Repository navigation
Cloud start proof: integration of #29962 and #30162 (capture only) - #30171
Closed
teamleaderleo wants to merge 7 commits into
Closed
teamleaderleo wants to merge 7 commits into
teamleaderleo wants to merge 7 commits into
Conversation
…ompile red #29962 carries Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Agent-Session: https://cmux.com/deeplink/agent?id=aid-3bab30503f0b9a7059e5
…med the gate) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Agent-Session: https://cmux.com/deeplink/agent?id=aid-3bab30503f0b9a7059e5
…ing SecItemCopyMatching A DEV build's Cloud start passes the person's Claude login alongside the folder copy and awaits it before the chat opens (CloudStartChat+Login). The cached login is stored by `cmux cloud secret set`, which writes it with /usr/bin/security, so the item's Keychain ACL trusts only that tool. The app read it with its own SecItemCopyMatching, which asks macOS for access with a modal prompt and blocks until someone answers. On a capture runner nobody does: the copy finished in a second, yet the card sat on "Clone repository" for the whole capture, awaiting the read. Read it the way CloudHandlers.keychainValues reads the same service: `security find-generic-password -w`, bounded at 30 s, no prompt. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Agent-Session: https://cmux.com/deeplink/agent?id=aid-3bab30503f0b9a7059e5
A chat start whose copy the machine's older cmux-tui refused (machine_outdated) updates the machine and copies again. The update restarts the machine's daemon and its link comes back on a new socket, but the second copy reused the socket read before the update and failed: "cannot connect to .../cmux-link-....sock: No such file or directory (os error 2)" (capture at ff3f8c9, 2026-11-01). CloudOutdatedMachine.copy now reads the socket for each copy and, after an update, waits (up to 90 s) for the connection's handshake key to change before reading it again. CmuxNextApp shrinks by one line. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Agent-Session: https://cmux.com/deeplink/agent?id=aid-3bab30503f0b9a7059e5
… team machine Every machine on a team account has guest kind "team", including one Leo just made, so #29771's first-chat login and the "Transfer and restart" recovery both end in "Personal credentials can only be transferred to a Cloud machine you own." In DEV and dogfood builds (cloud.startChat's existing gate), a team guest whose creator is the caller (the platform's vmKind == "owner" answer, still checked before and after the login) may take the login. Production keeps requiring an owner guest. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Agent-Session: https://cmux.com/deeplink/agent?id=aid-3bab30503f0b9a7059e5
…er the same DEV allowance Review (router-review, SHIP at 2997fae, P1 follow-up): the transfer installed on a team guest but the restart still required an owner guest. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Agent-Session: https://cmux.com/deeplink/agent?id=aid-3bab30503f0b9a7059e5
Collaborator
Author
|
Owned by an agent session · session |
Contributor
|
cmux status (one comment, edited in place; each line is updated by the job that owns it) web and size checks: green Default changesNo defaults change at |
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 04:59 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 05:05 — with
GitHub Actions
Inactive
|
Found 4 test failures on Blacksmith runners: Failures
|
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 06:02 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 06:04 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 06:06 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 06:08 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 06:54 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 07:05 — with
GitHub Actions
Inactive
teamleaderleo
force-pushed
the
cloud-proof-integration
branch
from
November 1, 2026 07:37
6b4eaee to
321357d
Compare
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 07:37 — with
GitHub Actions
Inactive
teamleaderleo
force-pushed
the
cloud-proof-integration
branch
from
November 1, 2026 09:33
1c22665 to
2315825
Compare
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 09:39 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 09:39 — with
GitHub Actions
Inactive
teamleaderleo
force-pushed
the
cloud-proof-integration
branch
from
November 1, 2026 09:55
2315825 to
f489882
Compare
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 09:55 — with
GitHub Actions
Inactive
teamleaderleo
force-pushed
the
cloud-proof-integration
branch
from
November 1, 2026 09:58
f489882 to
3d9dabf
Compare
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 10:20 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 10:20 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 11:14 — with
GitHub Actions
Inactive
teamleaderleo
force-pushed
the
cloud-proof-integration
branch
from
November 1, 2026 11:18
3d9dabf to
b4b0bd4
Compare
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 11:31 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 11:32 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 15:06 — with
GitHub Actions
Inactive
teamleaderleo
temporarily deployed
to
ci-routing-agent
November 1, 2026 15:45 — with
GitHub Actions
Inactive
Collaborator
Author
This branch was previously deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![Fix with [code]smith](https://pr-comments-assets.blacksmith.sh/codesmith/fix-with-codesmith-light-3x.png)
HOLD: capture-only integration for the Cloud start proof; it is not meant to land. Its parts land through #29962 and #30162.
feat-cmux-next at 444b31d with #29962 (head 7f7b9d3) and #30162 (head e38150c) on top, so a fleet capture app (cmuxterm-hq pr-capture-cloud, whose provenance takes a manaflow-ai/cmux pull request head) can run Leo's flow: "whenever i start a chat it should be able to send me to cloud autommatically keep launching/downloading new dev builds and such".
Agent session: agent session
🤖 Generated with Claude Code
Need help on this PR? Tag
@codesmith-botwith what you need.Summary by cubic
Capture-only integration of #29962, #30162, and #30258 onto
feat-cmux-nextso a fleet capture app can drive Leo's flow: starting a chat on Cloud automatically and launching and downloading dev builds. This branch is not meant to land; its parts land through the individual PRs.compose_sendandrun_modeautomation verbs drive the composer's Return and the run row's Cloud pick, so a chat reachescloud.startChatinstead ofchat.send.cmux link machine pincommand, and a chat copy refused by the machine's outdated daemon is retried after the update on the machine's new link — the daemon restarts, so the retry waits up to 90 s for the new socket instead of failing on the stale one.security find-generic-password -w(30 s bound) instead ofSecItemCopyMatching, whose macOS permission prompt never gets answered on a headless capture runner and stalls the start on "Clone repository".Written for commit e35296b. Summary will update on new commits.