@mycadet/assistant 0.12.7 → 0.12.8

package/src/daemon/lifecycle.ts

@@ -1,10 +1,13 @@
 import { config as dotenvConfig } from "dotenv";
 
 import { reconcileAppPins } from "../apps/app-pin-reconciler.js";
-import { syncAvatarToPlatform } from "../avatar/sync-avatar.js";
+import { syncAvatarToCloud } from "../avatar/sync-avatar.js";
 import { reconcileCallsOnStartup } from "../calls/call-recovery.js";
 import { TwilioVoiceProvider } from "../calls/twilio-provider.js";
 import { expireInteractionBoundGuardianRequests } from "../channels/gateway-guardian-requests.js";
+import { isCloudClientConfigured } from "../cloud/client.js";
+import { startConsentRefresh } from "../cloud/consent-cache.js";
+import { syncWorkspaceIdentityToPlatform } from "../cloud/sync-identity.js";
 import { initFeatureFlagOverrides } from "../config/assistant-feature-flags.js";
 import { setIngressPublicBaseUrl, validateEnv } from "../config/env.js";
 import {
@@ -16,7 +19,7 @@ import { seedInferenceProfiles } from "../config/seed-inference-profiles.js";
 import { reconcileFlagGatedProfiles } from "../config/sync-gated-profiles.js";
 import { startConversationAutoArchive } from "../conversations/auto-archive.js";
 import { startCes } from "../credential-execution/ces-runtime.js";
-import { refreshManagedConnectionCache } from "../credential-execution/managed-catalog.js";
+import { refreshManagedConnectionCache } from "../credential-execution/cloud-catalog.js";
 import { startHeartbeatService } from "../heartbeat/heartbeat-service.js";
 import { backfillRelationshipStateIfMissing } from "../home/relationship-state-writer.js";
 import { startCliIpcServer } from "../ipc/assistant-server.js";
@@ -31,9 +34,6 @@ import { initializeDb } from "../persistence/db-init.js";
 import { startEmbeddingRuntimeManager } from "../persistence/embeddings/embedding-backend.js";
 import { maybeEnqueueLexicalBackfillOnUpgrade } from "../persistence/job-handlers/message-lexical-backfill.js";
 import { clearLifecycleQuiesce } from "../persistence/lifecycle-quiesce.js";
-import { isPlatformClientConfigured } from "../platform/client.js";
-import { startConsentRefresh } from "../platform/consent-cache.js";
-import { syncWorkspaceIdentityToPlatform } from "../platform/sync-identity.js";
 import { ensurePromptFiles } from "../prompts/system-prompt.js";
 import { runProviderConnectionsBackfill } from "../providers/inference/backfill.js";
 import { repairSharedCredentialSlots } from "../providers/inference/credential-slot-repair.js";
@@ -67,7 +67,7 @@ import {
 import { APP_VERSION } from "../version.js";
 import { drainOrphanedWatchTimelineEntries } from "../watch/watch-timeline.js";
 import { getWorkflowRunManager } from "../workflows/run-manager.js";
-import { repairAdaptiveThinkingOnManagedProfiles } from "../workspace/adaptive-thinking-repair.js";
+import { repairAdaptiveThinkingOnCloudProfiles } from "../workspace/adaptive-thinking-repair.js";
 import { ensureByokDefaultProfiles } from "../workspace/byok-default-profile-ensure.js";
 import { ensureCompleteCustomProfiles } from "../workspace/custom-profile-ensure.js";
 import { WORKSPACE_MIGRATIONS } from "../workspace/migrations/registry.js";
@@ -218,7 +218,7 @@ export async function runDaemon(): Promise<void> {
   // immediately after the transport binds, ahead of DB init and readiness,
   // so an urgent signal arriving the moment requests are admitted is not
   // decided on an empty cache.
-  void isPlatformClientConfigured().catch((err) =>
+  void isCloudClientConfigured().catch((err) =>
     log.warn({ err }, "Platform configured-probe warmup failed"),
   );
 
