Make iOS workspace groups and reconnect dogfood-ready

[azooz2003-bit]

Summary

• Restore complete workspace and group action menus, rename alerts, create-in-group, group creation, destructive confirmations, and synchronized custom icons.
• Keep saved Mac routes reconnecting across wake, broker-token refresh, app activation, and tagged dogfood setup.
• Authorize Mac-scoped workspace mutations by the signed-in Stack account after short-lived attach tickets expire, while current workspace-scoped tickets still narrow access.
• Record workspace mutation send, block, failure, and acceptance diagnostics on iOS.

Verification

• Red checkpoint: https://github.com/manaflow-ai/cmux/actions/runs/30673477596
• Green host authorization suite: https://github.com/manaflow-ai/cmux/actions/runs/30673933832
• Expired-ticket client rename test passed inside: https://github.com/manaflow-ai/cmux/actions/runs/30675152576
• Rename alert UI executed 1 test with 0 failures inside the same iOS run.
• Tagged live mobile data-plane proof, with no attach token: yu to grpact route check to restored yu.
• Tagged Mac build: grpact. Physical iPhone install is in progress.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

---

Summary by cubic

Restores full iOS workspace/group actions with a compact rename alert, group‑scoped menus, synced SF Symbol icons, and a Mail‑style status line for reconnects. Makes reconnects and auth dogfood‑ready with event‑driven readiness on a monotonic clock, exactly‑once 401 recovery, cause‑aware backoff, deterministic CLI timeouts, and a fallback from failed injected‑attach startup to saved‑Mac reconnect.

• New Features

  • Workspace groups: Row actions restored (rename alert, create‑in‑group, ungroup, delete) with atomic destructive confirmations; menus stay group‑scoped while still offering workspace actions; native inputs/state refresh and swipe completion preserved; Mac group icons flow end‑to‑end (icon_symbol) into headers/previews; compact UIKit rename alert for rows/menus.
  • Authorization/UI/Tooling/CLI: Account‑authorized mutations can omit attach‑ticket context via MobileCoreRPCAttachTicketPolicy (used for create‑in‑group when the host advertises account‑auth); Mac‑wide actions stay discoverable after ticket expiry; Workspace Detail Reconnect is hidden during reauth; status line replaces toasts/overlay; host exposes debug.mobile.transport.disconnect; crash reporter prepares locale before Sentry start; dogfood launch accepts CMUX_DOGFOOD_CLIENT_ID; CLI events use a monotonic --timeout, add snapshot‑only mode, buffered reads, per‑stream deadlines, and deterministic reconnect waits.

• Reliability

  • Readiness/recovery: Connection health waits for mobile.events.subscribe ACK on a process‑local monotonic clock and ignores stale acks; route health resets on network change; stale transports drain before redial; endpoint consumers wait through unexpected closures; recovery target is excluded from secondary aggregation; cancelled dials don’t count as failures; gated and cleanup‑blocked attempts surface connectAttemptGated/routeCleanupBlocked with clear copy across UI/settings.
  • Broker/auth/discovery: Exactly‑once 401 recovery with account‑pinned snapshots; transient token misses classify as connectivity; 401/403 preserve verified offline policy and retry on a 2–120s ladder; registration/sync snapshots carry completeness proofs (discovery_complete/snapshot_complete) with paginated fallback; cached host binding publication added (with path hints); shared relay‑policy backoff is cause‑aware.
  • Diagnostics: Close attribution recognizes display forms (“timed out”, “closed”, peer‑initiated); exported mutation failures redact raw host strings.

^{Written for commit 9204a9b. Summary will update on new commits.}

Summary by CodeRabbit

• New Features

  • Added CLI event-stream timeouts, snapshot mode, and chunked event handling.
  • Workspace groups now support configurable icons, creation, renaming, ungrouping, and deletion.
  • Added clearer connection status messaging, reconnect controls, readiness monitoring, and event-stream health checks.
  • Added account-authorized workspace mutations and improved offline retry behavior.

• Bug Fixes

  • Improved authentication transitions, credential recovery, session cleanup, and stale-connection protection.
  • Refined diagnostics for cancellations, blocked routes, and unavailable paths.
  • Improved connection recovery, event subscription repair, and relay rate-limit handling.
  • Improved attach failure handling and prevented stale connection results from affecting app state.

[cursor]

Bugbot is paused — on-demand spend limit reached

Bugbot uses usage-based billing for this team and has hit its on-demand spend limit.

A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue.

[cursor]

Bugbot is paused — on-demand spend limit reached

Bugbot uses usage-based billing for this team and has hit its on-demand spend limit.

A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue.

[cursor]

Bugbot is paused — on-demand spend limit reached

Bugbot uses usage-based billing for this team and has hit its on-demand spend limit.

A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue.

[cursor]

Bugbot is paused — on-demand spend limit reached

Bugbot uses usage-based billing for this team and has hit its on-demand spend limit.

A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue.