🤖 feat: back up Mux settings to a git repository

.github/workflows/pr.yml

@@ -214,7 +214,13 @@ jobs:
             # order-dependent on origin/main; only reliable in its own process.
             src/browser/features/RightSidebar/Memory/MemoryTab.test.tsx
           )
-          bun test --max-concurrency=1 "${isolated_unit_tests[@]}"
+          # One process per file rather than one shared isolated process. Sharing it still
+          # segfaults Bun on the runner (exit 132, "Bun has crashed", zero failing assertions)
+          # while leaving the file transition as the only suspect, and these files are already
+          # here because they do not survive sharing a process.
+          for isolated_unit_test in "${isolated_unit_tests[@]}"; do
+            bun test --max-concurrency=1 "$isolated_unit_test"
+          done
 
           mapfile -d '' unit_files < <(
             find src -type f \( -name '*.test.ts' -o -name '*.test.tsx' \) \

scripts/check_codex_comments.sh

@@ -80,13 +80,16 @@ compute_codex_sets_from_arrays() {
   local comments_json="$1"
   local threads_json="$2"
 
-  REGULAR_COMMENTS=$(jq -cn --argjson comments "$comments_json" --arg bot "$BOT_LOGIN_GRAPHQL" '[
-    $comments[]
+  # JSON goes through stdin, never argv: a long review history exceeds Linux's
+  # per-argument limit (MAX_ARG_STRLEN, ~128KB) and made --argjson fail with
+  # "Argument list too long". printf is a shell builtin, so it has no such limit.
+  REGULAR_COMMENTS=$(printf '%s' "$comments_json" | jq -c --arg bot "$BOT_LOGIN_GRAPHQL" '[
+    .[]
     | select(.author.login == $bot and .isMinimized == false and (.body | test("Didn.t find any major issues|usage limits have been reached|create a Codex account") | not))
   ]')
 
-  UNRESOLVED_THREADS=$(jq -cn --argjson threads "$threads_json" --arg bot "$BOT_LOGIN_GRAPHQL" '[
-    $threads[]
+  UNRESOLVED_THREADS=$(printf '%s' "$threads_json" | jq -c --arg bot "$BOT_LOGIN_GRAPHQL" '[
+    .[]
     | select(.isResolved == false and .comments.nodes[0].author.login == $bot)
   ]')
 }
@@ -189,7 +192,8 @@ fetch_all_comments_via_api() {
     fi
 
     page_comments=$(echo "$page_data" | jq -c '.data.repository.pullRequest.comments.nodes // []')
-    all_comments=$(jq -cn --argjson existing "$all_comments" --argjson page "$page_comments" '$existing + $page')
+    # Accumulated pages outgrow MAX_ARG_STRLEN, so concatenate via stdin rather than --argjson.
+    all_comments=$(printf '%s\n%s' "$all_comments" "$page_comments" | jq -cs '.[0] + .[1]')
 
     has_next=$(echo "$page_data" | jq -r '.data.repository.pullRequest.comments.pageInfo.hasNextPage')
     end_cursor=$(echo "$page_data" | jq -r '.data.repository.pullRequest.comments.pageInfo.endCursor // empty')
@@ -262,7 +266,8 @@ fetch_all_threads_via_api() {
     fi
 
     page_threads=$(echo "$page_data" | jq -c '.data.repository.pullRequest.reviewThreads.nodes // []')
-    all_threads=$(jq -cn --argjson existing "$all_threads" --argjson page "$page_threads" '$existing + $page')
+    # Same MAX_ARG_STRLEN concern as the comments accumulator above.
+    all_threads=$(printf '%s\n%s' "$all_threads" "$page_threads" | jq -cs '.[0] + .[1]')
 
     has_next=$(echo "$page_data" | jq -r '.data.repository.pullRequest.reviewThreads.pageInfo.hasNextPage')
     end_cursor=$(echo "$page_data" | jq -r '.data.repository.pullRequest.reviewThreads.pageInfo.endCursor // empty')

