[teamleaderleo]

What

A Cloud start copies the person's folder to their machine and opens the chat there. The machine's acpmux had no trust answer for the copy, so the chat showed "Trust the cloud-proof-2025f5 repo?". The first message sat in the composer and was never sent, even though the person had sent it from a folder this Mac trusts.

Evidence: a DEV capture of build ff3f8c9 on 2026-11-01, Cloud fixture, existing machine "cloud-chats". For 5 minutes after the send, debug.surfaces showed the machine's agent pane with "kind": "agent", "phase": "restoring". The still shows the trust card ("Not now: The agent won't run here until you trust it.") above the unsent message.

Policy change: this narrows cx-1bhjj

Under cx-1bhjj, only the person's own click on a machine trusts a folder there. With this PR, the person's existing trust answer on this Mac also counts for their own copy of that same folder, made by this start, on their own Cloud machine. Nothing else changes:

• Only the copied folder. The answer is recorded for the chat's folder inside the copy this start made. No other folder on the machine gets it.
• Only when this Mac already trusts it. "Trusts" means this Mac's acpmux reads the chat's folder as level: "trusted" (the same acp.trust.get read its own pane uses). That covers the person's decision, their auto-trust rules, or the agents' own levels.
  • An unknown, untrusted or unreadable answer still asks on the machine.
  • So does a run with no --acpmux-home given.
• Only on the caller's own machine. The call is agent-session-trust on the chat's tab and is sent only on the link's owner answer (vm_kind: "owner"). The machine daemon's own checks still apply: the machine kind gate, its own agent tab, and the home-folder rule.
• Not a teammate's or SSH machine. Those never get it: there is no ownerLink, so nothing is sent.

How

• Rust (cmux link start-chat copy):
  • New --acpmux-home H flag.
  • A successful copy now answers source_trusted, read from that acpmux home's trust record by acpmux::trust::get for the chat's folder (local plus subpath).
  • A failed copy answers nothing.
  • The App passes its own acpmux home (QuitAgents.environment), so a DEV build reads its own record.
• Swift package (CmuxNextDaemon): new AgentSessionAttachClient.trustCopiedFolder. It sends agent-session-trust at level trusted only when sourceTrusted is true and an owner link exists. A failure is quiet: the page then asks as before.
• App (CloudStartChat.open): calls it after the tab exists and before the workspace is shown.
  • CmuxNextApp lines are unchanged (+17/−17; arch-ratchet: "no architecture count rises").

Tests

• New Rust test a_copy_answers_whether_this_macs_acpmux_trusts_the_chats_folder. It covers:
  • no answer, trusted, untrusted and unreadable records;
  • the subpath folder;
  • no acpmux home given;
  • a failed copy answering no trust.
• Run: cmux-ci test -- cargo test -p cmux-tui --lib link::start_chat_cli. Fleet app compile: cmux-ci compile-check --app at the head.

Related: #31087 (the second copy after a machine update uses the machine's new link socket) touches the same CloudStartChat lines.

Agent session: agent session

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

---

Summary by cubic

Fixes Cloud start so a folder this Mac trusts no longer prompts to trust its copy on the person's own Cloud machine. This narrows cx-1bhjj: the person's existing trust answer on this Mac also counts for their own copy of the same folder on their own Cloud machine, so their first message is no longer held behind a second prompt.

How it works

• cmux link start-chat copy takes --acpmux-home and answers source_trusted, read from that acpmux home's trust record the same way acp.trust.get reads it.
• The App records trusted for the copied folder on the machine (agent-session-trust) before the chat shows, only when source_trusted is true and an owner link exists; failures stay quiet and the page asks as before.
• A failed copy answers no trust, and a copy with no --acpmux-home never answers trusted.
• Only the copied folder on the caller's own Cloud machine gets this; unknown, untrusted, or unreadable answers still ask there, and teammate or SSH machines are never touched.
• Tests cover trusted, untrusted, unknown, and unreadable records, the subpath folder, a missing acpmux home, and a failed copy.

