matrix.target == 'x86_64-unknown-linux-musl' && inputs.package_npm == false
         shell: bash
@@ -461,18 +496,19 @@ jobs:
 
       - name: Build libghostty-vt + cmux-tui (Windows GNU)
         env:
-          CMUX_TUI_DISTRIBUTION_VERSION: ${{ inputs.version }}
           PACKAGE_NPM: ${{ inputs.package_npm }}
+          VERSION: ${{ inputs.version }}
         shell: bash
         run: |
           # Keep the manual Zig build and Cargo's build script on the same
           # checked-out Ghostty source whose revision is stamped below.
           unset CMUX_GHOSTTY_SRC
           CMUX_TUI_BUILD_COMMIT="$(git rev-parse HEAD)"
           CMUX_TUI_GHOSTTY_COMMIT="$(git -C ghostty rev-parse HEAD)"
+          CMUX_TUI_DISTRIBUTION_VERSION="$VERSION"
           export CMUX_TUI_BUILD_COMMIT CMUX_TUI_GHOSTTY_COMMIT CMUX_TUI_DISTRIBUTION_VERSION
           if [[ "$PACKAGE_NPM" == "true" ]]; then
-            CMUX_TUI_NPM_BOOTSTRAP_VERSION="$CMUX_TUI_DISTRIBUTION_VERSION"
+            CMUX_TUI_NPM_BOOTSTRAP_VERSION="$VERSION"
             export CMUX_TUI_NPM_BOOTSTRAP_VERSION
           fi
           cd ghostty
@@ -542,6 +578,7 @@ jobs:
     permissions:
       contents: read
     env:
+      BINARY_VERSION: ${{ inputs.version }}
       NPM_VERSION: ${{ inputs.version }}
       PYPI_VERSION: ${{ inputs.pypi_version != '' && inputs.pypi_version || inputs.version }}
     steps:
@@ -582,6 +619,15 @@ jobs:
           name: cmux-tui-aarch64-unknown-linux-musl
           path: dist/binaries
 
+      - name: Verify downloaded binary identity
+        run: |
+          chmod +x dist/binaries/cmux-tui-x86_64-unknown-linux-gnu
+          python3 cmux-tui/dist/scripts/verify_artifact_identity.py \
+            --binary dist/binaries/cmux-tui-x86_64-unknown-linux-gnu \
+            --version "$NPM_VERSION" \
+            --build-commit "$(git rev-parse HEAD)" \
+            --ghostty-commit "$(git rev-parse HEAD:ghostty)"
+
       - name: Build npm package directories
         if: inputs.package_npm
         run: |
@@ -593,6 +639,7 @@ jobs:
       - name: Build PyPI wheels
         if: inputs.package_pypi
         run: |
+          python3 cmux-tui/dist/scripts/test_package_pypi.py
           python3 cmux-tui/dist/scripts/package_pypi.py \
             --binaries-dir dist/binaries \
             --version "$PYPI_VERSION" \
@@ -638,6 +685,14 @@ jobs:
           chmod +x dist/binaries/cmux-tui-x86_64-unknown-linux-musl
           dist/binaries/cmux-tui-x86_64-unknown-linux-musl --version >/tmp/cmux-tui-version.txt 2>&1 || \
             dist/binaries/cmux-tui-x86_64-unknown-linux-musl --help >/tmp/cmux-tui-version.txt 2>&1
+          mkdir -p dist/npm-smoke/node_modules
+          cp -R dist/npm-packages/cmux dist/npm-smoke/node_modules/cmux
+          cp -R dist/npm-packages/cmux-tui-linux-x64 dist/npm-smoke/node_modules/cmux-tui-linux-x64
+          python3 cmux-tui/dist/scripts/verify_artifact_identity.py \
+            --binary dist/npm-smoke/node_modules/cmux/bin/cmux.js \
+            --version "$NPM_VERSION" \
+            --build-commit "$(git rev-parse HEAD)" \
+            --ghostty-commit "$(git rev-parse HEAD:ghostty)"
           CMUX_TUI_PROBE="$(dist/binaries/cmux-tui-x86_64-unknown-linux-musl remote-probe --json)"
           CMUX_TUI_EXPECTED_BUILD_IDENTITY="$(git rev-parse HEAD)"
           export CMUX_TUI_PROBE CMUX_TUI_EXPECTED_BUILD_IDENTITY
@@ -694,8 +749,20 @@ jobs:
             dist/binaries/cmux-tui-x86_64-unknown-linux-musl --help >/tmp/cmux-tui-version.txt 2>&1
           python3 -m venv /tmp/cmux-tui-wheel-smoke
           /tmp/cmux-tui-wheel-smoke/bin/python -m pip install --no-index --find-links dist/pypi-wheels cmux=="$PYPI_VERSION"
-          /tmp/cmux-tui-wheel-smoke/bin/cmux --help >/tmp/cmux-help.txt
-          grep -i usage /tmp/cmux-help.txt
+          /tmp/cmux-tui-wheel-smoke/bin/python - <<'PY'
+          import importlib.metadata
+          import os
+
+          expected = os.environ["PYPI_VERSION"]
+          actual = importlib.metadata.version("cmux")
+          if actual != expected:
+              raise SystemExit(f"installed wheel version {actual!r} != {expected!r}")
+          PY
+          python3 cmux-tui/dist/scripts/verify_artifact_identity.py \
+            --binary /tmp/cmux-tui-wheel-smoke/bin/cmux \
+            --version "$BINARY_VERSION" \
+            --build-commit "$(git rev-parse HEAD)" \
+            --ghostty-commit "$(git rev-parse HEAD:ghostty)"
 
