[teamleaderleo]

HOLD: Land after #25759 (fix/25665-auth-review-followup) adds FallbackTokenStore.isTokenStorageAvailable() to the shared auth runtime and that API is present on feat-cmux-next.

NEXT’s CloudAuth currently constructs the shared protected Keychain/file fallback but leaves AuthCoordinator.isTokenStorageAvailable at its default { true }. A transient Keychain-unreadable result can therefore look like an empty store during NEXT restore and clear the cached signed-in session. This downstream patch wires the existing availability hook to the fallback store. It deliberately contains no Keychain policy, token-store, SDK, or classic composition changes; #25759 owns those.

Validation: python3 scripts/cmux-next/prepush-gate.py passed; git diff --check passed. The Swift package cannot compile this branch until #25759’s shared API is merged/synced. After that dependency lands, run the focused CmuxAuthRuntime availability tests plus CmuxNextAppTests auth restore coverage on this exact commit rebased onto the dependency.

Leo’s onboarding ask applies: “Also, we need to be fixing authentication issues, like the whole onboarding situation. Is that in? What does you improve? What does you fix? The edge cases, like you guys need to comprehensively brainstorming all the onboarding edge cases: foot guns, paper cuts, snags, clips, whatever the f***.”

Risk: high (authentication session persistence). No UI change and no capture required.

agent-identity footer --repo manaflow-ai/cmux

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

---

Summary by cubic

Fixes NEXT sessions being cleared when the Keychain is temporarily unreadable (for example, before first unlock). CloudAuth now forwards the fallback token store's availability to AuthCoordinator, so a transient Keychain error is treated as an unavailable store instead of an empty one, and the cached signed-in session survives restore.

• Capture fixture builds always report storage as available; both production branches forward FallbackTokenStore availability.
• Depends on FallbackTokenStore.isTokenStorageAvailable() from Preserve macOS sessions after refresh rejection or Keychain read failure #25759 and should land after that merges.
• High risk because it affects session persistence; no UI change.

^{Written for commit 76d3ac3. Summary will update on new commits.}

[github-actions]

cmux status _{(one comment, edited in place; each line is updated by the job that owns it)}

Review 76d3ac3: HQ feed card · gallery before/after runs · checks

App of this head (app.zip, kept 1 day)

gh workflow run reload-build.yml -R manaflow-ai/cmux --ref feat-cmux-next -f tag=pr26563 -f ref=auth-next-keychain-availability -f platform=macos -f backend_mode=local

web and size checks: green

[teamleaderleo]

Bead cx-sru03n created for this PR by the cmux coordinator.

[blacksmith-sh]

Found 3 test failures on Blacksmith runners:

Failures

Test	View Logs
nightly cmux-tui resolve/nightly cmux-tui resolve	View Logs
nightly.yml must not read vars.NIGHTLY_SIGN while nightly-sign.yml is in shadow mode/ nightly.yml must not read vars.NIGHTLY_SIGN while nightly-sign.yml is in shadow mode	View Logs
the short nightly decide gate must use the pooled Linux route with a Blacksmith fallbac k/ the short nightly decide gate must use the pooled Linux route with a Blacksmith fallbac k	View Logs

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[teamleaderleo]

Orphaned: no activity for 13 h, and no lane holds a lease on it. Adopted by the orphan sweep: merged feat-cmux-next in at d1d41b9. A later pass queues it for the merge hub if it is reviewed, small and red only on base reds.

[teamleaderleo]

Owned by an agent session · session

[teamleaderleo]

Awareness note from an agent lane that does not own this PR; it is not a review or a request to take the PR over.

---

Overlap awareness: #28899 adds project-specific persistence keys for the exact signed NEXT DEV channel in CloudAuth initialization, to keep production credentials out of the development Worker after its default changes. It does not change token-storage availability or AuthCoordinator restore policy, so your availability-hook wiring remains independent.

[teamleaderleo]

Still held: feat-cmux-next has the coordinator's isTokenStorageAvailable hook but FallbackTokenStore has no isTokenStorageAvailable() yet, so this one-line wiring can't compile until #25759 (open, targets main) or an equivalent lands that API on feat-cmux-next.

[teamleaderleo]

Orphaned: no activity for 43 h, and no lane holds a lease on it. The orphan sweep could not merge feat-cmux-next in: conflicts in Packages/macOS/CmuxNext/Sources/CmuxNextCloud/Auth/CloudAuth.swift. Listed for a lane to resolve.