@mycadet/assistant 0.12.7 → 0.12.8

package/src/config/default-profile-catalog.ts

@@ -1,4 +1,4 @@
-import { getManagedUpstream } from "../providers/cadet-model-routing.js";
+import { getCloudUpstream } from "../providers/cadet-model-routing.js";
 import { ROUTING_IDENTITY_PROVIDERS } from "../providers/inference/auth.js";
 import {
   catalogMaxOutputTokens,
@@ -16,10 +16,10 @@ import {
   type DefaultProfileKey,
   type DefaultProfileProvider,
   FALLBACK_PROFILE_BY_KEY,
+  isCloudOnlyProfileKey,
   isDefaultProfileKey,
   isDefaultProfileProvider,
   isFlagGatedProfileKey,
-  isManagedOnlyProfileKey,
   JEV_MANAGED_PROFILE_KEY,
   OS_BETA_PROFILE_KEY,
 } from "./default-profile-names.js";
@@ -44,10 +44,10 @@ import {
  * structured as an intent × provider matrix: each default profile is an
  * intent, and each provider that can serve default profiles has a concrete
  * implementation of that intent (model, token budget, effort, thinking).
- * The `cadet` column is the platform-managed implementation and the
+ * The `cadet` column is the cloud-managed implementation and the
  * `chatgpt` column is the ChatGPT-subscription implementation; the other
  * columns are the BYOK implementations resolved through `llm.default`
- * on off-platform installs.
+ * on off-cloud installs.
  *
  * Nothing materializes default bodies into workspace config: runtime readers
  * resolve profiles through `getEffectiveProfiles`/`getEffectiveProfile`
@@ -75,7 +75,7 @@ export type DefaultProfileTemplate = Omit<
 type ProfileImpls = Record<DefaultProfileKey, DefaultProfileTemplate>;
 
 /**
- * The `cadet` column: platform-managed implementations, stamped
+ * The `cadet` column: cloud-managed implementations, stamped
  * `provider: "cadet"` — dispatch derives the upstream from the model.
  * Models are pinned (never intents): the intent tables are keyed by
  * concrete dispatch providers, and the model is what selects the upstream.
@@ -140,17 +140,17 @@ const CADET_PROFILE_IMPLS: ProfileImpls = {
     },
   },
   "latency-optimized": {
-    // The managed latency class, also what the live-voice front model runs on.
+    // The cloud latency class, also what the live-voice front model runs on.
     // Its leading tokens are the turn-taking verdict, so what this profile
     // optimizes is the tail of time-to-first-token rather than the median: a
     // verdict slower than `voice.frontModel.endpointDecisionTimeoutMs`
     // trips the speculative fail-open commit in live-voice-session.ts, which
     // is audible dead air.
     //
-    // Two constraints bind the model id. Its managed credentials must be
+    // Two constraints bind the model id. Its cloud credentials must be
     // provisioned in every environment, and it alone selects the upstream:
     // `provider` below is the provider-agnostic managed sentinel, so
-    // `getManagedUpstream` resolves the real upstream from the model's catalog
+    // `getCloudUpstream` resolves the real upstream from the model's catalog
     // owner. This model is the one live-voice TTFT drives validated.
     model: "gpt-5.6-luna",
     provider: "cadet",
@@ -172,7 +172,7 @@ const CADET_PROFILE_IMPLS: ProfileImpls = {
 };
 
 /**
- * The managed backup profiles, one per default profile: the route a primary's
+ * The cloud backup profiles, one per default profile: the route a primary's
  * `fallbackProfile` pointer names. Cadet column only: backups never
  * materialize for BYOK or chatgpt installs. Like the primaries, models are
  * pinned (never intents) and stamped `provider: "cadet"`, so dispatch
@@ -392,8 +392,8 @@ export const PROFILE_IMPLS: Record<
 >;
 
 /**
- * The managed Jev profile: TypeSafe's System One decision model through the
- * platform proxy. Managed column only, because the platform is the only
+ * The cloud Jev profile: TypeSafe's System One decision model through the
+ * cloud proxy. Managed column only, because the cloud is the only
  * route the catalog offers for it here, and never a conversation profile,
  * because `jev-latest` returns structured answers rather than chat text
  * (`supportsText: false` on the `typesafe` catalog entry). Its budget is
@@ -412,7 +412,7 @@ export const JEV_MANAGED_PROFILE_TEMPLATE: DefaultProfileTemplate = {
 };
 