@@ -227,7 +227,7 @@ export async function runDaemon(): Promise<void> {
   // so a slow or unreachable gateway doesn't delay daemon startup (the
   // IPC call has a 3s connect + 5s call timeout that would otherwise
   // stall the critical path).
-  // After the async fetch resolves, reconcile flag-gated managed profiles
+  // After the async fetch resolves, reconcile flag-gated cloud profiles
   // (OS Beta): `seedInferenceProfiles()` runs synchronously earlier in boot
   // before flags are available, so this lands the profile on the same boot once
   // the flag cache is populated. When this reconcile is the call that mutates
@@ -523,23 +523,23 @@ export async function runDaemon(): Promise<void> {
     }
   } // end if (dbReady)
 
-  // Populate the managed-connection cache so the `14-connected-services`
+  // Populate the cloud-connection cache so the `14-connected-services`
   // bundled section (rendered by `renderConnectedServices()` in
-  // system-sections.ts) can include platform-managed OAuth connections
+  // system-sections.ts) can include cloud OAuth connections
   // (e.g. Twitter) in the system prompt from the first turn.  This is
   // an HTTP-only call with no DB dependency, so it runs regardless of
   // dbReady.  A periodic refresh keeps the cache current when users
-  // connect/disconnect managed providers while the assistant is running.
+  // connect/disconnect cloud providers while the assistant is running.
   void refreshManagedConnectionCache().catch((err) =>
     log.warn(
       { err },
-      "Managed connection cache refresh failed — continuing startup",
+      "Cloud connection cache refresh failed — continuing startup",
     ),
   );
   const MANAGED_CONNECTION_REFRESH_INTERVAL_MS = 5 * 60 * 1000; // 5 minutes
   setInterval(() => {
     void refreshManagedConnectionCache().catch((err) =>
-      log.warn({ err }, "Periodic managed connection cache refresh failed"),
+      log.warn({ err }, "Periodic cloud connection cache refresh failed"),
     );
   }, MANAGED_CONNECTION_REFRESH_INTERVAL_MS);
 
@@ -550,7 +550,7 @@ export async function runDaemon(): Promise<void> {
   const defaultConfigMerge = mergeDefaultWorkspaceConfig();
 
   // Seed inference profiles into the workspace config: active/advisor
-  // resolution plus, on off-platform hatches, `llm.default` and a
+  // resolution plus, on off-cloud hatches, `llm.default` and a
   // personal provider connection for the hatch provider.
   try {
     seedInferenceProfiles({
@@ -564,7 +564,7 @@ export async function runDaemon(): Promise<void> {
   }
 
   // Re-run the adaptive thinking repair after overlay merge + profile seeding.
-  // Workspace migration 097 enables adaptive thinking on managed profiles, but
+  // Workspace migration 097 enables adaptive thinking on cloud profiles, but
   // it runs before mergeDefaultWorkspaceConfig() which can overwrite the fix
   // with overlay profiles that have thinking disabled or absent. On-platform
   // instances where the overlay supplies "balanced" / "quality-optimized"
@@ -573,7 +573,7 @@ export async function runDaemon(): Promise<void> {
   // ensures thinking is enabled regardless of overlay ordering.
   if (defaultConfigMerge.hadOverlay) {
     try {
-      repairAdaptiveThinkingOnManagedProfiles(getWorkspaceDir());
+      repairAdaptiveThinkingOnCloudProfiles(getWorkspaceDir());
       log.info("Post-overlay adaptive thinking repair complete");
     } catch (err) {
       log.warn(
@@ -681,7 +681,7 @@ export async function runDaemon(): Promise<void> {
   // Refresh the consent cache regardless of dev mode so record-time telemetry
   // writes (which drop on a confirmed opt-out) work in dev too. The usage
   // telemetry reporter re-checks share_analytics on every flush, so dev still
-  // never sends telemetry to the platform. Fire-and-forget: startConsentRefresh()
+  // never sends telemetry to the cloud. Fire-and-forget: startConsentRefresh()
   // runs an immediate non-blocking refresh, so the startup hot path is never
   // blocked.
   startConsentRefresh();
@@ -704,10 +704,10 @@ export async function runDaemon(): Promise<void> {
 
