[teamleaderleo]

Stacked on #21896 (full-access switch). Until that lands, this diff includes its commit.

Summary

The Debug Settings toggle agent.suggestedTasks becomes a real setting: Suggest Follow-Up Tasks (sessions.promptSuggestions, off by default as before), under Settings > Agents > Agent Sessions. When it's on:

• agents get the cmux-sessions tools (ACPMUX_OFFER_TOOLS=1 for the next acpmux daemon this app starts);
• the pages show the tasks they suggest, which start as child chats.

The Debug toggle still turns it on too.

• AgentPaneSuggestedTasks follows the setting through Observation. It keeps a thread-safe copy (forNextDaemon) that AcpmuxHost reads each time it starts a daemon.
• CmuxNextApp doesn't grow. The composer-settings observation sets the two Debug-owned slider fields in one line, which covers the one line of wiring.
• Agents can't set the key (userOnly), because turning it on gives every agent tools that start child chats.
• New strings are translated into all 21 locales.

Testing

• The fleet export step built the package and its tests, and the exports are committed (6da0205).
• package-test-lane.sh suite at 6da0205 passed AgentPaneSuggestedTasksSettingTests, AcpmuxOfferToolsTests and SettingsSchemaExportTests.
• Not run: a live daemon started with the setting on.

Changelog

Added: A setting lets agents suggest follow-up tasks that start as child chats.

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

---

Summary by cubic

Makes suggested follow-up tasks and full-access modes real settings under Settings > Agents > Agent Sessions.

Suggest Follow-Up Tasks (sessions.promptSuggestions, off by default) gives agents the cmux-sessions tools and shows their suggested tasks, which start as child chats. Allow Full-Access Modes (sessions.allowFullAccess, on by default) refuses switching into modes that skip approvals — bypass permissions, full access, yolo, auto-approve.

• The Debug Settings agent.suggestedTasks toggle still turns suggestions on, written at once so even a daemon prewarmed at launch gets it.
• acpmux enforces sessions.allowFullAccess server-side for every client and chat: new chats and resumed chats downgrade to default, session/set_mode and config options into full access are refused, and an unreadable settings file fails closed.
• Resumed and pooled chats that can't leave full access stop rather than run; a full-access parent's child starts outside it. Profiles that pin a mode in their argv are exempt.
• acpmux and the app recognize full-access mode IDs with the markers in cmux-tui/spec/full-access-modes.json, and the Swift transport answers the page first with the same localized refusal text.
• Agents can't set either key: promptSuggestions is user-only, allowFullAccess is destructive.
• String catalogs and MDM/schema exports are regenerated; new strings are in all 21 locales.

^{Written for commit 0f4fdca. Summary will update on new commits.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: manaflow-ai/cmux/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 0a68eb07-8f86-4170-b67c-a89ecb0a9e76

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[teamleaderleo]

Bead cx-cwn18 created for this PR by the cmux coordinator.

[teamleaderleo]

Visual preview of 10ad09f: in the maintainers' private review feed.

[teamleaderleo]

cmux-next guards / nightly-guards / workflow-guard-tests / release-notary is red on 15 of 18 fresh feat-cmux-next PR heads in the last 2:00:00, so it is most likely a base red, not this PR's. The base-reds lane has it; a base merge picks up the fix once it lands.

[teamleaderleo]

cmux-next guards / defaults-snapshot is red on 24 of 24 fresh feat-cmux-next PR heads in the last 2:00:00, so it is most likely a base red, not this PR's. The base-reds lane has it; a base merge picks up the fix once it lands.

[teamleaderleo]

merge-audit: #21897 merged at 0f4fdca without no SHIP review receipt on the head; no risk tier label. #23173 reverts it. To keep this change, add the missing evidence for 0f4fdca here; the next audit pass then closes #23173. Otherwise review and land #23173.

[teamleaderleo]

Risk tier back to risk:normal, which is what scripts/ci/risk_tier.py classify gives for this PR's merged files (5abfe87). I set risk:high earlier because of a report that this diff carries #21896's sessions.allowFullAccess enforcement in acpmux. It doesn't: none of its 9 files are in acpmux, and that enforcement is in #21896. The one defect the review found was that the setting couldn't turn suggestions off, because it was ORed with the default-on Debug toggle agent.suggestedTasks. #23284 fixes that forward.

[github-actions]

Shipped in:

• cmux NEXT nightly 1.0.0-nightly.3958372135301 (bc661dae0e)

[teamleaderleo]

Fixed forward by #23284 (merged as 9fe0c23) instead of reverting with #23173, which is now closed. The setting now decides; the Debug toggle can only force suggestions on.