 /**
- * The Auto profile: the managed Balanced body under its own label, so that
+ * The Auto profile: the cloud Balanced body under its own label, so that
  * anything dispatching the name directly runs Balanced. The per-message
  * choice among the defaults happens in the agent loop, not here (see
  * `AUTO_PROFILE_KEY`). No `fallbackProfile`: the code-owned fallback mapping
@@ -433,8 +433,8 @@ export const AUTO_PROFILE_TEMPLATE: DefaultProfileTemplate = (() => {
 })();
 
 /**
- * Managed profiles, i.e. the `cadet` column keyed by profile name, plus the
- * managed backup profiles and the managed Jev profile. Backups come after the
+ * Cloud profiles, i.e. the `cadet` column keyed by profile name, plus the
+ * managed backup profiles and the cloud Jev profile. Backups come after the
  * primaries, which is what places them after the primaries in the seeded
  * `profileOrder`: the seeder inserts missing managed keys in this record's
  * order. Keyed by the user-facing defaults only: an internal profile is
@@ -490,7 +490,7 @@ export const USER_PROFILE_TEMPLATES: Record<string, DefaultProfileTemplate> =
   );
 
 /**
- * Flag-gated managed profile. NOT in `MANAGED_PROFILE_TEMPLATES`, so the
+ * Flag-gated cloud profile. NOT in `MANAGED_PROFILE_TEMPLATES`, so the
  * unconditional boot seed never creates it. Reconciled in/out by
  * the flag-gated profile reconcile based on the `os-beta` feature flag.
  * Balanced defaults, with lower reasoning effort while the profile is in beta.
@@ -537,7 +537,7 @@ export const CODE_OWNED_PROFILE_NAMES = new Set<string>([
   JEV_MANAGED_PROFILE_KEY,
 ]);
 
-// All managed profiles, including the flag-gated os-beta, are invariant:
+// All cloud profiles, including the flag-gated os-beta, are invariant:
 // their MANAGED-SOURCE entries are read-only to user-facing writes except
 // re-enabling a disabled one (enforced at commitConfigWrite). A user-owned
 // profile sharing one of these names is NOT locked — invariance is gated on
@@ -614,14 +614,14 @@ for (const key of DEFAULT_PROFILE_KEYS) {
     if (impl.model != null) {
       const routable =
         impl.provider === "cadet"
-          ? getManagedUpstream(impl.model) !== null
+          ? getCloudUpstream(impl.model) !== null
           : impl.provider === "chatgpt"
             ? isCodexSubscriptionModel(impl.model)
             : isModelInCatalog(impl.provider, impl.model);
       if (!routable) {
         throw new Error(
           `PROFILE_IMPLS[${key}][${provider}] references model "${impl.model}" ` +
-            `which is not ${impl.provider === "cadet" ? "served by any managed upstream" : impl.provider === "chatgpt" ? "in CODEX_SUBSCRIPTION_MODEL_IDS" : `in PROVIDER_CATALOG for provider "${impl.provider}"`}. ` +
+            `which is not ${impl.provider === "cadet" ? "served by any cloud upstream" : impl.provider === "chatgpt" ? "in CODEX_SUBSCRIPTION_MODEL_IDS" : `in PROVIDER_CATALOG for provider "${impl.provider}"`}. ` +
             `Update model-catalog.ts or default-profile-catalog.ts.`,
         );
       }
@@ -630,31 +630,29 @@ for (const key of DEFAULT_PROFILE_KEYS) {
 }
 
 // Backup profiles get the same eager verification as the cadet column: a
-// pinned model that no managed upstream serves would make the fallback route
+// pinned model that no cloud upstream serves would make the fallback route
 // undispatchable exactly when it is needed. The cross-provider rule (backup
 // upstream differs from the primary's) is asserted in
 // __tests__/default-profile-catalog-fallback.test.ts.
 for (const key of BACKUP_PROFILE_KEYS) {
   const impl = BACKUP_PROFILE_IMPLS[key];
-  if (impl.model == null || getManagedUpstream(impl.model) === null) {
+  if (impl.model == null || getCloudUpstream(impl.model) === null) {
     throw new Error(
       `BACKUP_PROFILE_IMPLS[${key}] references model "${impl.model ?? ""}" ` +
-        `which is not served by any managed upstream. ` +
+        `which is not served by any cloud upstream. ` +
         `Update model-catalog.ts or default-profile-catalog.ts.`,
     );
   }
 }
 
