Abdulaziz AlbaharandClaude Fable 5 7589f52b81 Isolate every iOS build by bundle identity (#9183) ...

* test: require iOS build isolation

* fix: isolate iOS builds by bundle identity

* fix: compile namespaced Mac backup publisher

* chore: remove shared app group example

* test: require isolated iOS OAuth cookies

* fix: isolate iOS OAuth browser cookies

* fix: close autoreview namespace gaps

* fix: complete iOS namespace isolation

* refactor: satisfy namespace isolation policy

* fix: close namespace migration review gaps

* fix: preserve isolated Iroh and OAuth admission

* test: cover isolated iOS rollout paths

* fix: authenticate isolated iOS rollout paths

* test: cover authenticated management recovery

* fix: authorize isolated management operations

* test: cover cached proof and Mac forget

* fix: preserve proof across isolated lifecycle paths

* fix: satisfy Iroh API package policy

* test: cover autoreview isolation regressions

* fix: close isolated rollout review gaps

* test: cover target and trust boundary regressions

* fix: enforce isolated pairing boundaries

* test: cover legacy tombstone migration

* fix: preserve tombstones across backup migration

* test: cover migration precedence and discovery privacy

* fix: enforce migration and discovery precedence

* test: cover push targeting and migration bounds

* fix: close push and migration isolation gaps

* test: prevent entitlement dumps on signing failures

* fix: redact signed entitlements on upload failure

* fix: make backup scope provider sendable

* fix: return localized pairing target names

* fix: drain legacy namespaced revocations

* test: track push token policy limits

* test: cover post-revocation fallback paths

* fix: refresh authority after binding revocations

* test: cover paired-Mac migration boundaries

* fix: bound and scope legacy paired-Mac migration

* fix: capture migration account without async coalescing

* fix: keep legacy migration and keychain deletion safe

* chore: refresh pull request head

* fix: bound legacy backup reconciliation

* test: cover conditional paired Mac migration

* fix: make paired Mac migration conditional

* test: cover pairing migration recovery races

* fix: serialize identity persistence recovery

* test: cover migration team and pairing lanes

* fix: pin migration team and pairing channel

* test: await development identity storage

* test: cover pairing emission and keychain scope

* fix: fail closed on app and keychain scope

* test: cover bundle-derived Mac namespaces

* fix: namespace Mac bindings by bundle

* test: cover legacy sign-out binding namespaces

* fix: revoke bindings in their stored namespace

* test: expect APNs bundle in send outcome

* test: cover untagged debug pairing identity

* fix: preserve untagged debug pairing identity

* test: cover rate-limited pending revocations

* fix: drain revocations after rate-limited registration

* test: cover safe pending revocation reconciliation

* fix: preserve active binding during revocation recovery

* fix: preserve broker proof through client wrappers

* test: retain authorization during rate-limited recovery

* fix: preserve retained binding during rate-limit recovery

* test: cover stale binding cleanup authorization

* fix: authorize stale binding cleanup

* docs: document binding authorization helpers

* test: type stale cleanup response

* fix(macos): restore compilable cleanupSurfaceState call

https://github.com/manaflow-ai/cmux/pull/10072 changed this call site to
pass workspaceID: but never landed that overload, so the macOS target
has not compiled since it merged (CI is dispatch-only and did not catch
it). Restore the existing signature; the native-mobile-surface
preservation intent needs to re-land together with its implementation.

Co-Authored-By: Claude Fable 5 <[email protected]>

* fix: wire mobile surface artifact integration

* fix: require explicit trust broker namespace

* fix: require explicit management revocation routes

* fix: reject ambiguous iOS bundle namespaces

* fix: bound identity waits and scope legacy auth

* fix: cancel queued identity operations

* fix: modernize browser change handlers

* fix: scope legacy token deletion

---------

Co-authored-by: Claude Fable 5 <[email protected]>

2026-08-18 13:37:30 -07:00

..

apple-developer-id-certs

ci: vendor Apple Developer ID intermediates (fix flaky nightly signing) (#6404)

2026-06-18 16:39:23 -07:00

ci

ci(iroh): track expanded compatibility suite

2026-08-13 04:54:47 -07:00

dev-profiles

Turnkey dev builds P3: /dev-cli environment profiles (composer/notif/browser/groups/...) (#5585)

2026-06-07 16:59:37 -07:00

git-hooks

Pin Xcode 26 (objectVersion 60) and add pbxproj normalizer + CI guard (#4836)

2026-05-27 08:50:56 -07:00

lib

Isolate every iOS build by bundle identity (#9183)