   // Initialize providers before Qdrant so HTTP routes can begin accepting
   // requests while Qdrant initializes, then best-effort sync the workspace
-  // identity name and avatar to the platform record.
+  // identity name and avatar to the cloud record.
   await initializeProviders(config);
   syncWorkspaceIdentityToPlatform();
-  syncAvatarToPlatform();
+  syncAvatarToCloud();
 
   // Start the idle/LRU/memory-pressure sweep over the in-memory conversation
   // pool.

package/src/daemon/parse-actual-tokens-from-error.ts

@@ -11,7 +11,7 @@ import { isContextOverflowError } from "../providers/types.js";
  *   "too many input tokens: 242201 > 200000"                (OpenAI)
  *
  * The regex path remains a safety net for provider-adapter paths (e.g.
- * managed-proxy rewrappers) that surface untyped errors.
+ * cloud-proxy rewrappers) that surface untyped errors.
  *
  * Accepts a raw error object, an `Error` instance, or a plain string.
  * Returns the actual token count, or `null` when it cannot be determined.
@@ -38,7 +38,7 @@ export function parseActualTokensFromError(
 /**
  * Message patterns that identify a provider context-overflow rejection.
  * Covers the typed wrapper's source patterns plus common provider phrasings
- * that adapter paths (e.g. managed-proxy rewrappers) surface as untyped
+ * that adapter paths (e.g. cloud-proxy rewrappers) surface as untyped
  * errors:
  *   "prompt is too long: 242201 tokens > 200000 maximum"   (Anthropic)
  *   "too many input tokens: 242201 > 200000"                (OpenAI)
@@ -55,7 +55,7 @@ const OVERFLOW_MESSAGE_PATTERNS: readonly RegExp[] = [
 /**
  * Heuristic context-overflow check that also catches REWRAPPED provider
  * errors. `isContextOverflowError` only matches the typed
- * `ContextOverflowError` wrapper; adapter layers (managed-proxy rewrappers,
+ * `ContextOverflowError` wrapper; adapter layers (cloud-proxy rewrappers,
  * retry shims) can re-throw the same rejection as a plain `Error`, hiding the
  * typed signal. Callers that must not misread an overflow as a clean
  * no-output stop (e.g. the suppressed-compaction agent-wake path) should use

package/src/daemon/providers-setup.ts

@@ -1,5 +1,5 @@
-import { maybeDefaultSpeechToManaged } from "../config/managed-speech-defaults.js";
-import { rehydratePlatformCredentials } from "../config/platform-rehydration.js";
+import { rehydrateCloudCredentials } from "../config/cloud-rehydration.js";
+import { maybeDefaultSpeechToCloud } from "../config/cloud-speech-defaults.js";
 import type { AssistantConfig } from "../config/types.js";
 import { getMcpServerManager } from "../mcp/manager.js";
 import { startConfiguredMcpServers } from "../mcp/startup.js";
@@ -29,17 +29,17 @@ export async function initializeProvidersAndTools(
 ): Promise<void> {
   log.info("Daemon startup: initializing providers and tools");
 
-  // Rehydrate the platform base URL and IDs from the credential store so
-  // managed proxy activation survives assistant restarts. The in-memory
+  // Rehydrate the cloud base URL and IDs from the credential store so
+  // cloud proxy activation survives assistant restarts. The in-memory
   // overrides are normally only set by the secret-routes handlers at runtime.
-  await rehydratePlatformCredentials();
+  await rehydrateCloudCredentials();
 