-// The managed Jev profile pins a model the platform proxy must front, and the
+// The cloud Jev profile pins a model the cloud proxy must front, and the
 // judges depend on it being the non-text TypeSafe model rather than a chat
 // model that happens to share the id.
-if (
-  getManagedUpstream(JEV_MANAGED_PROFILE_TEMPLATE.model ?? "") !== "typesafe"
-) {
+if (getCloudUpstream(JEV_MANAGED_PROFILE_TEMPLATE.model ?? "") !== "typesafe") {
   throw new Error(
     `JEV_MANAGED_PROFILE_TEMPLATE references model "${JEV_MANAGED_PROFILE_TEMPLATE.model ?? ""}" ` +
-      `which the managed route does not serve through typesafe. ` +
-      `Update model-catalog.ts, platform-proxy/constants.ts, or default-profile-catalog.ts.`,
+      `which the cloud route does not serve through typesafe. ` +
+      `Update model-catalog.ts, cloud-proxy/constants.ts, or default-profile-catalog.ts.`,
   );
 }
 
@@ -706,8 +704,8 @@ function buildDefaultProfileEntries(): Record<string, ProfileEntry> {
 
 /**
  * The materialized code-default bodies keyed by profile name — the
- * code-owned content a managed-source workspace entry resolves to. These are
- * the `cadet` column (the managed implementations).
+ * code-owned content a cloud-source workspace entry resolves to. These are
+ * the `cadet` column (the cloud implementations).
  *
  * Materialized once at module load, so this is the shipped catalog. The
  * provider-aware resolvers (`resolveDefaultProfileForProvider`,
@@ -773,13 +771,13 @@ function resolveAgainstBody(
   if (body == null) {
     // A managed stub is the workspace's slot for a code-owned profile, never
     // a profile of its own, so with no body behind it there is nothing to
-    // resolve. Only a managed-only name (a backup, the Jev profile) reaches
+    // resolve. Only a cloud-only name (a backup, the Jev profile) reaches
     // this branch with a stub (the default keys always have a body), and it
     // reaches it on the columns where those profiles do not exist. Resolving
     // to the stub would list a profile with no provider or model and let a
     // reference to it look valid, which is precisely what `LLMSchema` rejects
     // on those columns.
-    if (isManagedOnlyProfileKey(name) && workspace?.source === "managed") {
+    if (isCloudOnlyProfileKey(name) && workspace?.source === "managed") {
       return undefined;
     }
     return workspace;
@@ -865,14 +863,14 @@ function defaultProfileBodyForProvider(
   defaultBlob: LLMDefaultConfig | undefined,
 ): ProfileEntry | undefined {
   if (!isDefaultProfileKey(name)) {
-    // Backup profiles and the managed Jev profile exist on the managed
+    // Backup profiles and the cloud Jev profile exist on the cloud
     // (`cadet`) column only: under a BYOK or chatgpt default provider the
     // primaries carry no `fallbackProfile` pointers, and neither may
     // materialize, since the install may hold no credential for their
-    // provider. A blob with no usable selection resolves to the managed
+    // provider. A blob with no usable selection resolves to the cloud
     // column, so it keeps them.
     if (
-      isManagedOnlyProfileKey(name) &&
+      isCloudOnlyProfileKey(name) &&
       !backupProfilesResolveUnderDefaultProvider(defaultBlob)
     ) {
       return undefined;
@@ -882,7 +880,7 @@ function defaultProfileBodyForProvider(
   // The blob's `provider` is the loose provider set: only a value the intent
   // × provider matrix can implement selects a column; anything else — no
   // provider, a keyless ollama, a user-endpoint openai-compatible — resolves
-  // to the managed column, which is what the frozen bodies carry.
+  // to the cloud column, which is what the frozen bodies carry.
   const provider = defaultBlob?.provider;
   if (provider == null || !isDefaultProviderChoice(provider)) {
     return CODE_DEFAULT_PROFILE_ENTRIES[name];
@@ -925,12 +923,12 @@ function clampMaxTokensToModelCap(body: ProfileEntry): ProfileEntry {
  * record all runtime readers of `llm.profiles` should consume; the raw
  * workspace record is a write-path concern.
  *
- * Deliberately provider-agnostic: it lists the managed backups whatever
+ * Deliberately provider-agnostic: it lists the cloud backups whatever
  * `llm.default` says, because it resolves names against the passed
  * catalog alone and never reads config. Internal resolution and reference
  * validation use `getEffectiveProfilesForProvider`; user-facing selectors use
  * `getUserSelectableProfilesForProvider`, which additionally removes backups
- * from the managed column. Keeping those views separate lets automatic
+ * from the cloud column. Keeping those views separate lets automatic
  * fallback resolve an internal route without offering it as a direct choice.
  */
 export function getEffectiveProfiles(
@@ -976,7 +974,7 @@ export function getEffectiveProfilesForProvider(
       continue;
     }
     // Nothing resolved, so the name must not survive from the workspace
-    // spread above: a backup carrying only a managed stub on a column that
+    // spread above: a backup carrying only a cloud stub on a column that
     // has no backups would otherwise be listed as an available profile with
     // no provider or model behind it.
     delete effective[name];

