e2e-headless

End-to-end verification (headless, no real remote needed)

Tools/dev-sshd/harness.sh runs a user-mode sshd on 127.0.0.1:2222 (own keys under Tools/dev-sshd/state/, never touches ~/.ssh):

./Tools/dev-sshd/harness.sh start   # keys + sshd + writes state/seed.json
./Tools/dev-sshd/harness.sh demo    # tmux sessions: main, scratch, deploy, agent
./Tools/dev-sshd/harness.sh stop

The agent session fakes CLI agents: window cc sets the ✳ Claude Code OSC title, cx runs exec -a codex cat, pi sets π - harness + exec -a pi cat; all run cat, so tmux capture-pane -t agent:0 -p shows what a chip typed.

DEBUG-only env vars (the simulator shares the Mac's network; pass with the SIMCTL_CHILD_ prefix through xcrun simctl launch <UDID> app.multiplexterm.multiplex):

• MULTIPLEX_SEED_HOST=<path to seed.json> — imports a ready devbox host (idempotent, stable UUID). ⚠ Idempotence is per install: simctl uninstall wipes hosts.json but NOT the Keychain mirror, so the next launch seeds a new devbox AND re-adopts the old record (two identically named hosts). Prefer terminate + relaunch over reinstall. Optional seed keys: workingDirs / sessionScripts / newSessionTmuxConf / agentLaunchModels feed the picker/script/conf/model paths; secondaryBackends: ["herdr"] imports a MIXED host (two probes on one connection, both backends' tiles); passphrase stores the key passphrase in the Keychain so an encrypted privateKey proves the sealed-key connect path (probe logs Accepted publickey, no prompt); "enabled": false proves the never-dials promise against a silent state/sshd.log; "backgroundKeepAlive": true starts the host opted into background keep-alive (nothing can tap that switch headlessly).
• MULTIPLEX_AUTO_ATTACH=main,scratch — opens a terminal per entry via the real Attach route; + inside an entry groups sessions as tabs of one window. Fires once per process. MULTIPLEX_AUTO_ATTACH_HOST=devbox names the host — without it the first host wins (on a device with synced real hosts that is NOT the seed).
• MULTIPLEX_AUTO_TMUX_COPY=1 — sends Copy Mode after attach; proof: #{pane_in_mode} becomes 1.
• MULTIPLEX_AUTO_TMUX_CLOSE=pane|window — runs the confirmed close action through the direct SSH control path. Disposable sessions only; verify host-side.
• MULTIPLEX_AUTO_MERGE=1 — merges every terminal window into the first through the real surrender/adopt path (moved tabs keep connections).
• MULTIPLEX_AUTO_DROP=<local path> — drops that file into the first tab (SFTP upload + typed path, the real drag path).
• MULTIPLEX_AUTO_ACTION_URL=multiplex://open?… — submits the URL through the exact onOpenURL → router seam once per process; the headless widget stand-in (simctl openurl's first-run confirmation can't be clicked headlessly, and idb HID taps died with Xcode 27).
• MULTIPLEX_AUTO_BIND=<multiplex://b/…> / MULTIPLEX_BIND_AUTOPIN=<6 digits> — drive Bind Host headlessly: submit a payload through the real parse → confirm → handshake seam / answer the first machine heard with that PIN. Stage the other side with harness.sh bind (prints the PIN) or bind --print-only (prints the payload URL; transcript in state/bind.log). Proof is host-side: a multiplex:bind:<id>:<device> line in state/authorized_keys, then Accepted publickey in sshd.log. MULTIPLEX_BIND_PASSPHRASE=<text> presets KEY PASSPHRASE so a headless bind stores its key sealed; MULTIPLEX_BIND_BACKEND=<comma list> presets the pane's Backend selection, so the minted host record carries it (proof: the deck tile probes herdr, not tmux). The FIRST entry is the default that mints, and every entry is shown — herdr is the old single-backend meaning unchanged, tmux,herdr binds a MIXED host straight from the pane. ⚠ These are DeckWindow tasks — a restored terminal-only scene never runs them; simctl uninstall + simctl keychain <udid> reset first (or the mirror re-adopts the old host and the free host limit blocks the bind).
