[teamleaderleo]

Leo, on a loose transcript line in the NEXT nightly, Approved: cd /tmp; for i in 1 2 3; do gh issue create --repo manaflow-ai/cmux --title "$( [ $i = 1 ] && echo 'Cloud start-session: (Bypass permissions): "but what's going on with these?"

Cause

acpmux logs permission_auto with fullAccess whenever a chat in Bypass permissions (Claude Code) or Full access (Codex) approves an ask on its own, including Claude Code's own guards (#25214). The pane (direct.ts recordFullAccess) drew every one of those as a permissionRecord row: "Approved: {title} ({mode})". The title is Claude Code's permission title, which is the raw command cut to a length, so the line showed half a command with the mode glued onto it. Ask-mode approvals (recordPermission) drew the same kind of loose line ("Allowed: …").

Change

• An ask the chat's Bypass permissions or Full access approved on its own, with no card shown, draws nothing. The call's own row already shows what ran.
• An approval the person gave (Allow, Always allow, or switching to the highest mode while the card was open) puts a dim Approved mark at the edge of the tool row it approved (ApprovedMark.tsx, tool.approved). It no longer draws a receipt line. The mark stays on the call as its result streams in.
• Denied and unanswered asks keep their receipt line ("Denied: …", "Not answered: …"). So does an approval whose call this page has not drawn.
• New string tools.approved, with its translations taken from the existing header.prReview.approved.

Gallery: agent-pane.approved-tool-row (ask-mode-approved, run-one-approved, bypass-nothing).
Spec: leo-workspace design/chat-transcript.md ("Permission approvals"), updated alongside.

Tests

• test/agent-pane-permission-receipt.test.ts is rewritten to match: approved asks show no receipt line and mark call-test; bypass, full-access and policy approvals show nothing; mode-switch approvals, live and replayed, mark the call once; a resync marks it once and keeps the reply whole.
• Typecheck, lint and pane-english pass on the fleet. The browser test runs in CI.

🤖 Generated with Claude Code

Agent session: agent session

[github-actions]

cmux status _{(one comment, edited in place; each line is updated by the job that owns it)}

Review 5970dc5: HQ feed card · gallery before/after runs · checks

App of this head (app.zip, kept 1 day)

gh workflow run reload-build.yml -R manaflow-ai/cmux --ref feat-cmux-next -f tag=pr33408 -f ref=fix/approved-row-bypass -f platform=macos -f backend_mode=local

Gallery before/after for 5970dc5: the capture produced no images (run).

Yours to fix: agent-pane-permission-receipt.test.ts (a file this PR changes), agent-pane-permission-receipt.test.ts (a file this PR changes), agent-pane-permission-receipt.test.ts (a file this PR changes). This PR merged before its CI finished: fix forward on main.

CI failed on 5970dc5328 (run 41604368177 attempt 1): 1 code, 1 unknown.

Job	Verdict	Why
web / react-apps-base-check (1)	code	a web test failed
web / react-apps-check	unknown	no known signature; failed step: Check webview test shards

Failures:

• yours agent-pane-permission-receipt.test.ts answered live, the card goes and its receipt shows in the turn: failed (job)
• yours agent-pane-permission-receipt.test.ts switching either harness to full access settles its live card as an approval on its call: failed (job)
• yours agent-pane-permission-receipt.test.ts a resync that brings the answer keeps one approval and the reply that streams after it whole: failed (job)

Matched log lines

web / react-apps-base-check (1): (fail) answered live, the card goes and its receipt shows in the turn [6527.60ms]

Not re-run automatically: web / react-apps-base-check (1), web / react-apps-check are not machine failures.

Written by scripts/ci/classify_failures.py (ci-failure-attribution.yml); signatures are its SIGNATURES table. A machine verdict is the runner's fault, not this PR's; yours means the failing file is one this PR changes, also red on main that main's latest full suite fails the same way, seen on other PRs that it failed on another pull request's run lately.

red: web / Web status; a job it gathers is red on this change (its line here); do not merge until green; see lane-rules
red: web / react-apps-base-check (1); NEW webview test reds: test/agent-pane-permission-receipt.test.ts > switching either harness to full access settles its live card as an approval on its call; test/agent-pane-permission-receipt.test.ts > answered live, the card goes and its receipt shows in the turn; test/agent-pane-permission-receipt.test.ts > a resync that brings the answer keeps one approval and the reply that streams after it whole; do not merge until green; see lane-rules
red: web / react-apps-check; a job it gathers is red on this change (its line here); do not merge until green; see lane-rules

Shipped in:

• cmux NEXT nightly 1.0.0-nightly.4160614853601 (0e8eb9bf99)
• cmux NEXT nightly 1.0.0-nightly.4161078434801 (732ad010ea)
• cmux NEXT nightly 1.0.0-nightly.4161217392901 (1a7e2c1865)