package/src/config/default-profile-names.ts

@@ -27,10 +27,10 @@ export const DEFAULT_PROFILE_KEYS = [
 export type DefaultProfileKey = (typeof DEFAULT_PROFILE_KEYS)[number];
 
 /**
- * Stable keys of the managed backup profiles, one per default profile.
+ * Stable keys of the cloud backup profiles, one per default profile.
  * Deliberately NOT part of `DEFAULT_PROFILE_KEYS`: that array drives picker
  * order and the intent x provider matrix, while backups are companions of
- * the managed (`cadet`) column only. Each backup pins a model at a
+ * the cloud (`cadet`) column only. Each backup pins a model at a
  * different upstream provider than its primary, so an outage at the
  * primary's provider can be served by re-sending on the backup (see the
  * `fallbackProfile` field on `ProfileEntry`).
@@ -68,9 +68,9 @@ export function isBackupProfileKey(value: string): value is BackupProfileKey {
 }
 
 /**
- * Managed profile for the TypeSafe decision model (Jev). Deliberately NOT
+ * Cloud profile for the TypeSafe decision model (Jev). Deliberately NOT
  * part of `DEFAULT_PROFILE_KEYS`: it has no BYOK column, because the
- * platform serves Jev only through the managed route, and its model returns
+ * platform serves Jev only through the cloud route, and its model returns
  * structured answers rather than chat text, so it can never be the active
  * or conversation profile. It exists as a pin target for the call sites
  * that consume a yes/no verdict (the voice judges, the memory selector).
@@ -78,12 +78,12 @@ export function isBackupProfileKey(value: string): value is BackupProfileKey {
 export const JEV_MANAGED_PROFILE_KEY = "jev-managed";
 
 /**
- * Managed profile that picks one of the default profiles per message: the
+ * Cloud profile that picks one of the default profiles per message: the
  * agent loop asks Jev which default fits the user's latest message and runs
  * the turn on that profile (`daemon/auto-profile-router.ts`). Its own body
- * is the managed Balanced body, so any path that dispatches the name
+ * is the cloud Balanced body, so any path that dispatches the name
  * directly, or a turn on which the router is unavailable, runs Balanced.
- * Managed column only, because the router depends on the managed Jev route,
+ * Managed column only, because the router depends on the cloud Jev route,
  * and flag-gated: it exists only while the `auto-profile` feature flag has
  * reconciled it into the workspace (see `sync-gated-profiles.ts`).
  * Deliberately NOT part of `DEFAULT_PROFILE_KEYS`: it is a selection over
@@ -108,7 +108,7 @@ export const JEV_MANAGED_PROFILE_CALL_SITES = [
 ] as const;
 
 /**
- * Keys whose profile exists on the managed (`cadet`) column only: the
+ * Keys whose profile exists on the cloud (`cadet`) column only: the
  * backups, the Jev profile, and the Auto profile. Under a BYOK or ChatGPT
  * default provider these names have no body to resolve to.
  */
@@ -118,7 +118,7 @@ export const MANAGED_ONLY_PROFILE_KEYS = [
   AUTO_PROFILE_KEY,
 ] as const;
 