       - name: Upload npm package directories
         if: inputs.package_npm

.github/workflows/cmux-tui.yml

@@ -24,6 +24,11 @@ on:
         description: "Unique caller token used to find this run"
         required: true
         type: string
+      use_blacksmith_macos:
+        description: "Run the macOS test matrix on Blacksmith"
+        required: false
+        type: boolean
+        default: false
 
 concurrency:
   # Every caller waits for one exact commit. A newer request must not cancel it.
@@ -316,16 +321,12 @@ jobs:
   test:
     name: test (${{ matrix.os }})
     needs: validate-inputs
-    runs-on: ${{ matrix.runner }}
+    runs-on: ${{ matrix.os == 'macos' && (inputs.use_blacksmith_macos && 'blacksmith-6vcpu-macos-15' || (vars.MACOS_RUNNER_15 || 'blacksmith-6vcpu-macos-15')) || (vars.LINUX_RUNNER || 'blacksmith-4vcpu-ubuntu-2404') }}
     timeout-minutes: 40
     strategy:
       fail-fast: false
       matrix:
-        include:
-          - os: macos
-            runner: blacksmith-6vcpu-macos-15
-          - os: linux
-            runner: blacksmith-4vcpu-ubuntu-2404
+        os: [macos, linux]
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:

Packages/macOS/CmuxTerminal/Sources/CmuxTerminal/Hosting/TerminalSurfacePaneHosting.swift

@@ -26,6 +26,12 @@ public protocol TerminalSurfacePaneHosting: NSView {
     /// indicator text.
     func syncKeyStateIndicator(text: String?)
 
+    /// Shows a permanent failure message when the native terminal cannot start.
+    func showRuntimeSurfaceCreationFailure(message: String)
+
+    /// Clears a prior creation failure after the native terminal starts.
+    func clearRuntimeSurfaceCreationFailure()
+
     /// Notifies the pane that explicit terminal input is about to be sent.
     func terminalSurfaceDidReceiveExplicitInput()
 

Packages/macOS/CmuxTerminal/Sources/CmuxTerminal/Lifecycle/TerminalSurfaceRuntimeActiveTeardown.swift

@@ -0,0 +1,7 @@
+import Foundation
+
+internal struct TerminalSurfaceRuntimeActiveTeardown: Sendable {
+  let ticketID: UUID
+  let task: Task<Void, Never>
+  let watchdogTask: Task<Void, Never>?
+}