   // Speech defaulting normally fires when the cloud credentials land
   // (secret-routes); evaluating it once per boot also covers assistants whose
   // connection predates that trigger, so voice works for every connected
   // assistant with no configured speech credentials. Idempotent, and detached
   // per the startup philosophy — must not block boot.
-  void maybeDefaultSpeechToManaged();
+  void maybeDefaultSpeechToCloud();
 
   await initializeProviders(config);
   // initializeTools() also loads workspace tool overrides from

package/src/daemon/resource-pressure-guard-lifecycle.ts

@@ -3,7 +3,7 @@
  *
  * Starts the guard at boot and defers the first sample onto a macrotask so it
  * never blocks startup, and stops the guard (cancelling any pending deferred
- * sample) on shutdown. When the guard is disabled (non-platform), no deferred
+ * sample) on shutdown. When the guard is disabled (non-cloud), no deferred
  * sample is scheduled.
  */
 import { getLogger } from "../util/logger.js";

package/src/daemon/resource-pressure-guard.ts

@@ -1,5 +1,5 @@
 /**
- * Sustained CPU/memory pressure guard for platform-hosted assistants.
+ * Sustained CPU/memory pressure guard for cloud-hosted assistants.
  *
  * Samples container CPU utilization and working-set memory against the
  * container's allocation on a fixed cadence and reports an `elevated` state
@@ -8,14 +8,14 @@
  * sustained run of samples below a lower clear threshold (hysteresis), so the
  * state never flaps while usage hovers near a threshold.
  *
- * The guard is platform-gated: off-platform there is no plan allocation to
+ * The guard is platform-gated: off-cloud there is no plan allocation to
  * measure against, so the guard stays disabled and samples nothing.
  */
 import {
   type ResourcePressureState,
   type ResourcePressureStatus,
 } from "../api/events/resource-pressure-status-changed.js";
-import { getIsPlatform } from "../config/env-registry.js";
+import { getIsCloud } from "../config/env-registry.js";
 import { broadcastMessage } from "../runtime/assistant-event-hub.js";
 import { getContainerCpuCores } from "../util/cgroup-cpu.js";
 import {
@@ -252,7 +252,7 @@ function defaultSampleMemory(): ResourcePressureMemorySample | null {
 }
 
 export function startResourcePressureGuard(): ResourcePressureStatus {
-  if (!getIsPlatform()) {
+  if (!getIsCloud()) {
     return cloneStatus(state.status);
   }
 
@@ -279,7 +279,7 @@ export function stopResourcePressureGuard(): void {
 export function evaluateResourcePressureNow(
   deps?: ResourcePressureSamplers,
 ): ResourcePressureStatus {
-  if (!getIsPlatform()) {
+  if (!getIsCloud()) {
     return cloneStatus(state.status);
   }
 
@@ -364,7 +364,7 @@ export function evaluateResourcePressureNow(
 }
 
 export function getResourcePressureStatus(): ResourcePressureStatus {
-  if (!getIsPlatform()) {
+  if (!getIsCloud()) {
     return cloneStatus(DISABLED_STATUS);
   }
   if (!state.status.enabled) {

package/src/daemon/shutdown-handlers.ts

@@ -1,4 +1,5 @@
 import { disposeAcpSessionManager } from "../acp/index.js";
+import { stopConsentRefresh } from "../cloud/consent-cache.js";
 import { stopConversationAutoArchive } from "../conversations/auto-archive.js";
 import { stopCes } from "../credential-execution/ces-runtime.js";
 import { stopHeartbeatService } from "../heartbeat/heartbeat-service.js";
@@ -13,7 +14,6 @@ import {
 import { getSqlite, isDbOpen, resetDb } from "../persistence/db-connection.js";
 import { shutdownEmbeddingBackends } from "../persistence/embeddings/embedding-backend.js";
 import { stopQdrantManager } from "../persistence/embeddings/qdrant-manager.js";
-import { stopConsentRefresh } from "../platform/consent-cache.js";
 import { HOOKS } from "../plugin-api/constants.js";
 import { runHook } from "../plugins/pipeline.js";
 import { stopRouteHost } from "../routes/control.js";