-export function isManagedOnlyProfileKey(value: string): boolean {
+export function isCloudOnlyProfileKey(value: string): boolean {
   return (MANAGED_ONLY_PROFILE_KEYS as readonly string[]).includes(value);
 }
 
@@ -132,7 +132,7 @@ export function isManagedOnlyProfileKey(value: string): boolean {
 export const OS_BETA_PROFILE_KEY = "os-beta";
 
 /**
- * Managed profiles that resolve only while a workspace entry exists, because
+ * Cloud profiles that resolve only while a workspace entry exists, because
  * a feature flag reconciles that entry in and out. Never always-valid
  * reference targets: a reference to one is valid only with the entry present.
  */
@@ -147,7 +147,7 @@ export function isFlagGatedProfileKey(value: string): boolean {
 
 /**
  * The named columns of the intent × provider matrix. `cadet` is the
- * platform-managed column (routed through the single `cadet` connection to
+ * cloud column (routed through the single `cadet` connection to
  * an underlying provider per profile) and `chatgpt` is the
  * ChatGPT-subscription column (routed through the `chatgpt-subscription`
  * connection to the Codex endpoint); the rest are BYOK columns whose

package/src/config/default-provider-resolution.ts

@@ -1,4 +1,4 @@
-import { CADET_MANAGED_CONNECTION_NAME } from "../providers/cadet-model-routing.js";
+import { CADET_CLOUD_CONNECTION_NAME } from "../providers/cadet-model-routing.js";
 import { CHATGPT_SUBSCRIPTION_CONNECTION_NAME } from "../providers/inference/auth.js";
 import {
   isDefaultProviderChoice,
@@ -23,7 +23,7 @@ export function resolveDefaultConnectionName(
     return dp.provider_connection;
   }
   if (provider === "cadet") {
-    return CADET_MANAGED_CONNECTION_NAME;
+    return CADET_CLOUD_CONNECTION_NAME;
   }
   if (provider === "chatgpt") {
     return CHATGPT_SUBSCRIPTION_CONNECTION_NAME;

package/src/config/default-provider.ts

@@ -41,7 +41,7 @@ const StoredDefaultBlobSchema = z
  * `setDefaultProvider` persists into the blob. Kept separate from the stored
  * blob shape on purpose — the route rejects anything the matrix cannot
  * implement (a partial blob tolerates it and clamps at read), so a bogus
- * provider fails loudly here instead of silently resolving to the managed
+ * provider fails loudly here instead of silently resolving to the cloud
  * column.
  */
 export const DefaultProviderSelectionSchema = z.object({

package/src/config/env-registry.ts

@@ -54,35 +54,37 @@ export function getIsContainerized(): boolean {
 }
 
 /**
- * IS_PLATFORM — boolean, default: false
- * When true, indicates the assistant is running as a platform-managed
- * remote instance. Controls platform-specific behaviors like webhook
- * callback registration and blocking `platform disconnect`.
+ * IS_CLOUD — boolean, default: false
+ * When true, indicates the assistant is running as a Cadet Cloud-managed
+ * remote instance. Controls cloud-specific behaviors like webhook
+ * callback registration and blocking `cloud disconnect`.
  *
  * Separate from IS_CONTAINERIZED because local Docker assistants are
  * containerized (need CES sidecar, gateway trust store, etc.) but are
- * not platform-managed.
+ * not cloud-managed. Reads the legacy IS_CLOUD name as a fallback so
+ * deployments provisioned before the rename keep working.
  */
-export function getIsPlatform(): boolean {
-  return flag("IS_PLATFORM");
+export function getIsCloud(): boolean {
+  return flag("IS_CLOUD") || flag("IS_CLOUD");
 }
 
 /**
- * Whether this assistant is running as a platform-managed remote instance.
+ * Whether this assistant is running as a Cadet Cloud-managed remote instance.
  */
-export function isPlatformRemote(): boolean {
-  return getIsPlatform();
+export function isCloudRemote(): boolean {
+  return getIsCloud();
 }
 
