Temporarily disable all services and redirect to manaflow.com (#1779)

lawrencecchen · web-flow · commit d4ba62d627d1 · 2026-04-03T21:18:19.000-07:00
* Temporarily disable all API endpoints and redirect traffic to manaflow.com

Controlled by a single MANAFLOW_DEPRECATED flag. When true:
- Next.js middleware redirects all non-manaflow.com domains (cmux.sh,
  0github.com, preview.new, cloudrouter.dev) to manaflow.com via 307
- All /api/*, /iiiii/* (PostHog), /mtrerr (Sentry) routes return 503
- Hono catch-all, Anthropic proxy, and PR review routes have backup guards
- Cloudflare edge router redirects all *.cmux.sh traffic to manaflow.com
- Convex HTTP routes return 503 via d() wrapper
- Convex crons (Morph maintenance, warm pool cleanup) disabled
- PostHog proxy rewrites in next.config.ts disabled

To restore: set MANAFLOW_DEPRECATED = false in apps/www/lib/deprecation.ts,
edge-router/src/index.ts, and packages/convex/convex/http.ts. Uncomment
crons in packages/convex/convex/crons.ts. Search "MANAFLOW_DEPRECATED" to
find all references.

* Fix httpAction import and middleware matcher

- Import httpAction from ./_generated/server (not convex/server)
- Add /api/:path* to middleware matcher so deprecation guard actually runs
- Also block /api root path (not just /api/)

* Move deprecation logic into proxy.ts (Next.js 16 compatibility)

Next.js 16 uses proxy.ts instead of middleware.ts. Having both files
causes a build error. Merged deprecation guard into proxy.ts and made
the config export a static object (required by Next.js).

---------

Co-authored-by: Lawrence Chen &lt;lawrencecchen@users.noreply.github.com&gt;
diff --git a/apps/edge-router/src/index.ts b/apps/edge-router/src/index.ts
@@ -637,8 +637,20 @@ function rewriteLoopbackRedirect(
   });
 }
 
+// =============================================================================
+// TEMPORARY DEPRECATION FLAG
+// Set to false to restore normal edge-router operation.
+// Search for "MANAFLOW_DEPRECATED" across the repo to find all references.
+// =============================================================================
+const MANAFLOW_DEPRECATED = true;
+
 export default {
   async fetch(request: Request): Promise<Response> {
+    // When deprecated, redirect everything to manaflow.com
+    if (MANAFLOW_DEPRECATED) {
+      return Response.redirect("https://manaflow.com", 307);
+    }
+
     const url = new URL(request.url);
     const host = url.hostname.toLowerCase();
 
diff --git a/apps/www/app/api/[[...route]]/route.ts b/apps/www/app/api/[[...route]]/route.ts
@@ -1,9 +1,25 @@
+import { MANAFLOW_DEPRECATED } from "@/lib/deprecation";
 import { app } from "@/lib/hono-app";
 import { handle } from "hono/vercel";
+import { NextResponse } from "next/server";
 
-export const GET = handle(app);
-export const POST = handle(app);
-export const PUT = handle(app);
-export const DELETE = handle(app);
-export const PATCH = handle(app);
-export const OPTIONS = handle(app);
+function blocked() {
+  return NextResponse.json(
+    { error: "Manaflow is temporarily unavailable" },
+    { status: 503 },
+  );
+}
+
+const honoGet = handle(app);
+const honoPost = handle(app);
+const honoPut = handle(app);
+const honoDelete = handle(app);
+const honoPatch = handle(app);
+const honoOptions = handle(app);
+
+export const GET = MANAFLOW_DEPRECATED ? blocked : honoGet;
+export const POST = MANAFLOW_DEPRECATED ? blocked : honoPost;
+export const PUT = MANAFLOW_DEPRECATED ? blocked : honoPut;
+export const DELETE = MANAFLOW_DEPRECATED ? blocked : honoDelete;
+export const PATCH = MANAFLOW_DEPRECATED ? blocked : honoPatch;
+export const OPTIONS = MANAFLOW_DEPRECATED ? blocked : honoOptions;
diff --git a/apps/www/app/api/anthropic/v1/messages/route.ts b/apps/www/app/api/anthropic/v1/messages/route.ts
@@ -1,3 +1,4 @@
+import { MANAFLOW_DEPRECATED } from "@/lib/deprecation";
 import { verifyTaskRunToken, type TaskRunTokenPayload } from "@cmux/shared";
 import { CMUX_ANTHROPIC_PROXY_PLACEHOLDER_API_KEY } from "@cmux/shared/utils/anthropic";
 import { env } from "@/lib/utils/www-env";
@@ -84,6 +85,13 @@ function getSource(request: NextRequest): AnthropicProxySource {
 }
 