2026-08-18 13:37:30 -07:00

mobile-latency-trace

Fix per-keystroke render-grid replay loop on iOS, instrument sync latency (#9146)

2026-07-30 00:59:45 +00:00

mobile-stability-soak

Isolate every iOS build by bundle identity (#9183)

2026-08-18 13:37:30 -07:00

tests

test(ios): cover analyzer route variants

2026-08-12 23:44:31 -07:00

analyze-ios-network-log.py

fix(ios): normalize route analyzer evidence

2026-08-12 23:44:48 -07:00

bench-window-visibility.swift

CI: bound activation scrollback fixture (#6241)

2026-06-16 11:47:45 -07:00

benchmark-diff-viewer.sh

Move diff viewer backend boundary to a Rust sidecar (#7804)

2026-07-15 22:00:34 -07:00

blacksmith-bounded-command.sh

ci: warm cmux-tui Testboxes from a main-controlled broker

2026-08-17 17:20:31 -07:00

blacksmith-cmux-tui-testbox-stage.sh

fix: pin before the stages, and prove a binary came out

2026-08-17 20:57:34 -07:00

blacksmith-testbox-cleanup.sh

fix: repair the five defects a second trial agent hit

2026-08-17 20:20:13 -07:00

blacksmith-testbox-demo.sh

fix: the demo script leaked the runner it told you to worry about

2026-08-17 23:24:28 -07:00

blacksmith-testbox-keepalive.sh

ci: warm cmux-tui Testboxes from a main-controlled broker

2026-08-17 17:20:31 -07:00

build_remote_daemon_release_assets.sh

Accelerate nightly application builds (#8036)

2026-07-13 21:04:17 -07:00

build-agent-session-web.sh

Add React and Solid agent session panels (#4429)

2026-06-06 11:02:06 -07:00

build-command-palette-nucleo-ffi.sh

Fix nightly startup crash

2026-05-18 17:40:26 -07:00

build-diff-sidecar.sh

Move diff viewer backend boundary to a Rust sidecar (#7804)

2026-07-15 22:00:34 -07:00

build-ghostty-cli-helper.sh

Reclaim hidden Ghostty renderer memory (#8998)

2026-07-29 19:23:22 -07:00

build-sign-upload.sh

Disable Ghostty native Sentry in cmux builds

2026-08-02 22:01:52 -07:00

build-webviews-app.sh

Add React and Solid agent session panels (#4429)

2026-06-06 11:02:06 -07:00

bump-version.sh

Rename GhosttyTabs project to cmux (#4205)

2026-05-15 19:53:26 -07:00

capture-memory.sh

Harden memory diagnostics for long-session surface leaks (#6267)

2026-06-16 16:17:07 -07:00

check-cli-stdio-safety.sh

Reduce Sentry CLI broken-pipe crashes and hangs (#6254)

2026-06-18 16:36:49 -07:00

check-package-resolved-policy.py

Fix Package.resolved policy false positive on leaf local-path packages (#9470)

2026-08-03 15:38:39 -07:00

check-pbxproj.sh

Pin Xcode 26 (objectVersion 60) and add pbxproj normalizer + CI guard (#4836)

2026-05-27 08:50:56 -07:00

check-sidebar-lazy-layout.py

Fix sidebar scroll layout livelock (#8211)

2026-07-15 20:13:11 -07:00

check-test-determinism.py

ci: add test-determinism gate (ban flaky test primitives going forward) (#6399)

2026-06-18 13:53:25 -07:00

check-webviews-react-compiler.mjs

Split webviews bundle by surface (code splitting) (#5613)

2026-06-07 21:48:57 -07:00

check-workspace-package-groups.py

Organize SPM packages into Packages/{Shared,iOS,macOS}/ so the folder tree mirrors the workspace groups (#6278)

2026-06-16 18:13:17 -07:00

claude-launch-environment-policy.json

Fix Claude bridge branch and resume failures (#7882) (#7900)

2026-07-11 16:55:29 -07:00

cleanup-dev-builds.sh

Add scripts/cleanup-dev-builds.sh for safely reclaiming tagged DerivedData (#4837)

2026-05-27 08:51:01 -07:00

cmux-chat-debug.py

agent-session: reliable tracking system + Codex picker GUI + debug trace (#6798)

2026-06-27 02:30:09 -05:00

cmux-debug-cli.sh

Add tagged debug CLI helper (#4092)

2026-05-13 03:23:27 -07:00

cmux-spin-watchdog.sh

Remote tmux mirrors: exact feed-forward sizing, verified pane geometry, faithful live pane headers, active-pane indicator, and drag-stable rendering (#7315)