 /**
- * CADET_DISABLE_PLATFORM — boolean, default: false
- * When true, all outbound platform API calls in local mode are suppressed.
- * The daemon, gateway, and web UI each no-op platform requests with a
- * debug log. Has no effect when IS_PLATFORM is true (platform-managed
- * instances always connect to the platform).
+ * CADET_DISABLE_CLOUD — boolean, default: false
+ * When true, all outbound cloud API calls in local mode are suppressed.
+ * The daemon, gateway, and web UI each no-op cloud requests with a
+ * debug log. Has no effect when IS_CLOUD is true (cloud-managed
+ * instances always connect to the cloud). Reads the legacy
+ * CADET_DISABLE_CLOUD name as a fallback for older deployments.
  */
-export function getDisablePlatform(): boolean {
-  return flag("CADET_DISABLE_PLATFORM");
+export function getDisableCloud(): boolean {
+  return flag("CADET_DISABLE_CLOUD") || flag("CADET_DISABLE_CLOUD");
 }
 
 /**
@@ -96,14 +98,14 @@ export function getDeviceIdOverride(): string | undefined {
 }
 
 // ── Profiler env vars ───────────────────────────────────────────────────
-// These are injected by the platform when running a managed assistant in
+// These are injected by the cloud when running a cloud assistant in
 // profiler mode. The runtime uses them to locate, scope, and budget-limit
 // profiler output on the workspace volume.
 
 /**
  * CADET_CPU_LIMIT — string (K8s resource format), default: undefined
  * The CPU resource limit for the container (e.g. "2000m", "2").
- * Set by the platform StatefulSet template to the exact K8s CPU limit.
+ * Set by the cloud StatefulSet template to the exact K8s CPU limit.
  * Used by the health endpoint to report accurate CPU core count inside
  * gVisor sandboxes where cgroup files may expose the host node's CPUs.
  */
@@ -187,7 +189,7 @@ const KNOWN_CADET_VARS = new Set([
   "CADET_DESKTOP_APP",
   "CADET_DEV",
   "CADET_DEVICE_ID",
-  "CADET_DISABLE_PLATFORM",
+  "CADET_DISABLE_CLOUD",
   "CADET_DOCS_BASE_URL",
   "CADET_ENVIRONMENT",
   "CADET_HATCHED_BY",
@@ -198,7 +200,7 @@ const KNOWN_CADET_VARS = new Set([
   "CADET_MARKETING_URL",
   "CADET_MIGRATION_EXPORT_ALLOWED_HOSTS",
   "CADET_MIGRATION_IMPORT_ALLOWED_HOSTS",
-  "CADET_PLATFORM_URL",
+  "CADET_CLOUD_URL",
   "CADET_PROFILER_MAX_BYTES",
   "CADET_PROFILER_MAX_RUNS",
   "CADET_PROFILER_MIN_FREE_MB",

package/src/config/env.ts

@@ -14,7 +14,7 @@
  */
 
 import { getLogger } from "../util/logger.js";
-import { checkUnrecognizedEnvVars, getIsPlatform } from "./env-registry.js";
+import { checkUnrecognizedEnvVars, getIsCloud } from "./env-registry.js";
 import { getConfig } from "./loader.js";
 
 const log = getLogger("env");
@@ -91,25 +91,25 @@ export function getRuntimeHttpHost(): string {
 
 /**
  * True when HTTP API auth is disabled via DISABLE_HTTP_AUTH=true.
- * Used in platform-managed deployments where the platform handles auth.
+ * Used in cloud-managed deployments where the cloud handles auth.
  */
 export function isHttpAuthDisabled(): boolean {
   return str("DISABLE_HTTP_AUTH")?.toLowerCase() === "true";
 }
 
 /**
- * True when the platform-managed auth bypass is in effect: DISABLE_HTTP_AUTH
- * and IS_PLATFORM both set, the pair a vembda pod runs with.
+ * True when the cloud-managed auth bypass is in effect: DISABLE_HTTP_AUTH
+ * and IS_CLOUD both set, the pair a vembda pod runs with.
  *
  * The narrow reading of the bypass, for authorization decisions that must not
- * turn off on a host the platform does not manage. `DISABLE_HTTP_AUTH` alone
- * is a dev flag whose whole meaning is "the platform handles auth", so a leak
+ * turn off on a host the cloud does not manage. `DISABLE_HTTP_AUTH` alone
+ * is a dev flag whose whole meaning is "the cloud handles auth", so a leak
  * of it onto another host must not also surrender a route's policy or a
- * grant's binding. Mirrors `isPlatformAuthBypassActive` in
+ * grant's binding. Mirrors `isCloudAuthBypassActive` in
  * `gateway/src/http/middleware/auth.ts`.
  */
-export function isPlatformAuthBypassActive(): boolean {
-  return isHttpAuthDisabled() && getIsPlatform();
+export function isCloudAuthBypassActive(): boolean {
+  return isHttpAuthDisabled() && getIsCloud();
 }
 
