[teamleaderleo]

The coordinator's ask: "A silent .skip is a bug anyway, because users get the bare "rejected" card with no reason. Have passHarnessLogin record why it skipped in the start report, and log it: the DEV/dogfood gate, caller owns, guest kind, and the machine's login reading."

Why

A Cloud start that passes no Claude login leaves the machine's Claude signed out, and every turn there fails with "The provider rejected Claude Code's credentials on this Cloud machine". That is the item 14 and handoff captures, even after #31183. The start skipped without saying which check stopped it, and no capture could tell.

Change

• CloudHarnessLoginDecision (CmuxNextCloudCredentials) owns the decision that CloudStartChat.loginStep made, unchanged, and names its reason: build-gate-off, no-transfer-for-harness, signed-out, caller-not-owner, guest-not-owner, guest-kind-unread, machine-login-kept, install-cached or confirm-first.
• The guest probe prints vm-kind:<kind>, so an exec that failed reads as guest-kind-unread. Before, a failed exec and a team guest looked the same.
• passHarnessLogin logs a one-line summary (public, with no token or provider output) and keeps it on the machine's cloud.machines row as harness_login, with the outcome (installed, declined, or the transfer's fixed failure text). An example: skip (guest-not-owner): gate on, provider claude, signed in yes, caller owns yes, guest team, machine login -, cached yes.
• No change in behaviour: the same checks in the same order. CmuxNextApp is one line shorter.

Tests

CloudStartChatLoginTests: every reason, the summary's exact text, and the probe's marker parsing (plus a real run of the probe). Fleet: the app compile and the suite (results in the comments).

Agent session: agent session

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

---

Summary by cubic

Records why a Cloud start skips passing its harness login, so a machine left signed out carries its reason in the log and the cloud.machines row instead of a silent skip that showed only the bare "rejected" card.

• New CloudHarnessLoginDecision names the deciding check: the DEV/dogfood gate, no transfer for the harness, signed out, caller not owner, guest not owner, guest kind unread, machine login kept, install cached, or confirm first.
• The guest probe prints vm-kind:<kind>, so an exec that failed reads as guest-kind-unread instead of looking like a team guest.
• passHarnessLogin logs a one-line public summary and keeps it on the machine as harness_login, with the outcome (installed, declined, or the transfer's fixed failure text).
• No behavior change: the same checks run in the same order.

^{Written for commit a333023. Summary will update on new commits.}

[teamleaderleo]

Review (subagent claude-opus-5-5 medium): SHIP at a333023
Follow-ups:

• [follow-up] When callerOwnsVM throws, the record reads skip (caller-not-owner) … -> failed: X. A separate owner-check-failed reason would be clearer.
• [follow-up] Log a failed outcome at .error again (it is now only in the .info summary).
• [follow-up] theGuestProbeReadsTheVMKind assumes the test host has no /etc/cmux/vm-kind. Accept any marked value.

[github-actions]

cmux status _{(one comment, edited in place; each line is updated by the job that owns it)}

Review a333023: HQ feed card · gallery before/after runs · checks

App of this head (app.zip, kept 1 day)

gh workflow run reload-build.yml -R manaflow-ai/cmux --ref feat-cmux-next -f tag=pr31264 -f ref=cloud-login-skip-reason -f platform=macos -f backend_mode=local

red: cmux-next checks (god files, concurrency, crash safety, l10n); base red: the same failure on the base 1d72f53; does not block

Default changes

This pull request changes 1 default at a33302363ab0 (what everyone gets without configuring anything):

• tunable-source.CmuxNextApp/Control/AppControl+Cloud.swift:cloudMachineRow: "3c145083c906db9c6af8a5959063d52dc2257be50c6e72a054c4f8355c6f37d7" -> "8fb82d32c139efd4f87bfb9626fc1e02866be2682aaa6507219220e93972d22a"

Signed off on this commit by review (subagent claude-opus-5-5 medium).

Merge receipt: merged as 18db361f6459 with these defaults changed, signed off by review (subagent claude-opus-5-5 medium).

Regenerate the snapshot with python3 scripts/ci/defaults_guard.py snapshot.

Shipped in:

• cmux NEXT nightly 1.0.0-nightly.4134492295001 (1c090405ac)
• cmux NEXT nightly 1.0.0-nightly.4134553248001 (0422598316)
• cmux NEXT nightly 1.0.0-nightly.4134623762501 (305ecd25ab)
• cmux NEXT nightly 1.0.0-nightly.4134681135201 (b2ff685745)
• cmux NEXT nightly 1.0.0-nightly.4134739895101 (55ba5e83b5)
• cmux NEXT nightly 1.0.0-nightly.4134851291701 (530f1f2f82)

[teamleaderleo]

Owned by an agent session · session

[blacksmith-sh]

Found 6 test failures on Blacksmith runners:

Failures

Test	View Logs
/tmp/tmp2pxua37q/summary-missing.json (live):/summary-missing.json (live):	View Logs
/tmp/tmpa6i9b2ji/summary-fail.json (live):/summary-fail.json (live):	View Logs
[new_workspaces] debug.new_workspace timed 0 of 50 new workspace rows/ [new_workspaces] debug.new_workspace timed 0 of 50 new workspace rows	View Logs
[new_workspaces] the window draws no frames/[new_workspaces] the window draws no frames	View Logs
[tabs] debug.tab_switch timed 0 of 40 switches/ [tabs] debug.tab_switch timed 0 of 40 switches	View Logs
[tabs] the window draws no frames/[tabs] the window draws no frames	View Logs

^{Need help on this PR? Tag @codesmith-bot with what you need.}