package/src/daemon/sqlite-corruption-watchdog.ts

@@ -7,11 +7,11 @@
  * `SQLITE_CORRUPT` / `SQLITE_NOTADB` error ("database disk image is malformed"
  * / "file is not a database") on the next statement that touches the damaged
  * page. Left unobserved, that damage is only noticed when a user hits a broken
- * feature; the platform has no fleet-wide view of how often it happens.
+ * feature; the cloud has no fleet-wide view of how often it happens.
  *
  * This watchdog makes corruption observable. It emits a `watchdog` telemetry
  * event with `check_name = "sqlite_corrupted"` — the same stream the event-loop
- * watchdog uses — but POSTs it *directly* to the platform ingest rather than
+ * watchdog uses — but POSTs it *directly* to the cloud ingest rather than
  * through the SQLite-backed watchdog buffer: a check that fires because SQLite
  * is unusable must not depend on writing to SQLite, and going direct keeps this
  * module out of the `db-connection` import graph. The direct path still honors
@@ -37,7 +37,7 @@ import { getLogger } from "../util/logger.js";
 const log = getLogger("sqlite-corruption-watchdog");
 
 /**
- * Check name emitted for SQLite corruption events. The platform's
+ * Check name emitted for SQLite corruption events. The cloud's
  * `watchdog__sqlite_corruption_daily` admin query filters `check_name` to
  * this exact string — it is the cross-repo contract, keep it stable.
  */

package/src/daemon/trust-context.ts

@@ -46,7 +46,7 @@ export const FALLBACK_TURN_TRUST: TrustContext = {
  * trustContext, and in an auth-disabled (local) deployment that unresolved
  * actor is the guardian. A *present* trustContext always reflects the real
  * actor — even under `DISABLE_HTTP_AUTH`, which is the standing config in
- * platform-managed deployments — so a resolved non-guardian channel actor is
+ * cloud-managed deployments — so a resolved non-guardian channel actor is
  * never elevated to guardian.
  *
  * When no trust context is available and auth is enabled (e.g. a desktop-only

package/src/desktop/desktop-automation-lease.ts

@@ -71,7 +71,7 @@ export class DesktopAutomationLease {
   private assertAvailable(): void {
     if (!this.deps.enabled()) {
       throw new Error(
-        "Virtual desktop automation is available only on enabled platform-hosted assistants",
+        "Virtual desktop automation is available only on enabled cloud-hosted assistants",
       );
     }
     if (!this.deps.ready()) {

package/src/desktop/desktop-browser-endpoint.ts

@@ -47,7 +47,7 @@ export function validateDesktopWebSocket(value: unknown, port: number): string {
   return url.href;
 }
 
-// Match the listener to the managed Chrome process, including occupied-port races.
+// Match the listener to the cloud Chrome process, including occupied-port races.
 export async function assertDesktopListener(
   pid: number,
   port: number,
@@ -67,9 +67,7 @@ export async function assertDesktopListener(
       return;
     }
   }
-  throw new Error(
-    "Debug listener does not belong to the managed desktop Chrome",
-  );
+  throw new Error("Debug listener does not belong to the cloud desktop Chrome");
 }
 
 export async function findDesktopBrowserPid(

package/src/desktop/desktop-computer-use-routing.test.ts

@@ -21,7 +21,7 @@ import { sensitiveToolReach } from "../tools/tool-approval-handler.js";
 import * as computerUse from "./desktop-computer-use.js";
 import { shouldUseVirtualDesktop } from "./virtual-desktop-feature.js";
 
-const originalPlatform = process.env.IS_PLATFORM;
+const originalPlatform = process.env.IS_CLOUD;
 const originalContainerized = process.env.IS_CONTAINERIZED;
 const context = {
   trustClass: "guardian" as const,
@@ -32,7 +32,7 @@ const context = {
 const spies: Array<{ mockRestore(): void }> = [];
 
 beforeEach(() => {
-  process.env.IS_PLATFORM = "true";
+  process.env.IS_CLOUD = "true";
   process.env.IS_CONTAINERIZED = "true";
   setOverridesForTesting({ "assistant-desktop": true });
 });
@@ -43,9 +43,9 @@ afterEach(() => {
   }
   setOverridesForTesting({});
   if (originalPlatform === undefined) {
-    delete process.env.IS_PLATFORM;
+    delete process.env.IS_CLOUD;
   } else {
-    process.env.IS_PLATFORM = originalPlatform;
+    process.env.IS_CLOUD = originalPlatform;
   }
   if (originalContainerized === undefined) {
     delete process.env.IS_CONTAINERIZED;
@@ -135,7 +135,7 @@ test("native, unidentified and non-guardian turns do not select the virtual desk
   expect(shouldUseVirtualDesktop({ ...context, trustClass: "unknown" })).toBe(
     false,
   );
-  process.env.IS_PLATFORM = "false";
+  process.env.IS_CLOUD = "false";
   expect(shouldUseVirtualDesktop(context)).toBe(false);
 });
 
