[teamleaderleo]

Bead: cx-ncc.104. Stacked on #20452 (Labs); this diff includes its commits until #20452 lands.

What changed

New Tab gets saved environments behind the Labs flag Saved Environments (labs.savedEnvironments, nightly-next cohort). With the flag off, nothing changes.

• Choose environment ⌄ in the New Tab composer strip opens a searchable menu.
  • Saved environments are grouped Local / SSH / Cloud, with a check on the picked one.
  • The menu also has No environment, Edit environment and New environment.
  • Once picked, the strip shows the environment's name in place of Folder · Computer.
  • The chip's right-click menu has Edit / No environment / New / Remove.
• New environment opens an inline panel on the page, not a modal. It has tabs:
  • Local: name, folders (recent folders or Choose folder…), a per-folder ⋮ with Use worktree / Remove, and environment variables.
  • SSH: name, a host (the machines the Computer menu lists, plus SSH…), folders on that host, and environment variables.
  • Cloud: name, network access (None / Limited with allowed domains / Full) and a setup script.
  • Remote: a short line plus Connect a machine…, which runs the existing remote.connect.
• Asking with an environment picked goes through the existing chat.new, so it works for every harness:
  • Local starts in the first folder, or in a new worktree of it via git.worktree.create.
  • SSH starts on the environment's machine (peer).
  • Cloud runs the existing cmux Cloud… action.
• Host storage: environment.list / environment.save / environment.remove, New Tab page only.
  • Fixed param keys; unknown keys are refused at any depth.
  • Caps: name 80, 16 folders, 32 env vars with POSIX keys, 64 domains, setup script 16 KiB.
  • Stored in <App Support>/<bundle id>/environments.json, written 0600 (temp file, fsync, rename), with file IO in an actor.

Not yet (follow-ups on the bead):

• Env vars and extra folders: saved, but not yet applied to the agent. acpmux takes per-session env only from the app's unix socket and does not forward additionalDirectories. The follow-up PR covers that, with its security analysis.
• Select branch: hidden until the New Tab page can list a folder's branches and git.worktree.create takes a base.
• Cloud network settings: saved, but not applied to the machine yet.

Red / green

• webviews/test/new-tab-saved-environments.test.tsx covers five behaviors:
  • flag off: no chip and no calls
  • grouped and searchable menu
  • Local with two folders, one in a worktree, saves the contract shape and names the strip
  • SSH asks with peer
  • No environment clears it
  • Red on 56794b8 (tests only): 1 pass, 4 fail. The flag-off test passes by design. Green on d43d609: 5 pass.
• SavedEnvironmentsTests (Swift, at the page-request boundary) covers five behaviors:
  • a save gets an id and time, newest first
  • contract breaks are refused
  • remove deletes
  • a chat page cannot read or edit environments
  • the file is 0600
  • Red: it does not build without the feature. Green runs in hosted CI.

Verification

• sbx build (CmuxNext sources): clean.
• God-file check against base: passes. Wiring avoids the over-budget AppServices / AgentTabStore.
• Crash ratchet: passes.
• lint-ios-package-conventions.sh: passes.
• gen-settings-sources.py --check and gen-strings.mjs --check (all pages): pass.
• ui-rules and title-tooltip rules: pass.
• Concurrency check: reds only in base's IdleOwnerRestart.swift / DaemonConnection+QuietHandoff.swift, which Fix base red: chief_brains state root asks the build identity (cx-8oudl) #20767 fixes.
• Typecheck and lint run in CI.
• Real-app captures (light, dark and a clip) follow in this body.

Localization

• 36 environment.* pane strings and the Labs title/help in all 21 locales (needs_review).
• agentPane.error.environment in 21 locales.
• Generated strings regenerated for all pages.

Changelog

• Added: Labs: saved environments on the New Tab page: pick a saved set of folders and machine when you start a chat.

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

---

Summary by cubic

Adds saved environments to the New Tab page behind the Labs flag savedEnvironments (nightly-next cohort), and carries the Labs flag registry from #20452; with the flag off, nothing on the New Tab page changes.

Saved environments

• "Choose environment" in the composer strip opens a searchable menu grouped Local / SSH / Cloud, plus Edit and New environment; until one is picked it is a quiet glyph, so Folder and Computer keep their room; "New environment" opens an inline panel with tabs per kind.
• Environments store a name, folders (a folder may ask for a new worktree), environment variables, and for SSH a host; Cloud adds network access and a setup script.
• Starting a chat with an environment picked reuses the existing chat.new: Local begins in the first folder (in a new worktree via git.worktree.create), SSH on the environment's machine (peer), Cloud via the cmux Cloud action.
• Environments persist in <App Support>/environments.json through environment.list / environment.save / environment.remove, New Tab pages only; writes are atomic in an actor, the file is 0600, and at most 200 environments are kept in CmuxNextAgentPane.
• Caps: name 80, 16 folders, 32 env vars, 64 domains, setup script 16 KiB; unknown param keys are refused at any depth.
• Follow-ups: env vars, extra folders and Cloud network settings are saved but not yet applied to the agent; branch selection is hidden until git.worktree.create takes a base.