2026-07-08 19:36:38 -07:00

cmuxterm-dev.env.example

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

compress-markdown-viewer-assets.sh

Trim release bundle size (#7589)

2026-07-11 04:17:32 -07:00

create-virtual-display.m

Fix sandbox file write issue: use start-delay-ms for display helper

2026-03-23 04:16:57 -07:00

cycle-ios-themes.sh

iOS: match terminal themes across chrome and live reloads (#7919)

2026-07-15 18:40:00 -07:00

derive_sparkle_public_key.swift

…

dev-setup.sh

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

download-prebuilt-ghosttykit.sh

Disable Ghostty native Sentry in cmux builds

2026-08-02 22:01:52 -07:00

download-with-retry.sh

Add Vault Pi agent restore support (#3582)

2026-05-07 02:45:07 -07:00

ensure-ghosttykit.sh

Disable Ghostty native Sentry in cmux builds

2026-08-02 22:01:52 -07:00

ensure-sentry-cli.sh

ci: import Developer ID intermediates for signing (#6263)

2026-06-16 20:02:42 -07:00

frame-probe-tui.py

fix: harden mobile sync review issues

2026-05-16 22:54:32 -07:00

generate_dark_icon.py

Add dark mode app icon for macOS Sequoia (#702)

2026-03-01 03:57:09 -08:00

generate_nightly_icon.py

Revert "Refactor app icon appearance handling (#2876)" (#2883)

2026-04-14 00:28:39 -07:00

generate_remote_daemon_release_manifest.py

Accelerate nightly application builds (#8036)

2026-07-13 21:04:17 -07:00

generate-claude-launch-environment-policy.py

Fix Claude bridge branch and resume failures (#7882) (#7900)

2026-07-11 16:55:29 -07:00

generate-diff-sidecar-types.sh

Move diff viewer backend boundary to a Rust sidecar (#7804)

2026-07-15 22:00:34 -07:00

ghostty-zig-version.sh

Reclaim hidden Ghostty renderer memory (#8998)

2026-07-29 19:23:22 -07:00

ghosttykit-checksums.txt

Cache and gate Ghostty macOS unified logging (#9368)

2026-08-11 02:09:54 -07:00

import-apple-developer-id-intermediates.sh

ci: vendor Apple Developer ID intermediates (fix flaky nightly signing) (#6404)

2026-06-18 16:39:23 -07:00

install-git-hooks.sh

Pin Xcode 26 (objectVersion 60) and add pbxproj normalizer + CI guard (#4836)

2026-05-27 08:50:56 -07:00

install-iphone-queue-agent.sh

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

install-prebuilt-ghostty-cli-helper.sh

Build release app with macOS 26 SDK (#5042)

2026-06-01 16:28:25 -07:00

install-rust-ci.sh

Move diff viewer backend boundary to a Rust sidecar (#7804)

2026-07-15 22:00:34 -07:00

install-zig-ci.sh

Reclaim hidden Ghostty renderer memory (#8998)

2026-07-29 19:23:22 -07:00

ios-device-process.sh

Require connected iOS dogfood launches (#9252)

2026-08-03 19:32:33 -05:00

ios-sim-install.sh

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

iphone-install-queue.sh

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

kitty-image-demo.sh

Add Kitty graphics protocol verification script (#3225)

2026-04-28 16:26:25 -07:00

launch-bundle-app.swift

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

launch-tagged-automation.sh

Add RTL terminal shaping support (#7019)

2026-07-01 16:34:10 -07:00

lint_auxiliary_window_close_shortcuts.py

Revert "Settings > Browser > Extensions: import, add-unpacked, and live enabl…" (#8306)

2026-07-16 19:38:05 -07:00

lint-feature-flags.py

lint-feature-flags: repo-relative registry paths, grep untracked files

2026-07-01 19:56:17 -07:00

lint-ios-package-conventions-baseline.txt

Fix end-to-end push notification reliability (#9319)

2026-08-05 15:41:33 -07:00

lint-ios-package-conventions.sh

Fix end-to-end push notification reliability (#9319)

2026-08-05 15:41:33 -07:00

lint-namespace-types-baseline.txt

Require connected iOS dogfood launches (#9252)

2026-08-03 19:32:33 -05:00

lint-pbxproj-test-wiring.sh

feat: add terminal textbox input (#4333)

2026-05-23 05:42:23 -07:00

lint-stored-dispatch-work-items.py

fix: close deferred handle audit gaps

2026-08-10 20:21:19 -07:00

mobile-attach-qr-server.sh

Recover timed-out Iroh lanes and stale iOS sessions (#8286)

