Keep socket discovery and remote forwarding on this user's socket

.gitattributes

@@ -13,4 +13,11 @@ Resources/markdown-viewer/diff-viewer-app/** linguist-generated
 # merges per key and defers to the default driver whenever both sides changed
 # the same key. Register it with scripts/install-git-hooks.sh (run by setup.sh);
 # without that config git silently uses the default driver.
-*.xcstrings merge=xcstrings
+*.xcstrings merge=xcstrings-v2
+
+# The Xcode project file collides the same way, and for a sharper reason: no
+# target here is filesystem-synchronized, so adding one source file writes four
+# entries, and two branches adding different files append to all four of the
+# same regions. scripts/merge-pbxproj.py takes the union of entries each side
+# added and defers whenever a hunk is anything else. Same registration.
+cmux.xcodeproj/project.pbxproj merge=pbxproj-v1

.github/actions/e2e-run-tests/action.yml

@@ -21,8 +21,16 @@ inputs:
     description: Every selector, comma-separated (the filter job's `selectors`).
     required: true
   count:
-    description: How many selectors there are (the filter job's `count`).
+    description: >-
+      How many selectors there are (the filter job's `count`). Zero when the
+      run only replays the fuzz regressions.
     required: true
+  fuzz-regressions:
+    description: >-
+      "true" to replay the UI fuzzer's checked-in repros against the app after
+      the selected tests (the filter job's `fuzz_regressions`).
+    required: false
+    default: "false"
   record-video:
     description: Whether to record the virtual display, "true" or "false".
     required: true
@@ -236,6 +244,7 @@ runs:
         echo "CMUX_DERIVED_DATA_PATH=$DERIVED_DATA_PATH" >> "$GITHUB_ENV"
 
     - name: Restore the compiled test product
+      id: restore
       env:
         ARTIFACT_ID: ${{ inputs.artifact-id }}
         ARTIFACT_PROVIDER_DIGEST: ${{ inputs.artifact-digest }}
@@ -342,16 +351,58 @@ runs:
             echo "Closed $process (its dialogs are cancelled; launchd restarts it on demand)"
           fi
         done
-        # Diagnostics Reporter draws "cmux DEV cannot be opened because of a
-        # problem" after a crashed launch; on owned macOS runners (2026-09-27)
-        # one sat over UI tests from boot. Its name is longer than the 16
-        # bytes -x compares, so match the executable path.
+        # Diagnostics Reporter draws "Your computer was restarted because of a
+        # problem" after a kernel panic and "cmux DEV cannot be opened because
+        # of a problem" after a crashed launch; on owned macOS runners
+        # (2026-09-27) one sat over UI tests from boot. launchd starts it
+        # whenever one of its QueueDirectories (/var/db/PanicReporter,
+        # /var/db/DiagnosticsReporter) holds an entry, and an entry stays
+        # until someone answers the dialog. Killing it alone therefore only
+        # relaunched it with the same dialog about two minutes into the tests
+        # (seen 2026-09-27, for a panic queued two days earlier). So empty the
+        # queues first, then close it; with nothing queued it stays closed.
+        # The owned runners' job-started hook does the same for every job;
+        # this keeps it for a runner without that hook.
+        # A queue entry only points at a report (a panic's is a symlink to
+        # /Library/Logs/DiagnosticReports/.contents.panic, the summary the
+        # dialog shows), so the reports themselves are kept: panic-full-*.panic
+        # and every crash report stay. The queue directories are
+        # world-writable, so this needs no sudo.
+        for queue in /var/db/PanicReporter /var/db/DiagnosticsReporter; do
+          [ -d "$queue" ] || continue
+          for entry in "$queue"/* "$queue"/.[!.]*; do
+            [ -e "$entry" ] || [ -L "$entry" ] || continue
+            target=""
+            if [ -L "$entry" ]; then
+              target="$(readlink "$entry" 2>/dev/null || true)"
+            fi
+            if rm -rf "$entry" 2>/dev/null && [ ! -e "$entry" ] && [ ! -L "$entry" ]; then
+              echo "Dequeued $entry${target:+ -> $target} (Diagnostics Reporter would redraw its dialog for it)"
+              # The summary of a panic whose dialog was never answered; the
+              # full panic report stays. Best effort: its directory is
+              # writable by _analyticsusers, which owned runner users are in.
+              # Only a `.contents.*` file directly in DiagnosticReports: `*`
+              # matches `/` in a case pattern, so reject any deeper path.
+              case "$target" in
+                */../*|/Library/Logs/DiagnosticReports/.contents.*/*) ;;
+                /Library/Logs/DiagnosticReports/.contents.*)
+                  rm -f "$target" 2>/dev/null || true
+                  ;;
+              esac
+            else
+              echo "::warning title=Diagnostics Reporter queue::Could not remove $entry, so its dialog may reappear during the tests."
+            fi
+          done
+        done
+        # Its name is longer than the 16 bytes -x compares, so match the
+        # executable path.
         if pkill -KILL -u "$uid" -f "/Diagnostics Reporter.app/Contents/MacOS/" 2>/dev/null; then
           echo "Closed Diagnostics Reporter (its crash dialogs are dismissed)"
         fi
 