• MULTIPLEX_AUTO_ADD_HOST=bind|manual — opens Add Host on either road for layout capture (deliberately bypasses the free-tier add gate).
• MULTIPLEX_PRO_LOCKED=1 — free-tier mode, never persisted; with MULTIPLEX_AUTO_ATTACH=agent + the debug.agentchip hook it proves exactly ten slash-chip sends.
• MULTIPLEX_DECK_SIZE=<w>x<h> / MULTIPLEX_TERM_SIZE=<w>x<h> (visionOS) — scene default window sizes for screenshot runs (the sim can't drag-resize).
• MULTIPLEX_AUTO_PAYWALL=1 — the real locked paywall with a deterministic $19.99 storefront preview (simctl launches don't inherit Xcode's StoreKit session).
• MULTIPLEX_AUTO_SETTINGS=1|theme|licenses / MULTIPLEX_AUTO_FAQ=1 — open those sheets for headless capture (theme pushes the theme editor, licenses the Open Source Licenses page).
• MULTIPLEX_AUTO_WHATS_NEW=1|log — open the release-notes launch card / the full record behind its FULL NOTES chip. The launch gate itself is unreachable headlessly (it fires only for an install carrying a PREVIOUS version's defaults), so this is the layout road; the gate is pinned by DeckWindowUIKitTests instead. ⚠ Both screens are DeckWindow presentations — a restored terminal-only scene shows nothing — and the notification-permission alert iOS raises on a fresh install sits over the middle of the sheet with no headless way to dismiss it.
• MULTIPLEX_AUTO_HOST_SETTINGS=1|models|backend|directories — opens the first host's edit sheet (regression-checks the Observation environment across the sheet boundary — a missing HostStore is a fatal error); models scrolls to the Agent launch models section, backend to the tmux/herdr Backend section, directories to the New session defaults working-directories editor (shown for BOTH backends — the herdr mint roots a session's world with these; only the tmux options editor stays tmux-scoped).
• Attention alerts need Pro AND the attention.alertsEnabled switch; both live in the app container's defaults, and simctl spawn <UDID> defaults write <bundle-id> lands in a domain the sandboxed app never reads — pass the container plist path as the domain instead (… defaults write <container>/Library/Preferences/app.multiplexterm. multiplex.plist MultiplexProUnlocked -bool true, same for attention.alertsEnabled; container via simctl get_app_container … data). A stale false there logs alert dropped … locked (category attention) exactly like the Pro gate. Proof of a live edge: log stream --level debug --predicate 'category == "attention"' shows alert posted for <session> on the probe tick after the agent's title drops its spinner (Grok Build, 2026-08-16: a sleep 20 turn against this Mac's tmux).
• MULTIPLEX_KEYCHAIN_TIP=locked|unlocked|missing — forces the keychain verdict. The sign-in-screen gate still applies: inject a needle first (e.g. tmux send-keys -t agent:cc 'Select login method:' Enter).
• MULTIPLEX_APP_LOCK=1|held — start behind the app-lock veil (never persisted). 1 keeps the real authenticator; held refuses every attempt so the veil can be captured. Shipping toggle: Settings → App lock (AppLockStore).
• MULTIPLEX_FORCE_SHELL=1|0 — force the single-window shell on/off. Default: iPhone always shell, iPad only when UIWindowScene.isFullScreen, visionOS never. Logged under category shell.
• MULTIPLEX_SIDE_PANEL=0 — DEBUG-only legacy road: terminal-confirmed ▤/⌗ viewers dock as tabs instead of side panels. Pass SIMCTL_CHILD_MULTIPLEX_SIDE_PANEL=0 to preserve older recipes.