2026-07-17 20:11:44 -05:00

mobile-attach-qr.sh

Recover timed-out Iroh lanes and stale iOS sessions (#8286)

2026-07-17 20:11:44 -05:00

mobile-dev-launch.sh

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

mobile-snapshot-diff.py

fix: clean mobile snapshot diff helper

2026-05-28 09:17:33 -07:00

mobile-stability-soak.sh

Rename iOS target cmuxMobile to cmux

2026-05-22 16:59:08 -07:00

mobile-terminal-cursor-snapshot-check.sh

Tighten mobile terminal safe area and viewport fit

2026-05-13 03:30:00 -07:00

normalize-pbxproj.py

Pin Xcode 26 (objectVersion 60) and add pbxproj normalizer + CI guard (#4836)

2026-05-27 08:50:56 -07:00

notify_probe.sh

…

open-diff-viewer-stress-samples.sh

Refactor diff viewer onto Pierre React primitives (#5308)

2026-06-04 18:11:49 -07:00

perf-activation-session.py

Flaky-test follow-up: review fixes + second-pass team sweep (#6452)

2026-06-20 15:52:10 -07:00

probe-pure-prompt-duplication.py

Prefer CMUX_SOCKET_PATH in socket tooling (#3364)

2026-04-30 06:30:06 -07:00

prune_nightly_release_assets.py

ci: handle empty gh api delete responses

2026-06-16 23:13:31 -07:00

release_asset_guard.js

Reapply "Merge pull request #239 from manaflow-ai/issue-151-ssh-remote-port-proxying"

2026-03-12 15:54:26 -07:00

release_asset_guard.test.js

Reapply "Merge pull request #239 from manaflow-ai/issue-151-ssh-remote-port-proxying"

2026-03-12 15:54:26 -07:00

release-pretag-guard.sh

ci: only enforce Sparkle monotonic check on release (#2651)

2026-04-06 16:25:38 -07:00

reload2.sh

scripts: require --tag for debug reload

2026-02-14 03:13:10 -08:00

reload-extension.sh

Fix tagged sidebar extension discovery (#5267)

2026-06-02 22:46:34 -05:00

reload.sh

Merge pull request #10211 from manaflow-ai/issue-10204-reload-build-perf

2026-08-17 16:39:09 -07:00

reloadp.sh

Rename GhosttyTabs project to cmux (#4205)

2026-05-15 19:53:26 -07:00

reloads.sh

Resolve account home via getpwuid in reload scripts

2026-06-02 16:08:20 -07:00

remote-tmux-e2e-ssh-shim-check.sh

Remote tmux mirrors: exact feed-forward sizing, verified pane geometry, faithful live pane headers, active-pane indicator, and drag-stable rendering (#7315)

2026-07-08 19:36:38 -07:00

remote-tmux-e2e-ssh-shim.sh

Remote tmux mirrors: exact feed-forward sizing, verified pane geometry, faithful live pane headers, active-pane indicator, and drag-stable rendering (#7315)

2026-07-08 19:36:38 -07:00

remote-tmux-fuzz-host.sh

Mirrored tmux panes render exactly their assigned spans, sized by a single transaction (#7938)

2026-07-13 16:30:32 +00:00

remote-tmux-fuzz-lock.sh

Mirrored tmux panes render exactly their assigned spans, sized by a single transaction (#7938)

2026-07-13 16:30:32 +00:00

remote-tmux-fuzz-marathon.sh

Make the sizing fuzz judges say who is wrong and why (#8325)

2026-07-17 12:21:31 -07:00

remote-tmux-layout-repro.sh

Mirrored tmux panes render exactly their assigned spans, sized by a single transaction (#7938)

2026-07-13 16:30:32 +00:00

remote-tmux-live-fuzz.sh

Make the sizing fuzz judges say who is wrong and why (#8325)

2026-07-17 12:21:31 -07:00

remote-tmux-shape-zoo.sh

Remote tmux mirrors: exact feed-forward sizing, verified pane geometry, faithful live pane headers, active-pane indicator, and drag-stable rendering (#7315)

2026-07-08 19:36:38 -07:00

remote-tmux-width-probe.sh

Remote tmux mirrors: exact feed-forward sizing, verified pane geometry, faithful live pane headers, active-pane indicator, and drag-stable rendering (#7315)

2026-07-08 19:36:38 -07:00

remove-sparkle-sandbox-xpc-services.sh

Fix Claude hook transcript scaling and Sparkle update packaging (#5202)

