[teamleaderleo]

The Mac app reads a remote off switch before it copies a person's own Claude login to their own Cloud machine (Leo, 2026-11-02: "A remote off switch, so if Anthropic objects we turn it off for everyone within minutes and fall back to the one-click sign-in."). The route, GET /v1/cloud/harness-login-copy -> {enabled, ttlSeconds}, lives in the platform Worker (manaflow-ai/cmux-platform#587). Clients enter at cmux-api, whose forwarder sends only the platform paths it lists, so this adds the path to CLOUD_PATHS in platform-forward.ts and to the forwarder test's forwarded requests.

With PLATFORM_SURFACES unset (local) nothing changes; with cloud on (development, staging, production) the path goes to the platform like the other machine routes.

Test

vitest run test/platform-forward.test.ts on the fleet: 10 passed.

Agent session: agent session

🤖 Generated with Claude Code

---

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}

---

Summary by cubic

Forwards the Cloud login copy switch to the platform so the Mac app can read the remote off switch before copying a user's own Claude login to their Cloud machine.

• Adds /v1/cloud/harness-login-copy to the forwarder's CLOUD_PATHS and to the forwarder test's forwarded requests.
• With PLATFORM_SURFACES unset (local), nothing changes; with the cloud surface on, the route reaches the platform Worker alongside the machine routes.

^{Written for commit 89b723a. Summary will update on new commits.}

[github-actions]

cmux status _{(one comment, edited in place; each line is updated by the job that owns it)}

Review 89b723a: HQ feed card · gallery before/after runs · checks

App of this head (app.zip, kept 1 day)

gh workflow run reload-build.yml -R manaflow-ai/cmux --ref feat-cmux-next -f tag=pr33063 -f ref=leo/forward-login-copy-switch -f platform=macos -f backend_mode=local

Shipped in:

• cmux NEXT nightly 1.0.0-nightly.4158655642901 (38369c1a88)

[teamleaderleo]

Review (subagent claude-sonnet-5-5): SHIP at 89b723a

Checked: the regex is anchored (^...$) and exact; the requests array now has 10 forwarded entries (indices 0-9, ending at CloudDO read) before staying op and health, so both slice(0, 10) uses select exactly the forwarded set; the other requests use iterates all and is unaffected; no other list of forwarded paths exists in the repo at the head (the network/target path appears only in the forwarder, its test and the Swift client).

Follow-ups: none

[teamleaderleo]

Owned by an agent session · session