 export async function POST(request: NextRequest) {
+  if (MANAFLOW_DEPRECATED) {
+    return NextResponse.json(
+      { error: "Manaflow is temporarily unavailable" },
+      { status: 503 },
+    );
+  }
+
   const startTime = Date.now();
   const source = getSource(request);
   let tokenPayload: TaskRunTokenPayload | null = null;
diff --git a/apps/www/app/api/pr-review/simple/route.ts b/apps/www/app/api/pr-review/simple/route.ts
@@ -1,3 +1,4 @@
+import { MANAFLOW_DEPRECATED } from "@/lib/deprecation";
 import { NextRequest, NextResponse } from "next/server";
 
 import { stackServerApp } from "@/lib/utils/stack";
@@ -42,6 +43,13 @@ function parsePrNumber(raw: string | null): number | null {
 }
 
 export async function GET(request: NextRequest) {
+  if (MANAFLOW_DEPRECATED) {
+    return NextResponse.json(
+      { error: "Manaflow is temporarily unavailable" },
+      { status: 503 },
+    );
+  }
+
   try {
     const { searchParams } = request.nextUrl;
     const repoFullName = parseRepoFullName(searchParams.get("repoFullName"));
diff --git a/apps/www/lib/deprecation.ts b/apps/www/lib/deprecation.ts
@@ -0,0 +1,15 @@
+// =============================================================================
+// TEMPORARY DEPRECATION FLAG
+//
+// Set to `false` to restore normal operation. When `true`:
+//   - Next.js middleware redirects all non-manaflow.com traffic to manaflow.com
+//   - All /api/* endpoints return 503
+//   - Edge router (Cloudflare Worker) redirects *.cmux.sh to manaflow.com
+//   - Convex HTTP routes return 503
+//
+// To fully remove: delete this file, revert middleware.ts to proxy.ts logic,
+// revert edge-router/src/index.ts, and revert convex/http.ts guards.
+// Search for "MANAFLOW_DEPRECATED" across the repo to find all references.
+// =============================================================================
+
+export const MANAFLOW_DEPRECATED = true;
diff --git a/apps/www/next.config.ts b/apps/www/next.config.ts
@@ -1,6 +1,7 @@
 import { withSentryConfig } from "@sentry/nextjs";
 import type { NextConfig } from "next";
 import { SENTRY_RELEASE } from "./lib/sentry-release";
+import { MANAFLOW_DEPRECATED } from "./lib/deprecation";
 
 const nextConfig: NextConfig = {
   serverExternalPackages: ["morphcloud", "ssh2", "node-ssh", "cpu-features"],
@@ -14,6 +15,11 @@ const nextConfig: NextConfig = {
     "refractor",
   ],
   async rewrites() {
+    // TEMPORARY DEPRECATION: PostHog proxy rewrites disabled to prevent analytics API calls.
+    // To restore: remove the MANAFLOW_DEPRECATED guard.
+    if (MANAFLOW_DEPRECATED) {
+      return [];
+    }
     return [
       {
         source: "/iiiii/static/:path*",
diff --git a/apps/www/proxy.ts b/apps/www/proxy.ts
@@ -1,5 +1,6 @@
 import { NextResponse } from "next/server";
 import type { NextRequest } from "next/server";
+import { MANAFLOW_DEPRECATED } from "@/lib/deprecation";
 import { env } from "@/lib/utils/www-env";
 