     - name: Run selected tests
       id: tests
+      if: ${{ inputs.count != '0' }}
       env:
         TEST_FILTER: ${{ inputs.test-filter }}
         TEST_TARGET: ${{ inputs.target }}
@@ -495,7 +546,7 @@ runs:
             -xctestrun "$XCTESTRUN_PATH"
             -destination "platform=macOS"
             -maximum-test-execution-time-allowance "$TEST_TIMEOUT"
-            "${ONLY_TESTING[@]}"
+            ${ONLY_TESTING[@]+"${ONLY_TESTING[@]}"}
             test-without-building
           )
         else
@@ -507,7 +558,7 @@ runs:
             -resultBundlePath "$RUNNER_TEMP/cmux-app-host-xcresults/cmuxUITests.xcresult"
             -destination "platform=macOS"
             -maximum-test-execution-time-allowance "$TEST_TIMEOUT"
-            "${ONLY_TESTING[@]}"
+            ${ONLY_TESTING[@]+"${ONLY_TESTING[@]}"}
             test-without-building
           )
         fi
@@ -632,6 +683,59 @@ runs:
           exit 1
         fi
 
+    # The UI fuzzer's checked-in repros (dogfood/fuzz/regressions), replayed
+    # against the app restored above: one fresh launch per repro, driven over
+    # its debug socket in the console session, as the XCUITests are. A repro
+    # that reproduces fails the job. Socket steps only (--no-pointer): a
+    # pointer step needs cua-driver, and the repros are kept to socket steps.
+    # scripts/fuzz is the tested revision's.
+    - name: Replay the UI fuzzer regressions
+      id: fuzz
+      # After the XCUITests even when they failed, but not on a runner whose
+      # own setup (display, activation, restore) already failed.
+      if: ${{ !cancelled() && inputs.fuzz-regressions == 'true' && steps.restore.outcome == 'success' && (success() || steps.tests.outcome == 'failure') }}
+      shell: bash
+      run: |
+        set -euo pipefail
+        if [ ! -f scripts/fuzz ]; then
+          echo "::error::This revision has no scripts/fuzz, so there are no fuzz regressions to replay."
+          exit 1
+        fi
+        app="$CMUX_DERIVED_DATA_PATH/Build/Products/Debug/cmux DEV.app"
+        if [ ! -d "$app" ]; then
+          echo "::error::The restored product has no $app."
+          exit 1
+        fi
+        out="$RUNNER_TEMP/fuzz-regressions"
+        rm -rf -- "$out"
+        mkdir -p "$out"
+        # The fuzzer writes here as the console user, who may not be this one.
+        chmod 0777 "$out"
+        status=0
+        bash scripts/ci/run-and-capture.sh "$out/replay.log" \
+          scripts/ci/run-in-console-session.sh \
