[teamleaderleo]

Summary

A chat being moved (acpmux.transfer.v1) is frozen on its source until the client pumping the move commits or aborts. If that client died (the app quit, the CLI was killed, the machine slept), the chat stayed frozen forever. Now the source watches each move it began and ends a move left idle for the lease (5 min):

• Not every bundle file was read to its end: no target can have finished (finish checks every file's size), so the move aborts (transfer_aborted {reason: "stalled"}) and the chat runs here again, its queue included.
• Every file was read: the source asks the target named at begin (new optional to: {socket}, which the acpmux transfer CLI sends) with the new _acpmux/transfer_forget {transferId, sessionId}. The target drops any unfinished receive of the move, marks it so a later receive is refused (transfer.forgotten), and answers {landed}. Landed: the source commits. Not landed: it aborts. No answer (no to, target down, 30 s timeout): the chat stays frozen and the source asks again after another lease.
• A restarted daemon watches its moves again (state lives in the move's directory: alive, read, to).
• A page read and the watch's not-fully-read abort share a lock, so a client never gets a bundle's last page from a move that was just given back.

Commit is now idempotent on an already-closed chat. Backward compatible: to is optional, and old clients get the partial-read abort.

Testing

Behavior tests in cmux-tui/crates/acpmux/tests/hub_integration/transfer.rs. Fleet, scripts/ci/cmux-tui-rust-check.sh --arg test|all --arg transfer:::

• Red 8689ea0: FAILED. 2 passed; 3 failed (the three new tests time out; the chat stays frozen).
• Green f5429bf (all: fmt, clippy, tests): ok. 5 passed.
• Review fixes. Red fafd941: FAILED. 4 passed; 1 failed (a forgotten move could be received again). Green 6982494 (all): ok. 5 passed.

Crash ratchet: panic_macro 33 -> 35 in cmux-tui, which also fails on the merge base, so it comes from base and not this branch. God-file check: no touched file is listed.

Reviewed by a subagent twice (correctness first). Known edge cases left as-is (all need the client to vanish mid-finish for longer than the lease): a watch commit and a client commit at the same moment can both record; a watch commit whose kill fails is not retried; a chat deleted on the target within the lease reads as not landed.

Changelog

none

closes cx-xtg0.9

🤖 Generated with Claude Code

---

Summary by cubic

A chat being moved (acpmux.transfer.v1) is frozen on its source until the client pumping the move commits or aborts; if that client dies or goes away, the chat stays frozen forever. The source now watches each move it began and ends a move left idle for the lease (5 min):

• If the bundle was not read to its end, no target can have finished, so the move aborts (transfer_aborted {reason: "stalled"}) and the chat runs here again, its queue included.
• If it was, the source asks the target named at begin (new optional to: {socket}, sent by the acpmux transfer CLI) with _acpmux/transfer_forget; the target drops any unfinished receive, refuses later ones, and answers whether the chat landed, which decides commit or abort.
• If the target can't answer (or no target was named), the chat stays frozen and the source asks again after another lease.
• State lives in the move's directory, so a restarted daemon resumes watching; repeated commits on an already-closed chat answer committed, and a forgotten move stays refused.
• Old clients are unaffected: to is optional and they get the partial-read abort.

^{Written for commit 7a2ca8a. Summary will update on new commits.}

[cursor]

Bugbot is paused — on-demand spend limit reached

Bugbot uses usage-based billing for this team and has hit its on-demand spend limit.

A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: manaflow-ai/cmux/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 36552955-e4ac-4262-9191-df0cb152a482

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Bugbot is paused — on-demand spend limit reached

Bugbot uses usage-based billing for this team and has hit its on-demand spend limit.

A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue.

[cursor]

Bugbot is paused — on-demand spend limit reached

Bugbot uses usage-based billing for this team and has hit its on-demand spend limit.

A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue.

[teamleaderleo]

Batch queue: dropped from this batch, turns heavy tier red.

• cmux-next checks (god files, concurrency, crash safety, l10n)

Next: fix, push.