Keep restored terminals out of another workspace cwd

[teamleaderleo]

Summary

When a restored local terminal's saved worktree no longer exists, the startup resolver could fall through to the selected workspace's directory. An auto-resumed Claude/Codex command could then run in another repository.

Fixes #15804.

• Resolve missing local paths to their nearest existing parent before considering the workspace fallback.
• Prefer a live restored-agent cwd when the saved path is gone.
• Keep remote startup paths exact; they are resolved on the remote host and must not be checked against the Mac filesystem.
• Add behavior coverage for missing local paths, live cwd rescue, and exact remote paths.

Testing

• python3 scripts/verify-local.py --affected mf/main — 2/2 applicable checks passed.
• swiftc -parse Sources/RemoteTerminalWorkingDirectoryResolver.swift
• swiftc -parse cmuxTests/WorkspaceTerminalWorkingDirectoryFallbackTests.swift
• git diff --check
• Standalone resolver harness passed for local ancestry, live rescue, and remote exact-path behavior.

Native app tests were not run on the MacBook Air; CI is intentionally not being monitored.

Changelog

Fixed: Restored agent terminals no longer resume in another workspace when their saved directory was deleted.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

---

Summary by cubic

Fixes #15804: restored local terminals whose saved worktree no longer exists could resolve to the selected workspace's directory, letting an auto-resumed agent command run in a different repository.

• Missing local paths now resolve to their nearest existing parent directory before the workspace fallback is considered.
• A live restored-agent cwd is preferred when the saved path is gone.
• Remote startup paths are kept exact since they resolve on the remote host, not the Mac filesystem.
• Adds test coverage for missing local paths, live cwd rescue, and exact remote paths.

^{Written for commit ce64259. Summary will update on new commits.}

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 18 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used all 10 included reviews currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Repository: manaflow-ai/cmux/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 1cf74672-f3b8-4a7d-85c5-2d192c7b9c78

📥 Commits

Reviewing files that changed from the base of the PR and between 579a979 and ce64259.

📒 Files selected for processing (2)

• Sources/RemoteTerminalWorkingDirectoryResolver.swift
• cmuxTests/WorkspaceTerminalWorkingDirectoryFallbackTests.swift

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

[github-actions]

CI failure attribution

CI failed on ce64259068 (run 36781990447 attempt 3): 1 code.

Job	Verdict	Why
macos / macOS compile admission	code	a compile error

Matched log lines

macos / macOS compile admission: /tmp/cmux-ci/src/CLI/CMUXCLI+AutoNaming.swift:271:16: error: cannot find 'usesTemporaryConfig' in scope

Not re-run automatically: macos / macOS compile admission is not a machine failure.

Written by scripts/ci/classify_failures.py (ci-failure-attribution.yml); signatures are its SIGNATURES table. A machine verdict is the runner's fault, not this PR's.

[github-actions]

Merge receipt for ce64259068, merged 2026-10-01 19:19:49 UTC

• Not verified at merge: ci-status (failure), macOS compile admission (failure), macOS status (failure), tests (failure)
• Verified: CI fast guards, CI timing, Fast static checks, GhosttyKit release check, guards (18), linux-preflight, macOS admission gate, Testbox broker trust boundary, Web complexity, web-validation
• Skipped by policy: app-host unit tests, admission-placement, browser, Claude wrapper regressions, CLI product tests, Dogfood build #​${{ github.event.pull_request.number }}, full-suite-coverage, late-placement, release-admission, release-build, remote-daemon, suite-coverage, and 7 more
• Full suite: runs on main after merge.

Labeled merged-unverified: if main breaks near this merge, look here first.