@@ -203,7 +203,7 @@ for (const input of [
 for (const platform of [true, false]) {
   for (const clientOs of ["web", "macos", "windows", "linux"] as const) {
     test(`bundled tool policy and dispatch agree for ${platform ? "platform" : "local"} ${clientOs}`, async () => {
-      process.env.IS_PLATFORM = String(platform);
+      process.env.IS_CLOUD = String(platform);
       const skillDir = join(getBundledSkillsDir(), "computer-use");
       const manifest = JSON.parse(
         readFileSync(join(skillDir, "TOOLS.json"), "utf8"),

package/src/desktop/desktop-stream-bridge.test.ts

@@ -91,12 +91,12 @@ function slotIsFree(manager: DesktopSessionManager): boolean {
 describe("DesktopStreamBridge", () => {
   test("streams without flag or filesystem checks after connecting", async () => {
     const originalContainerized = process.env.IS_CONTAINERIZED;
-    const originalPlatform = process.env.IS_PLATFORM;
+    const originalPlatform = process.env.IS_CLOUD;
     const h = newFakeDesktop({ profileDir });
     const isEnabled = mock(isVirtualDesktopEnabled);
     const b = newBridge(h.manager, async () => {}, isEnabled);
     process.env.IS_CONTAINERIZED = "true";
-    process.env.IS_PLATFORM = "true";
+    process.env.IS_CLOUD = "true";
     setOverridesForTesting({ "assistant-desktop": true });
     try {
       b.connectNow();
@@ -139,9 +139,9 @@ describe("DesktopStreamBridge", () => {
         process.env.IS_CONTAINERIZED = originalContainerized;
       }
       if (originalPlatform === undefined) {
-        delete process.env.IS_PLATFORM;
+        delete process.env.IS_CLOUD;
       } else {
-        process.env.IS_PLATFORM = originalPlatform;
+        process.env.IS_CLOUD = originalPlatform;
       }
     }
   });

package/src/desktop/desktop-stream-bridge.ts

@@ -176,7 +176,7 @@ export class DesktopStreamBridge {
     if (!this.isEnabled()) {
       this.fail(
         DESKTOP_CLOSE.unavailable,
-        "Virtual desktop is available only on enabled platform-hosted assistants",
+        "Virtual desktop is available only on enabled cloud-hosted assistants",
       );
       return false;
     }

package/src/desktop/{virtual-desktop-platform.test.ts → virtual-desktop-cloud.test.ts}

@@ -5,7 +5,7 @@ import { shouldUseVirtualDesktopBrowser } from "../browser/virtual-desktop-targe
 import { executeDesktopBrowserOperation } from "./desktop-browser-operations.js";
 import { desktopDependencies } from "./desktop-dependencies.js";
 
-const originalPlatform = process.env.IS_PLATFORM;
+const originalPlatform = process.env.IS_CLOUD;
 const originalContainerized = process.env.IS_CONTAINERIZED;
 const context = {
   workingDir: "/tmp",
@@ -19,7 +19,7 @@ let status: ReturnType<typeof spyOn<typeof desktopDependencies, "getStatus">>;
 