+          python3 scripts/fuzz regressions --app "$app" --out "$out" --no-pointer || status=$?
+        {
+          echo "### Fuzz regressions"
+          echo
+          echo '```'
+          grep -E '^(ok|FAIL) ' "$out/replay.log" || echo "(no repro reported a result)"
+          echo '```'
+        } >> "$GITHUB_STEP_SUMMARY"
+        if [ "$status" -ne 0 ]; then
+          echo "::error::A fuzz regression reproduced, or the replay could not run (exit $status). Replay one locally with scripts/fuzz replay <repro> --app <cmux DEV.app>; the fuzz-regressions artifact has each replay's steps, frames and debug log."
+          exit "$status"
+        fi
+
+    - name: Upload the fuzz regression replays
+      if: ${{ always() && steps.fuzz.outcome == 'failure' }}
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      with:
+        name: fuzz-regressions
+        path: ${{ runner.temp }}/fuzz-regressions
+        if-no-files-found: ignore
+        retention-days: 14
+
     - name: Stop recording and trim
       if: ${{ always() && inputs.record-video == 'true' && env.RECORD_PID != '' }}
       shell: bash
@@ -736,7 +840,8 @@ runs:
     - name: Publish test summary
       if: always()
       env:
-        TEST_RESULT: ${{ steps.tests.outputs.test_result || 'failed' }}
+        TEST_RESULT: ${{ steps.tests.outputs.test_result || (inputs.count == '0' && steps.fuzz.outcome == 'success' && 'skipped') || 'failed' }}
+        FUZZ_RESULT: ${{ steps.fuzz.outcome }}
         TEST_SUMMARY: ${{ steps.tests.outputs.test_summary }}
         TEST_OUTPUT: ${{ steps.tests.outputs.test_output }}
         TEST_FILTER: ${{ inputs.test-filter }}
@@ -749,8 +854,12 @@ runs:
       run: |
         set -euo pipefail
 
-        if [ "$TEST_RESULT" = "passed" ]; then
+        if [ "$FUZZ_RESULT" = "failure" ]; then
+          STATUS_EMOJI="FAILED"
+        elif [ "$TEST_RESULT" = "passed" ]; then
           STATUS_EMOJI="PASSED"
+        elif [ "$TEST_RESULT" = "skipped" ]; then
+          STATUS_EMOJI="NO TESTS SELECTED"
         else
           STATUS_EMOJI="FAILED"
         fi
@@ -763,6 +872,9 @@ runs:
           echo "**Ref:** \`$REF_DISPLAY\`"
           echo "**SHA:** [\`${COMMIT_SHA:0:12}\`](https://github.com/${{ github.repository }}/commit/$COMMIT_SHA)"
           echo "**Test:** \`$TEST_FILTER\`"
+          if [ -n "$FUZZ_RESULT" ] && [ "$FUZZ_RESULT" != "skipped" ]; then
+            echo "**Fuzz regressions:** $FUZZ_RESULT"
+          fi
           echo "**Workflow run:** $RUN_URL"
 
