[teamleaderleo]

Base-red fix: the Rust panic ratchet step of cmux-tui.yml is red for crate cmux-tui on feat-cmux-next: cmux-tui: clippy::indexing_slicing 834 > baseline 833 at 7f97b84 (fast-checks run 41050016507), growing to 854 and then 861 as more landed. This PR rewrites each hit added since the baseline was measured (ccd5f60) so it can't panic and behaves the same, then lowers the baseline to the measured count.

Where the hits came from (blame), and what replaced them

commit	file	hits	now
7a2d52d (cmux team invite alias)	cli/app.rs	1	rest.get(1..).unwrap_or_default() (the arm matches only when rest[0] is invite)
3c7024f (#28085)	cli/mcp/code_mode.rs, cli/mcp/placement.rs, cli/mcp/v2_tools.rs	19	get / pointer reads; JsonSet::set / set_path writes; block_end walks the bytes with get
7f97b84 (#27976)	cli/mcp/upstream.rs	1	init.get("instructions")
8f5dfe0 (#28248)	cli/mcp.rs, cli/mcp/v2_tools.rs	8	get / pointer reads, JsonSet::set for the anchored wait pattern

A missing value read through get / pointer compares the same as the Null that indexing returned. block_end stops at the end of input exactly as the old i < len checks did, including an escape or comment cut off at the end.

Baseline

cmux-tui measured at the merged head ed262bc (fast-checks run 41078934160): indexing_slicing 831, with no new hits since the merge-base. While this PR was open, #28169 raised the baseline to 861, so this PR lowers it 861 -> 831. Its other lints are unchanged.

Tests

• cli::app::tests::a_bare_team_invite_runs_the_home_action_with_no_arguments
• cli::mcp::code_mode::block_end_tests::block_end_skips_quoted_and_commented_braces_and_stops_at_the_end (strings, template literals and comments, plus input cut off at the end)
• cli::mcp::code_mode::block_end_tests::compact_keeps_required_and_hints

Observed / Not run

• At 8f805d9 (fast-checks run 41069289790): cargo test -p cmux-tui --lib -- cli::app::tests cli::mcp gave 216 passed and 0 failed. The workspace panic ratchet printed no cmux-tui: line. The only RED lines are acpmux's (indexing_slicing 716 > 693, string_slice 98 > 94), which Base red: acpmux panic ratchet (string_slice 98 > 94, indexing_slicing 703 > 693): rewrite the new hits without panics #28134 fixes.
• The cli.rs resource-API-boundary red from cmux mcp: terminals by tab or pane, waits on output, named missing fields, 'runs in cmux' (tool-evals round 3) #28248 / fix(cli): describe every cmux cloud verb in its help #28252 is a base red owned elsewhere. This PR doesn't touch it.
• At ed262bc (after merging feat-cmux-next, fast-checks run 41078934160): cargo clippy --locked --keep-going -p cmux-tui --all-targets -- -D warnings was clean, the 216 cli::app::tests and cli::mcp tests passed, and the panic ratchet printed no RED lines.
• Review (gpt-6.1-sol, high, fast): SHIP at 8f805d9, with no findings. After the base merge (it conflicted only in the baseline json, and the cmux-tui source hunks are unchanged), the delta review gave SHIP at 316caf9, with no findings.
• Not run: the full cmux-tui test suite (CI covers it) and macOS builds (no Swift change).

Changelog

none

risk:low (panic-free rewrites with the same output, tests, and a lower baseline).

Agent session: agent session

🤖 Generated with Claude Code

[github-actions]

cmux status _{(one comment, edited in place; each line is updated by the job that owns it)}

Review 316caf9: HQ feed card · gallery before/after runs · checks

App of this head (app.zip, kept 1 day)

gh workflow run reload-build.yml -R manaflow-ai/cmux --ref feat-cmux-next -f tag=pr28315 -f ref=lane/cmux-tui-indexing-ratchet -f platform=macos -f backend_mode=local

web and size checks: green

[blacksmith-sh]

Found 5 test failures on Blacksmith runners:

Failures

Test	View Logs
main.DeveloperIdAppTests.test_download_prints_the_active_profile_only/ test_download_prints_the_active_profile_only	View Logs
stubs: /System/Library/Frameworks/Security.framework/Versions/A/Security has no stub/ Security has no stub	View Logs
stubs: CoreFoundation.tbd: install-name /System/Library/Frameworks/ CoreFoundation.framework/Versions/A/CoreFoundation, missing 1: ['_CFRetain']/ CoreFoundation, missing 1: ['_CFRetain']	View Logs
stubs: CoreFoundation.tbd: install-name /System/Library/Frameworks/ CoreFoundation.framework/Versions/A/CoreFoundation, missing 1: ['_log2']/ CoreFoundation, missing 1: ['_log2']	View Logs
test_the_repository_highlights_validate (main.DigestTests.test_the_repository_highl ights_validate)/ test_the_repository_highlights_validate (main.DigestTests.test_the_repository_highl ights_validate)	View Logs

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[cursor]

Bugbot needs on-demand usage enabled

Bugbot uses usage-based billing for this team and requires on-demand usage to be enabled.

A team admin can enable on-demand usage in the Cursor dashboard.

[teamleaderleo]

Review (the owner lane's independent review, at its land request): SHIP at 8f805d9

Recorded by lane-gh-broker from this PR's owner lane, which asked to land this exact head after its independent review. next-autoland lands it once every red is the base's; a BLOCK at this head, a HOLD line or a hold label still stops it.

[cursor]

Bugbot needs on-demand usage enabled

Bugbot uses usage-based billing for this team and requires on-demand usage to be enabled.

A team admin can enable on-demand usage in the Cursor dashboard.

[teamleaderleo]

Review (the owner lane's independent review, at its land request): SHIP at 316caf9

Recorded by lane-gh-broker from this PR's owner lane, which asked to land this exact head after its independent review. next-autoland lands it once every red is the base's; a BLOCK at this head, a HOLD line or a hold label still stops it.

[github-actions]

Shipped in:

• cmux NEXT nightly 1.0.0-nightly.4108762076801 (8e3aaa2401)
• cmux NEXT nightly 1.0.0-nightly.4108980870001 (d9f2f7af55)
• cmux NEXT nightly 1.0.0-nightly.4109063053901 (bf70709747)
• cmux NEXT nightly 1.0.0-nightly.4109296117601 (72882288da)
• cmux NEXT nightly 1.0.0-nightly.4109410702301 (aead767cca)