scripts/wait_pr_codex.sh

@@ -263,7 +263,8 @@ FETCH_ALL_THUMBS_UP_REACTIONS() {
     fi
 
     page_nodes=$(echo "$reactions_page" | jq -c '.data.repository.pullRequest.reactions.nodes // []')
-    all_reactions=$(jq -cn --argjson existing "$all_reactions" --argjson page "$page_nodes" '$existing + $page')
+    # Via stdin: accumulated pages can exceed Linux's per-argument limit (MAX_ARG_STRLEN).
+    all_reactions=$(printf '%s\n%s' "$all_reactions" "$page_nodes" | jq -cs '.[0] + .[1]')
 
     has_next=$(echo "$reactions_page" | jq -r '.data.repository.pullRequest.reactions.pageInfo.hasNextPage')
     end_cursor=$(echo "$reactions_page" | jq -r '.data.repository.pullRequest.reactions.pageInfo.endCursor // empty')

src/browser/features/Settings/Sections/BackupSection.stories.tsx

@@ -0,0 +1,87 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { userEvent, within } from "@storybook/test";
+import { lightweightMeta } from "@/browser/stories/meta.js";
+import { createMockORPCClient } from "@/browser/stories/mocks/orpc";
+import { BackupSection } from "./BackupSection.js";
+import { SettingsSectionStory } from "./settingsStoryUtils.js";
+
+const meta: Meta = {
+  ...lightweightMeta,
+  title: "Settings/Sections/BackupSection",
+  component: BackupSection,
+};
+
+export default meta;
+type Story = StoryObj<typeof meta>;
+
+function renderBackupSection() {
+  return (
+    <SettingsSectionStory
+      setup={() =>
+        createMockORPCClient({
+          backupSettings: {
+            repoUrl: "git@github.com:example/dotfiles.git",
+            branch: "main",
+            path: "mux/",
+          },
+          backupValidation: {
+            reachable: true,
+            empty: false,
+            credential: "gh",
+          },
+          backupPreview: {
+            pushChanges: [
+              { status: "M", path: "mux/preferences.json" },
+              { status: "A", path: "mux/memory/global/preferences.md" },
+            ],
+            restoreChanges: [
+              { status: "M", path: "preferences.json" },
+              { status: "A", path: "skills/release/SKILL.md" },
+            ],
+            localOnlyFiles: ["agents/local-only.md"],
+            redactions: ["mcp.jsonc: github.headers.Authorization"],
+            commandApprovals: [
+              {
+                path: "servers.notes.command",
+                command: "npx -y @modelcontextprotocol/server-filesystem /home/dev/notes",
+                token: "8d2e4787fcc88a36cbd9067997213f1a791ec3999af6e9bf2259f6f3a1a0337e",
+              },
+            ],
+          },
+        })
+      }
+    >
+      <div className="bg-background min-h-screen p-4 sm:p-6">
+        <BackupSection />
+      </div>
+    </SettingsSectionStory>
+  );
+}
+
+export const Configured: Story = {
+  render: renderBackupSection,
+  play: async ({ canvasElement }) => {
+    const canvas = within(canvasElement);
+    await canvas.findByText("Settings backup");
+    await userEvent.click(canvas.getByRole("button", { name: "Validate" }));
+    await canvas.findByText(/Credential used: GitHub CLI/i);
+    await userEvent.click(canvas.getByRole("button", { name: "Preview changes" }));
+    await canvas.findByText("Backup to repository");
+    await canvas.findByText("Restore to this device");
+    await canvas.findByText(/github\.headers\.Authorization/i);
+    await canvas.findByText("agents/local-only.md");
+    await canvas.findByRole("checkbox", { name: "Approve MCP command changes" });
+  },
+};
+
+export const Phone: Story = {
+  globals: {
+    viewport: { value: "mobile2", isRotated: false },
+  },
+  parameters: {
+    pixel: {
+      matrix: { themes: ["dark", "light"], viewports: ["phone"] },
+    },
+  },
+  render: renderBackupSection,
+};