[lawrencecchen]

Summary

The full app build of feat-cmux-next is red. Fleet job a565ad1d55c788476e604c39 (feat 7fd3931, Xcode 26.6, MacOSX26.5 SDK, Release, arm64 and x86_64) fails:

CloudTunnelExtension/PacketTunnelProvider.swift:50:35: error: value of type 'PacketTunnelProvider' has no member 'defaultPath'

010ffb95c155 added the CloudTunnelExtension target. It came in one direct push to feat-cmux-next at 19:09Z (ad2c76731f28..cc33e089376e, 14 commits, no PR). The 11 commits after it build on it, so this PR reverts all 12 (010ffb95c155..cc33e089376e). The two cmux-wg-tun Rust commits before them (b4f6d32a9a37, d2b1b1c70ac5) stay; they do not change the app build.

Team rule: revert first, re-land with the fix second. The re-land (path observation on NWPathMonitor) follows in its own PR.

Packages/macOS/CmuxNext/ci-target-graph.json is generated; the autofix regenerates it (no hand edit).

Takes back the direct push 010ffb95c155..cc33e089376e (no PR number): its extension does not compile on the macOS 26.5 SDK, which makes every full app build red.

Changelog

none

Testing

• python3 scripts/cmux-next/prepush-gate.py: no new violations.
• Full Release app build on the fleet: see the comment with the job ID.

Observed / Not run

• Observed: the prepush gate; the fleet build result (comment).
• Not run: Swift package tests (the revert only removes code and tests).

---

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}

---

Summary by cubic

Reverts the Cloud Tunnel extension push that broke every full app build on feat-cmux-next — PacketTunnelProvider references defaultPath, which doesn't exist on the macOS 26.5 SDK.

• Removes the CloudTunnelExtension target, the CmuxNextCloudTunnel package and its tests, the cloud tunnel settings, CLI verbs, and signing/CI scripts, plus the design doc and arch exceptions.
• Keeps the two cmux-wg-tun Rust commits, which don't touch the app build.
• A re-land with a NWPathMonitor-based path observation follows in a separate PR.

^{Written for commit 288fc62. Summary will update on new commits.}

[cursor]

Bugbot needs on-demand usage enabled

Bugbot uses usage-based billing for this team and requires on-demand usage to be enabled.

A team admin can enable on-demand usage in the Cursor dashboard.

[github-actions]

cmux status _{(one comment, edited in place; each line is updated by the job that owns it)}

Review 288fc62: HQ feed card · gallery before/after runs · checks

App of this head (app.zip, kept 1 day)

gh workflow run reload-build.yml -R manaflow-ai/cmux --ref feat-cmux-next -f tag=pr34198 -f ref=base-red-tunnel-revert -f platform=macos -f backend_mode=local

Shipped in:

• cmux NEXT nightly 1.0.0-nightly.4173568006501 (cb6b71feab)
• cmux NEXT nightly 1.0.0-nightly.4173689456801 (4c71330ed9)
• cmux NEXT nightly 1.0.0-nightly.4173805520001 (cf0fddef88)

The feat-cmux-next push run https://github.com/manaflow-ai/cmux/actions/runs/41725013576 at 53bb59f failed: cmux-next web bundles (source-keyed cache).
Those jobs last passed at c874cb9. This pull request is one of 2 merged since: #34198, #34260.
If the failure is in your change, fix forward on feat-cmux-next. Pull requests run only the tiers their paths reach (docs/ci/cmux-next-tiers.md); label a batch PR full-ci to run them all before merging.

[lawrencecchen]

Full Release app build on the fleet: job dc9c961cbb359b582458cbd3 at 288fc62ba1568e242838b5974fa3cb72bf376761 (tag base-red-tunnel-revert-v1). Result follows. Forward-fix alternative: #34204.

[lawrencecchen]

Review (claude-opus-reviewer): SHIP at 288fc62

Independent review (read-only, git at exact SHAs): the PR reverts exactly the 12 commits d2b1b1c..cc33e08. For the 66 files no later commit touched, the diff is byte-identical to the inverse of the series. In Package.swift and SettingsSchema.swift, the later #33215 and #32827 lines are kept. The kept cmux-wg-tun Rust commits are unchanged and stand alone. Non-blocking: the generated ci-target-graph.json keeps stale CmuxNextCloudTunnel entries (the autofix regenerates it), and a comment in cmux-tui/crates/cmux-wg-tun/Cargo.toml:14 names the removed build-wg-tun.sh.

Note on the tier: the bot set risk:high because the reverted files include entitlements and signing scripts. This receipt plus a green full build is the evidence that tier needs.

[lawrencecchen]

Full Release app build at the exact head 288fc62 is green: fleet job dc9c961cbb359b582458cbd3 is done ('Build complete.', 0 compiler errors). The SHIP receipt for this head is above. The red 'backend migrations applied' shows 'migration plan cancelled', and the PR touches no backend file, so I reran it. The other cancelled runs were replaced by green runs after the body edit.