Labs flags

• schemas/settings/source/labs.json is the single registry for opt-in features (owner, created, expires, cohort, intent); the generator emits a Swift LabsFlag registry and the web flag table.
• Swift reads a flag with snapshot.lab(_:teamBuild:), pages read data-labs on <html>; the existing labs.previewFeatures moves onto the registry.
• Flags are agent-settable, appear in Settings > Labs, flip from the palette, and Help > Labs… opens the list; in team builds the New Tab page shows quick toggles.

^{Written for commit 3dbfe8e. Summary will update on new commits.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: manaflow-ai/cmux/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: b3d9393c-8b45-4c98-ac17-68e3d739bb0d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

red: cmux-next CmuxNextApp size cap; do not merge until green; see lane-rules
red: web / Web status; do not merge until green; see lane-rules
red: web / react-apps-check; do not merge until green; see lane-rules

[github-actions]

Unclear: web / react-apps-check failed: no known signature; failed step: Check webviews (Oxlint, Oxfmt, type check).

CI failed on 270c0aa7fa (run 38665065908 attempt 1): 1 unknown.
macOS jobs did not run: compile and app tests were skipped: Fast static checks skipped.

Job	Verdict	Why
web / react-apps-check	unknown	no known signature; failed step: Check webviews (Oxlint, Oxfmt, type check)

Not re-run automatically: web / react-apps-check is not a machine failure.

Written by scripts/ci/classify_failures.py (ci-failure-attribution.yml); signatures are its SIGNATURES table. A machine verdict is the runner's fault, not this PR's; yours means the failing file is one this PR changes, also red on main that main's latest full suite fails the same way, seen on other PRs that it failed on another pull request's run lately.

[github-actions]

CI fast guards failed on 270c0aa7fa (https://github.com/manaflow-ai/cmux/actions/runs/38665065908). It does not block the merge; a red guard merged into main breaks it for every open PR.
The log named no failed step; see the run.

Agents: python3 scripts/ci/guard_attribution.py fix applies the mechanical fixes locally. This comment is updated in place on each push.

[cursor]

Bugbot needs on-demand usage enabled

Bugbot uses usage-based billing for this team and requires on-demand usage to be enabled.

A team admin can enable on-demand usage in the Cursor dashboard.

[teamleaderleo]

Orphaned: no activity for 112 h, and no lane holds a lease on it. The orphan sweep could not merge feat-cmux-next in: conflicts in Packages/macOS/CmuxNext/Sources/CmuxNextAgentPane/AgentPageProvider.swift, Packages/macOS/CmuxNext/Sources/CmuxNextAgentPane/AgentPaneModel.swift, Packages/macOS/CmuxNext/Sources/CmuxNextAgentPane/AgentPaneView.swift, Packages/macOS/CmuxNext/Sources/CmuxNextApp/AgentTabs.swift, Packages/macOS/CmuxNext/Sources/CmuxNextSettings/CmuxConfigSnapshot+PreviewFeatures.swift, Packages/macOS/CmuxNext/Sources/CmuxNextSettings/CmuxConfigSnapshot.swift, Packages/macOS/CmuxNext/Sources/CmuxNextSettings/Schema/SettingsSchema+AgentPolicy.swift, Packages/macOS/CmuxNext/Sources/CmuxNextSettings/Schema/SettingsSchema+Labs.generated.swift and 11 more. Listed for a lane to resolve.

[teamleaderleo]

Rebuilt on #22131's environment picker as #22406. The rebuild branches fresh from feat-cmux-next, since this branch was stacked on the closed #20452 and conflicts in the catalog.

#22406 keeps saved environments. That covers the host storage, the picker's Saved section, the Create/Edit panel, and asking on an SSH machine or in a local folder or worktree. Its localization keys are regenerated, reusing this PR's translations.

It leaves out three things:

• Env vars, Cloud network access and setup script: saved here but never applied.
• The Cloud kind: cmux-next: environment picker and New Worktree in the composer location row (preview) #22131's New environment already covers it.
• The Labs infrastructure: that came from feat(cmux-next): Labs flags, one registry for opt-in looks and behaviors (hq#1980, no bead) #20452.