 beforeEach(() => {
   process.env.IS_CONTAINERIZED = "true";
-  process.env.IS_PLATFORM = "false";
+  process.env.IS_CLOUD = "false";
   setOverridesForTesting({ "assistant-desktop": true });
   status = spyOn(desktopDependencies, "getStatus").mockReturnValue({
     state: "ready",
@@ -30,9 +30,9 @@ afterEach(() => {
   status.mockRestore();
   setOverridesForTesting({});
   if (originalPlatform === undefined) {
-    delete process.env.IS_PLATFORM;
+    delete process.env.IS_CLOUD;
   } else {
-    process.env.IS_PLATFORM = originalPlatform;
+    process.env.IS_CLOUD = originalPlatform;
   }
   if (originalContainerized === undefined) {
     delete process.env.IS_CONTAINERIZED;
@@ -45,12 +45,12 @@ test("self-hosted Docker cannot automatically select or explicitly control virtu
   expect(shouldUseVirtualDesktopBrowser(undefined, {}, context)).toBe(false);
   await expect(
     executeDesktopBrowserOperation("snapshot", {}, context),
-  ).rejects.toThrow("only on enabled platform-hosted assistants");
+  ).rejects.toThrow("only on enabled cloud-hosted assistants");
   expect(status).not.toHaveBeenCalled();
 });
 
 test("platform web conversations select virtual Chrome even when image components are missing", () => {
-  process.env.IS_PLATFORM = "true";
+  process.env.IS_CLOUD = "true";
   expect(shouldUseVirtualDesktopBrowser(undefined, {}, context)).toBe(true);
   status.mockReturnValue({ state: "failed" });
   expect(shouldUseVirtualDesktopBrowser(undefined, {}, context)).toBe(true);

package/src/desktop/virtual-desktop-feature.ts

@@ -1,25 +1,25 @@
 import { isAssistantFeatureFlagEnabled } from "../config/assistant-feature-flags.js";
-import { getIsContainerized, getIsPlatform } from "../config/env-registry.js";
+import { getIsCloud, getIsContainerized } from "../config/env-registry.js";
 import type { AssistantConfig } from "../config/schema.js";
 import type { ToolContext } from "../tools/types.js";
 
 const VIRTUAL_DESKTOP_FLAG = "assistant-desktop" as const;
 
-export function isVirtualDesktopPlatform(
+export function isVirtualDesktopCloud(
   containerized: boolean = getIsContainerized(),
-  platformHosted: boolean = getIsPlatform(),
+  cloudHosted: boolean = getIsCloud(),
 ): boolean {
-  return platformHosted && containerized;
+  return cloudHosted && containerized;
 }
 
-/** Gates desktop streaming and control to enabled, platform-hosted containers. */
+/** Gates desktop streaming and control to enabled, cloud-hosted containers. */
 export function isVirtualDesktopEnabled(
   config?: AssistantConfig,
   containerized: boolean = getIsContainerized(),
-  platformHosted: boolean = getIsPlatform(),
+  cloudHosted: boolean = getIsCloud(),
 ): boolean {
   return (
-    isVirtualDesktopPlatform(containerized, platformHosted) &&
+    isVirtualDesktopCloud(containerized, cloudHosted) &&
     isAssistantFeatureFlagEnabled(VIRTUAL_DESKTOP_FLAG, config)
   );
 }

package/src/email/byo-email-credential.ts

@@ -1,6 +1,6 @@
 /**
  * "Your own" (BYO) email providers: the assistant sends and receives email
- * through the user's own provider account instead of a platform-managed
+ * through the user's own provider account instead of a cloud-managed
  * inbox. Configuration is the provider's stored `api_key` credential;
  * inbound arrives through the gateway's per-provider webhook routes
  * (`gateway/src/http/routes/resend-webhook.ts`, `mailgun-webhook.ts`).

package/src/email/registered-inbox.test.ts

@@ -1,6 +1,6 @@
 /**
  * Tests for the shared registered-inbox reader: the single answer to "does
- * this assistant have a managed inbox?", read from the platform
+ * this assistant have a cloud inbox?", read from the cloud
  * email-addresses API (the only writer of managed registrations).
  */
 import { beforeEach, describe, expect, mock, test } from "bun:test";
@@ -9,14 +9,14 @@ import { beforeEach, describe, expect, mock, test } from "bun:test";
 // Mocks, set up before importing the module under test
 // ---------------------------------------------------------------------------
 
-let mockPlatformAssistantId: string | null;
+let mockCloudAssistantId: string | null;
 let mockResponse: { ok: boolean; status: number; body: unknown };
 let mockFetchThrows: boolean;
 let mockCreateThrows: boolean;
 let fetchCallCount: number;
 