^{Written for commit d600940. Summary will update on new commits.}

[github-actions]

cmux status _{(one comment, edited in place; each line is updated by the job that owns it)}

Review 4945d28: HQ feed card · gallery before/after runs · checks

App of this head (app.zip, kept 1 day)

gh workflow run reload-build.yml -R manaflow-ai/cmux --ref feat-cmux-next -f tag=pr31106 -f ref=cloud-start-carry-trust -f platform=macos -f backend_mode=local

web and size checks: green

Shipped in:

• cmux NEXT nightly 1.0.0-nightly.4133598742701 (1e1948befb)
• cmux NEXT nightly 1.0.0-nightly.4133716725501 (d30463325c)
• cmux NEXT nightly 1.0.0-nightly.4133769596201 (0272db645e)
• cmux NEXT nightly 1.0.0-nightly.4133822529301 (68e3df851b)
• cmux NEXT nightly 1.0.0-nightly.4133907849701 (c2ef233b76)
• cmux NEXT nightly 1.0.0-nightly.4133963836301 (48e4448d11)
• cmux NEXT nightly 1.0.0-nightly.4134024448601 (94322a6ccf)

[teamleaderleo]

Owned by an agent session · session

[teamleaderleo]

Review (codex, router-review): SHIP at d9f8208

Reviewer: codex gpt-6.1-sol xhigh, fast tier.

SHIP at d9f8208

Visual verdict: no images; Leo tries the build

No actionable findings. Static review completed; test tools were unavailable in the box.

Follow-ups: none

[teamleaderleo]

Review (codex, router-review): SHIP at 6beed07

Reviewer: codex gpt-6-astra high, fast tier.

SHIP at 6beed07

Visual verdict: no images; Leo tries the build

No findings.

Follow-ups: none

[cursor]

Bugbot needs on-demand usage enabled

Bugbot uses usage-based billing for this team and requires on-demand usage to be enabled.

A team admin can enable on-demand usage in the Cursor dashboard.

[blacksmith-sh]

Found 2 test failures on Blacksmith runners:

Failures

Test	View Logs
test_runtime_added_app_capabilities_are_runtime_only (main.StaticCapabilityRuntimeO nlyTests.test_runtime_added_app_capabilities_are_runtime_only)/ test_runtime_added_app_capabilities_are_runtime_only (main.StaticCapabilityRuntimeO nlyTests.test_runtime_added_app_capabilities_are_runtime_only)	View Logs
test_the_repository_highlights_validate (main.DigestTests.test_the_repository_highl ights_validate)/ test_the_repository_highlights_validate (main.DigestTests.test_the_repository_highl ights_validate)	View Logs

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[teamleaderleo]

Review (codex, router-review): SHIP at 272f612

Reviewer: codex gpt-6-astra high, fast tier.

SHIP at 272f612

Visual verdict: no images; Leo tries the build

No correctness findings. Focused Rust tests could not run because cargo is unavailable in this box.

Follow-ups: none

[cmux-bot]

cmux-bot approves 272f612: an independent review passed this exact head (router-review receipt by teamleaderleo). A push needs a new review; a later BLOCK at this head dismisses this approval.

[teamleaderleo]

Review (codex, router-review): SHIP at c865960

Reviewer: codex gpt-6-astra high, fast tier.

SHIP at c865960

Visual verdict: no images; Leo tries the build

No correctness findings.

Follow-ups: none

[cmux-bot]

cmux-bot approves c865960: an independent review passed this exact head (router-review receipt by teamleaderleo). A push needs a new review; a later BLOCK at this head dismisses this approval.

[cursor]

Bugbot needs on-demand usage enabled

Bugbot uses usage-based billing for this team and requires on-demand usage to be enabled.

A team admin can enable on-demand usage in the Cursor dashboard.

[teamleaderleo]

Review (independent Codex gpt-6.1-sol, high, via the review router; full diff from merge base e0fa06f to this head): SHIP at 4945d28.

[P2] [follow-up] Packages/macOS/CmuxNext/Sources/CmuxNextApp/Cloud/CloudStartChat.swift:148 - the new trust RPC can await up to 10 seconds after the last account check; if the user switches accounts during it, the stale chat still opens and the local tab closes - recheck the account immediately after trustCopiedFolder before showing or closing tabs.

[teamleaderleo]

Review (next-review patch-id; carried): SHIP at d600940

The independent SHIP at 4945d28 carries to this head: the PR's own change (git diff $(git merge-base feat-cmux-next HEAD) HEAD) has the same git patch-id --verbatim (82d17daff0c7af60) at both heads, and no merge between them was resolved by hand. Nothing new to review. A newer BLOCK, or any change to the PR's own diff, ends the carry.