           if [ "$RECORD_VIDEO" = "true" ]; then

.github/labels.json

@@ -0,0 +1,150 @@
+{
+  "comment": "Triage vocabulary for issues. scripts/ci/sync_labels.py applies this to the repository; docs/triage.md says what each label means and which rule assigns it. Labels not listed here are left alone, so CI plumbing labels are safe.",
+  "labels": [
+    {
+      "name": "S1: critical",
+      "color": "B60205",
+      "description": "Data loss, a build that will not start, or a security exposure"
+    },
+    {
+      "name": "S2: major",
+      "color": "D93F0B",
+      "description": "A crash, hang, lost state, broken connection, or a regression on a path people use"
+    },
+    {
+      "name": "S3: minor",
+      "color": "FBCA04",
+      "description": "Wrong behavior with a workaround"
+    },
+    {
+      "name": "S4: cosmetic",
+      "color": "C5DEF5",
+      "description": "Wording or appearance, with no effect on what cmux does"
+    },
+    {
+      "name": "needs-triage",
+      "color": "FEF2C0",
+      "description": "Auto-triage could not pick an area; a person decides"
+    },
+    {
+      "name": "area: terminal",
+      "color": "BFD4F2",
+      "description": "Ghostty surface, rendering, scrollback, escape sequences, fonts"
+    },
+    {
+      "name": "area: input",
+      "color": "BFD4F2",
+      "description": "Keyboard, shortcuts, IME, mouse, clipboard and paste"
+    },
+    {
+      "name": "area: layout",
+      "color": "BFD4F2",
+      "description": "Splits, panes, tabs, windows, resizing, full screen"
+    },
+    {
+      "name": "area: sidebar",
+      "color": "BFD4F2",
+      "description": "The workspace sidebar: list, groups, status, reordering"
+    },
+    {
+      "name": "area: workspaces",
+      "color": "BFD4F2",
+      "description": "Workspaces, sessions, restore after relaunch, worktrees"
+    },
+    {
+      "name": "area: agents",
+      "color": "BFD4F2",
+      "description": "Agent integrations (Claude Code, Codex, ACP), agent chat, hooks, status"
+    },
+    {
+      "name": "area: cloud",
+      "color": "BFD4F2",
+      "description": "Cloud machines and workspaces, relay transport"
+    },
+    {
+      "name": "area: remote",
+      "color": "BFD4F2",
+      "description": "cmux ssh, remote daemon, tunnels, device pairing"
+    },
+    {
+      "name": "area: ios",
+      "color": "BFD4F2",
+      "description": "The iOS app and mobile clients"
+    },
+    {
+      "name": "area: cli",
+      "color": "BFD4F2",
+      "description": "The cmux CLI, cmux-tui, the socket API and SDKs"
+    },
+    {
+      "name": "area: settings",
+      "color": "BFD4F2",
+      "description": "Settings UI and the config file"
+    },
+    {
+      "name": "area: browser",
+      "color": "BFD4F2",
+      "description": "The embedded browser, web surfaces, inline VS Code"
+    },
+    {
+      "name": "area: command-palette",
+      "color": "BFD4F2",
+      "description": "Command palette, quick open, find"
+    },
+    {
+      "name": "area: appearance",
+      "color": "BFD4F2",
+      "description": "Themes, light and dark mode, window chrome"
+    },
+    {
+      "name": "area: notifications",
+      "color": "BFD4F2",
+      "description": "Notifications, banners, badges, the bell"
+    },
+    {
+      "name": "area: updates",
+      "color": "BFD4F2",
+      "description": "Install, Homebrew, updates, nightly and release builds, signing"
+    },
+    {
+      "name": "area: auth",
+      "color": "BFD4F2",
+      "description": "Sign-in, accounts, teams, billing"
+    },
+    {
+      "name": "area: performance",
+      "color": "BFD4F2",
+      "description": "Latency, CPU, memory, launch time"
+    },
+    {
+      "name": "area: localization",
+      "color": "BFD4F2",
+      "description": "Translations and internationalization"
+    },
+    {
+      "name": "area: accessibility",
+      "color": "BFD4F2",
+      "description": "VoiceOver, the accessibility API, reduced motion, focus order"
+    },
+    {
+      "name": "area: docs",
+      "color": "BFD4F2",
+      "description": "README, docs pages, the site, contributor guides"
+    },
+    {
+      "name": "area: build-and-ci",
+      "color": "BFD4F2",
+      "description": "Build system, CI workflows, test infrastructure"
+    },
+    {
+      "name": "good first issue",
+      "color": "7057FF",
+      "description": "Small and self-contained, with a pointer to the code. Read docs/triage.md first"
+    },
+    {
+      "name": "help wanted",
+      "color": "008672",
+      "description": "Nobody on the team is working on this and we would take a patch"
+    }
+  ]
+}