 // ── Qdrant ───────────────────────────────────────────────────────────────────
@@ -134,25 +134,19 @@ export function getOllamaBaseUrlEnv(): string | undefined {
 
 // ── Platform ─────────────────────────────────────────────────────────────────
 
-let _platformBaseUrlOverride: string | undefined;
-
-export function setPlatformBaseUrl(value: string | undefined): void {
-  _platformBaseUrlOverride = value;
-}
-
-export function getPlatformBaseUrl(): string {
+export function getCloudBaseUrl(): string {
   let configUrl: string | undefined;
   try {
-    const val = getConfig().platform.baseUrl;
+    const val = getConfig().cloud.baseUrl;
     if (val) {
       configUrl = val;
     }
   } catch {
     // Config not yet available (early bootstrap) — fall through
   }
-  // Resolve the default platform URL from CADET_ENVIRONMENT.
+  // Resolve the default cloud URL from CADET_ENVIRONMENT.
   // `production`, `staging`, and `test` map to their respective hosted
-  // platforms, `local` points at a developer's locally running platform,
+  // platforms, `local` points at a developer's locally running cloud,
   // and everything else (including unset) falls back to dev-platform.
   const env = str("CADET_ENVIRONMENT")?.trim();
   let defaultUrl: string;
@@ -167,12 +161,7 @@ export function getPlatformBaseUrl(): string {
   } else {
     defaultUrl = "https://dev-cloud.mycadet.ai";
   }
-  return (
-    configUrl ||
-    str("CADET_PLATFORM_URL") ||
-    _platformBaseUrlOverride ||
-    defaultUrl
-  );
+  return configUrl || str("CADET_CLOUD_URL") || defaultUrl;
 }
 
 /**
@@ -182,7 +171,7 @@ export function getPlatformBaseUrl(): string {
  */
 export function getApexDomain(): string {
   try {
-    const url = getPlatformBaseUrl();
+    const url = getCloudBaseUrl();
     const host = new URL(url).hostname;
 
     if (host.endsWith("cloud.mycadet.ai")) {
@@ -207,7 +196,7 @@ export function getApexDomain(): string {
 export function getAssistantDomain(): string {
   const subdomain = (() => {
     try {
-      return getConfig().platform?.subdomain;
+      return getConfig().cloud?.subdomain;
     } catch {
       return undefined;
     }
@@ -219,51 +208,49 @@ export function getAssistantDomain(): string {
   return apex;
 }
 
-let _platformAssistantIdOverride: string | undefined;
+let _cloudAssistantIdOverride: string | undefined;
 
-export function setPlatformAssistantId(value: string | undefined): void {
-  _platformAssistantIdOverride = value;
+export function setCloudAssistantId(value: string | undefined): void {
+  _cloudAssistantIdOverride = value;
 }
 
 /**
- * Platform assistant ID — UUID of this assistant on the platform.
+ * Platform assistant ID — UUID of this assistant on the cloud.
  *
  * Resolved from the in-memory override (populated by providers-setup
- * rehydration via platform validate, or by secret-routes when the
+ * rehydration via cloud validate, or by secret-routes when the
  * platform pushes the value).
  */
-export function getPlatformAssistantId(): string {
-  return _platformAssistantIdOverride ?? "";
+export function getCloudAssistantId(): string {
+  return _cloudAssistantIdOverride ?? "";
 }
 
-let _platformOrganizationIdOverride: string | undefined;
+let _cloudOrganizationIdOverride: string | undefined;
 
-export function setPlatformOrganizationId(value: string | undefined): void {
-  _platformOrganizationIdOverride = value;
+export function setCloudOrganizationId(value: string | undefined): void {
+  _cloudOrganizationIdOverride = value;
 }
 