2026-06-02 05:14:12 -07:00

retired-feature-flags.txt

Route Get Pro directly to Stripe checkout (#8813)

2026-07-23 22:18:36 -07:00

run-diff-sidecar-cargo.sh

Move diff viewer backend boundary to a Rust sidecar (#7804)

2026-07-15 22:00:34 -07:00

run-e2e.sh

Stop creating dev-artifact issues for E2E runs (#9832)

2026-08-07 18:01:34 -07:00

run-iroh-direct-transport-gate.sh

ci(iroh): make direct-only release gate deterministic (#8489)

2026-07-19 11:56:01 -05:00

run-iroh-private-path-transport-gate.sh

Gate provider-neutral private Iroh paths (#8492)

2026-07-19 13:13:05 -05:00

run-iroh-release-gate.sh

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

run-tests-v1.sh

Rename GhosttyTabs project to cmux (#4205)

2026-05-15 19:53:26 -07:00

run-tests-v2.sh

Rename GhosttyTabs project to cmux (#4205)

2026-05-15 19:53:26 -07:00

select-ci-xcode.sh

Stage required macOS CI behind linux preflight (#7583)

2026-07-08 03:24:51 -05:00

select-nightly-xcodes.sh

Fix nightly Xcode selection on single-Xcode runners (#5694)

2026-06-09 03:45:08 -07:00

setup-team-dev.sh

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

setup.sh

Reclaim hidden Ghostty renderer memory (#8998)

2026-07-29 19:23:22 -07:00

sign-cmux-bundle.sh

Move diff viewer backend boundary to a Rust sidecar (#7804)

2026-07-15 22:00:34 -07:00

smoke-launch-macos-app.sh

ci: import Developer ID intermediates for signing (#6263)

2026-06-16 20:02:42 -07:00

smoke-test-ci.sh

Add macOS compatibility CI: unit tests + smoke test on macos-14/15 (#769)

2026-03-02 18:50:27 -08:00

sparkle_generate_appcast.sh

Fix custom nightly appcast output handling

2026-03-08 03:35:41 -07:00

sparkle_generate_keys.sh

Release v1.23.0 (#31)

2026-02-09 15:30:43 -08:00

stress-cli-socket-api.py

Add shell-free cmux restore verb (#9265)

2026-07-31 19:34:35 -07:00

strip-release-bundle.sh

Move diff viewer backend boundary to a Rust sidecar (#7804)

2026-07-15 22:00:34 -07:00

swift_warning_budget.py

Add Swift warning budget CI guard (#3220)

2026-04-28 03:21:07 -07:00

terminate-bundle-app.swift

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

test-command-palette-nucleo-ffi.sh

Rename GhosttyTabs project to cmux (#4205)

2026-05-15 19:53:26 -07:00

test-unit.sh

Rename GhosttyTabs project to cmux (#4205)

2026-05-15 19:53:26 -07:00

tui-terminal-bounds-check.sh

fix: address mobile PR review issues

2026-05-17 17:01:28 -07:00

tui-terminal-cursor-check.sh

fix: address mobile PR review issues

2026-05-17 17:01:28 -07:00

validate-xcframework-archive.py

Disable Ghostty native Sentry in cmux builds

2026-08-02 22:01:52 -07:00

verify-app-bundle-channel-metadata.sh

Fix NIGHTLY update bundle icon metadata (#4353)

2026-05-19 03:34:06 -07:00

verify-app-bundle-licenses.sh

Bundle cmux GPL and corresponding source directions (#8212)

2026-07-16 02:28:54 -07:00

verify-cmd-click-file-previews.sh

Open supported files in cmux on cmd-click (#4041)

2026-05-13 01:42:49 -07:00

verify-cmux-tui-hosted.sh

Watch hosted TUI verification completion (#9942)

2026-08-11 02:50:05 -07:00

verify-command-palette-nucleo-ffi-artifact.sh

Fix nightly startup crash

2026-05-18 17:40:26 -07:00

verify-diff-sidecar-artifact.sh

Move diff viewer backend boundary to a Rust sidecar (#7804)

2026-07-15 22:00:34 -07:00

verify-iphone-auth.sh

fix(ios): pin dogfood auth identity end to end (#10185)

2026-08-15 17:02:30 -07:00

verify-main-thread-ca-transactions.sh

Prevent dev builds from stealing stable CLI sockets

2026-05-22 20:24:34 -07:00

write-sidebar-extension-point.sh

Fix tagged sidebar extension discovery (#5267)

2026-06-02 22:46:34 -05:00