 /**
@@ -25,7 +26,42 @@ function hasStackCookie(
   );
 }
 
+function deprecationProxy(request: NextRequest) {
+  const { pathname } = request.nextUrl;
+  const hostname = request.nextUrl.hostname;
+
+  // Block ALL API routes, analytics proxies, and error tunnels
+  if (
+    pathname === "/api" ||
+    pathname.startsWith("/api/") ||
+    pathname.startsWith("/iiiii/") ||
+    pathname.startsWith("/mtrerr")
+  ) {
+    return NextResponse.json(
+      { error: "Manaflow is temporarily unavailable" },
+      { status: 503 }
+    );
+  }
+
+  // manaflow.com: show the existing landing page, don't redirect to itself
+  if (hostname === "manaflow.com" || hostname === "www.manaflow.com") {
+    if (pathname === "/") {
+      return NextResponse.rewrite(new URL("/manaflow", request.url));
+    }
+    // Let the manaflow landing page and its assets render
+    return NextResponse.next();
+  }
+
+  // Everything else (cmux.sh, 0github.com, preview.new, cloudrouter.dev, etc.)
+  // gets a temporary redirect to manaflow.com
+  return NextResponse.redirect("https://manaflow.com", 307);
+}
+
 export function proxy(request: NextRequest) {
+  if (MANAFLOW_DEPRECATED) {
+    return deprecationProxy(request);
+  }
+
   const { pathname } = request.nextUrl;
   const hostname = request.nextUrl.hostname;
 
@@ -108,26 +144,16 @@ export function proxy(request: NextRequest) {
   return NextResponse.next();
 }
 
+// TEMPORARY DEPRECATION: matcher includes /api/* so the deprecation guard runs.
+// To restore, replace with the original matcher that excludes api paths:
+//   "/:owner/:repo/pull/:number",
+//   "/:owner/:repo/compare/:path*",
+//   "/((?!api|_next/static|_next/image|favicon.ico).*)",
 export const config = {
   matcher: [
-    /*
-     * Match all PR review and comparison pages:
-     * - /:owner/:repo/pull/:number
-     * - /:owner/:repo/compare/...
-     * But exclude:
-     * - /api routes
-     * - /_next (Next.js internals)
-     * - Static files
-     */
-    "/:owner/:repo/pull/:number",
-    "/:owner/:repo/compare/:path*",
-    /*
-     * Match all request paths except for the ones starting with:
-     * - api (API routes)
-     * - _next/static (static files)
-     * - _next/image (image optimization files)
-     * - favicon.ico (favicon file)
-     */
-    "/((?!api|_next/static|_next/image|favicon.ico).*)",
+    "/api/:path*",
+    "/iiiii/:path*",
+    "/mtrerr",
+    "/((?!_next/static|_next/image|favicon.ico).*)",
   ],
 };
diff --git a/packages/convex/convex/crons.ts b/packages/convex/convex/crons.ts
@@ -1,32 +1,35 @@
 import { cronJobs } from "convex/server";
-import { internal } from "./_generated/api";
+// import { internal } from "./_generated/api";
 
 const crons = cronJobs();
 
+// =============================================================================
+// TEMPORARY DEPRECATION: All crons disabled.
+// To restore: uncomment the import above and all cron registrations below.
+// Search for "MANAFLOW_DEPRECATED" across the repo to find all references.
+// =============================================================================
+
 // Pause Morph instances older than 20 hours
 // Runs daily at 4 AM Pacific Time
-// 4 AM PST = 12:00 UTC (during standard time)
-// 4 AM PDT = 11:00 UTC (during daylight saving)
-// Using 12:00 UTC means it runs at 4 AM PST or 5 AM PDT
-crons.daily(
-  "pause old morph instances",
-  { hourUTC: 12, minuteUTC: 0 },
-  internal.morphInstanceMaintenance.pauseOldMorphInstances
-);
+// crons.daily(
+//   "pause old morph instances",
+//   { hourUTC: 12, minuteUTC: 0 },
+//   internal.morphInstanceMaintenance.pauseOldMorphInstances
+// );
 
 // Stop (delete) Morph instances that have been paused for more than 2 weeks
 // Runs daily at 13:00 UTC (~5-6 AM Pacific depending on DST)
-crons.daily(
-  "stop old morph instances",
-  { hourUTC: 13, minuteUTC: 0 },
-  internal.morphInstanceMaintenance.stopOldMorphInstances
-);
+// crons.daily(
+//   "stop old morph instances",
+//   { hourUTC: 13, minuteUTC: 0 },
+//   internal.morphInstanceMaintenance.stopOldMorphInstances
+// );
 
 // Clean up stale warm pool entries daily at 11:30 UTC
-crons.daily(
-  "cleanup warm pool",
-  { hourUTC: 11, minuteUTC: 30 },
-  internal.warmPoolMaintenance.cleanupWarmPool
-);
+// crons.daily(
+//   "cleanup warm pool",
+//   { hourUTC: 11, minuteUTC: 30 },
+//   internal.warmPoolMaintenance.cleanupWarmPool
+// );
 
 export default crons;
diff --git a/packages/convex/convex/http.ts b/packages/convex/convex/http.ts