 /**
- * PLATFORM_ORGANIZATION_ID — UUID of the organization this assistant belongs to.
+ * CLOUD_ORGANIZATION_ID — UUID of the organization this assistant belongs to.
  * Used for platform tagging and API calls.
  */
-export function getPlatformOrganizationId(): string {
-  return (
-    str("PLATFORM_ORGANIZATION_ID") ?? _platformOrganizationIdOverride ?? ""
-  );
+export function getCloudOrganizationId(): string {
+  return str("CLOUD_ORGANIZATION_ID") ?? _cloudOrganizationIdOverride ?? "";
 }
 
 let _platformUserIdOverride: string | undefined;
 
-export function setPlatformUserId(value: string | undefined): void {
+export function setCloudUserId(value: string | undefined): void {
   _platformUserIdOverride = value;
 }
 
 /**
- * PLATFORM_USER_ID — UUID of the user who owns this assistant.
+ * CLOUD_USER_ID — UUID of the user who owns this assistant.
  * Used for telemetry and platform API calls.
  */
-export function getPlatformUserId(): string {
-  return str("PLATFORM_USER_ID") ?? _platformUserIdOverride ?? "";
+export function getCloudUserId(): string {
+  return str("CLOUD_USER_ID") ?? _platformUserIdOverride ?? "";
 }
 
 // ── Startup validation ──────────────────────────────────────────────────────

package/src/config/feature-flag-registry.json

@@ -82,7 +82,7 @@
       "scope": "client",
       "key": "multi-platform-assistant",
       "label": "Multi-Platform Assistant Switcher",
-      "description": "Enable the menu-bar assistant switcher for managing multiple platform-hosted assistants (new/switch/retire)",
+      "description": "Enable the menu-bar assistant switcher for managing multiple cloud-hosted assistants (new/switch/retire)",
       "defaultEnabled": false
     },
     {
@@ -138,7 +138,7 @@
       "scope": "client",
       "key": "fork-from-message",
       "label": "Internal Thread Actions (legacy key)",
-      "description": "Legacy key for `internal-thread-actions`. The client grants the internal thread affordances when either key is enabled, so the platform may serve the gate under either name. Declared here so the flag mapper keeps the value instead of dropping it as undeclared.",
+      "description": "Legacy key for `internal-thread-actions`. The client grants the internal thread affordances when either key is enabled, so the cloud may serve the gate under either name. Declared here so the flag mapper keeps the value instead of dropping it as undeclared.",
       "defaultEnabled": false
     },
     {
@@ -378,7 +378,7 @@
       "scope": "client",
       "key": "push-avatar-sender",
       "label": "Push Avatar Sender",
-      "description": "Native notifications show the assistant's avatar as the icon with the assistant's name on line one. Same key the platform reads for APNs/FCM sender blocks.",
+      "description": "Native notifications show the assistant's avatar as the icon with the assistant's name on line one. Same key the cloud reads for APNs/FCM sender blocks.",
       "defaultEnabled": false
     },
     {
@@ -450,7 +450,7 @@
       "scope": "assistant",
       "key": "tunnel-webhooks",
       "label": "Tunnel Webhooks",
-      "description": "Platform pods resolve webhook callback URLs from the Tunnel-published ingress URL instead of registering platform callback routes. Falls back to platform callback registration while no tunnel URL is published.",
+      "description": "Cloud pods resolve webhook callback URLs from the Tunnel-published ingress URL instead of registering platform callback routes. Falls back to platform callback registration while no tunnel URL is published.",
       "defaultEnabled": false
     },
     {
@@ -483,7 +483,7 @@
       "scope": "assistant",
       "key": "assistant-desktop",
       "label": "Virtual desktop",
-      "description": "Streams an interactive virtual desktop from a platform-hosted, containerized assistant over /v1/desktop/stream. Requires platform hosting; self-hosted assistants are excluded. Off: the virtual desktop is hidden. On: the chat header offers its viewer and controls.",
+      "description": "Streams an interactive virtual desktop from a cloud-hosted, containerized assistant over /v1/desktop/stream. Requires platform hosting; self-hosted assistants are excluded. Off: the virtual desktop is hidden. On: the chat header offers its viewer and controls.",
       "defaultEnabled": false
     },
     {