-mock.module("../platform/client.js", () => ({
-  CadetPlatformClient: {
+mock.module("../cloud/client.js", () => ({
+  CadetCloudClient: {
     create: async () => {
       if (mockCreateThrows) {
         throw new Error("credential store unavailable");
@@ -27,7 +27,7 @@ mock.module("../platform/client.js", () => ({
 }));
 
 const clientStub = () => ({
-  platformAssistantId: mockPlatformAssistantId,
+  cloudAssistantId: mockCloudAssistantId,
   fetch: async (_path: string) => {
     fetchCallCount += 1;
     if (mockFetchThrows) {
@@ -45,15 +45,15 @@ const clientStub = () => ({
 // Import after mocks
 // ---------------------------------------------------------------------------
 
-import { CadetPlatformClient } from "../platform/client.js";
+import { CadetCloudClient } from "../cloud/client.js";
 import {
   invalidateRegisteredInboxCache,
   listEmailAddresses,
   resolveRegisteredInbox,
 } from "./registered-inbox.js";
 
-async function testClient(): Promise<CadetPlatformClient> {
-  const client = await CadetPlatformClient.create();
+async function testClient(): Promise<CadetCloudClient> {
+  const client = await CadetCloudClient.create();
   if (!client) {
     throw new Error("mocked create returned null");
   }
@@ -66,7 +66,7 @@ async function testClient(): Promise<CadetPlatformClient> {
 
 describe("resolveRegisteredInbox", () => {
   beforeEach(() => {
-    mockPlatformAssistantId = "assistant-test-id";
+    mockCloudAssistantId = "assistant-test-id";
     mockResponse = { ok: true, status: 200, body: { count: 0, results: [] } };
     mockFetchThrows = false;
     mockCreateThrows = false;
@@ -85,7 +85,7 @@ describe("resolveRegisteredInbox", () => {
     });
   });
 
-  test("registered when the platform lists an address", async () => {
+  test("registered when the cloud lists an address", async () => {
     mockResponse = {
       ok: true,
       status: 200,
@@ -103,14 +103,14 @@ describe("resolveRegisteredInbox", () => {
     });
   });
 
-  test("none when the platform lists no addresses", async () => {
+  test("none when the cloud lists no addresses", async () => {
     const state = await resolveRegisteredInbox();
 
     expect(state).toEqual({ status: "none" });
   });
 
   test("no_platform when platform credentials are missing", async () => {
-    mockPlatformAssistantId = null;
+    mockCloudAssistantId = null;
 
     const state = await resolveRegisteredInbox();
 
@@ -125,7 +125,7 @@ describe("resolveRegisteredInbox", () => {
     expect(state).toEqual({ status: "unavailable", detail: "HTTP 503" });
   });
 
-  test("unavailable when the platform fetch throws", async () => {
+  test("unavailable when the cloud fetch throws", async () => {
     mockFetchThrows = true;
 
     const state = await resolveRegisteredInbox();
@@ -205,7 +205,7 @@ describe("resolveRegisteredInbox", () => {
 
 describe("listEmailAddresses", () => {
   beforeEach(() => {
-    mockPlatformAssistantId = "assistant-test-id";
+    mockCloudAssistantId = "assistant-test-id";
     mockResponse = { ok: true, status: 200, body: { count: 0, results: [] } };
     mockFetchThrows = false;
     mockCreateThrows = false;
@@ -231,7 +231,7 @@ describe("listEmailAddresses", () => {
     });
   });
 
-  test("returns the platform's rows with ids", async () => {
+  test("returns the cloud's rows with ids", async () => {
     mockResponse = {
       ok: true,
       status: 200,
@@ -246,7 +246,7 @@ describe("listEmailAddresses", () => {
     });
   });
 
-  test("carries the platform's status on a non-ok response", async () => {
+  test("carries the cloud's status on a non-ok response", async () => {
     mockResponse = { ok: false, status: 503, body: { detail: "boom" } };
 
     const list = await listEmailAddresses(await testClient());