[teamleaderleo]

Follow-up to #32470. Its one push run (41491005815) put CLOUD_FREESTYLE_API_KEY on cmux-platform-production and skipped JWT_PRIVATE_JWK and CLOUD_LINK_SIGNING_KEYS, which cmux-next-production holds no copy of. This drops the push trigger so nothing runs it again by itself; it stays dispatchable for when those production copies are placed in the environment.

It also notes the #32470 review follow-up (gpt-6.1-sol: the list-then-put check is not atomic) in the file's header: don't dispatch it while anyone else is putting these secrets. With no push trigger it only runs by hand, which covers that follow-up.

Agent session: agent session

🤖 Generated with Claude Code

---

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}

---

Summary by cubic

Makes platform-prod-secrets.yml dispatch-only so it no longer runs on push. The single push run from #32470 put CLOUD_FREESTYLE_API_KEY on cmux-platform-production and skipped JWT_PRIVATE_JWK and CLOUD_LINK_SIGNING_KEYS, which cmux-next-production holds no copy of. It stays runnable by hand once those production copies are placed in the environment. The header now also warns that the list-then-put check is not atomic, so avoid dispatching it while anyone else is setting these secrets.

^{Written for commit 77b7a33. Summary will update on new commits.}

[github-actions]

cmux status _{(one comment, edited in place; each line is updated by the job that owns it)}

Review 77b7a33: HQ feed card · gallery before/after runs · checks

App of this head (app.zip, kept 1 day)

gh workflow run reload-build.yml -R manaflow-ai/cmux --ref feat-cmux-next -f tag=pr32479 -f ref=ci/platform-prod-secrets-dispatch-only -f platform=macos -f backend_mode=local

Shipped in:

• cmux NEXT nightly 1.0.0-nightly.4149439773601 (6ad4953200)
• cmux NEXT nightly 1.0.0-nightly.4149622662301 (72e65a53e0)
• cmux NEXT nightly 1.0.0-nightly.4149719270001 (ccb777fdde)
• cmux NEXT nightly 1.0.0-nightly.4149824422001 (f6b340f97a)
• cmux NEXT nightly 1.0.0-nightly.4150011005501 (fbf9260854)
• cmux NEXT nightly 1.0.0-nightly.4150109776501 (ae802cfe75)
• cmux NEXT nightly 1.0.0-nightly.4150231832001 (9b07402606)

[teamleaderleo]

Review (subagent claude-sonnet-5-5): SHIP at 77b7a33

[teamleaderleo]

Owned by an agent session · session