@mycadet/assistant 0.12.7 → 0.12.8

package/src/runtime/routes/__tests__/oauth-proxy-routes.test.ts

@@ -11,19 +11,19 @@
 
 import { beforeEach, describe, expect, mock, test } from "bun:test";
 
+import type { CadetCloudClient } from "../../../cloud/client.js";
+import {
+  CloudOAuthConnection,
+  CredentialRequiredError,
+  InsufficientBalanceError,
+  ProviderUnreachableError,
+} from "../../../oauth/cloud-connection.js";
 import type {
   OAuthConnection,
   OAuthConnectionRequest,
   OAuthConnectionResponse,
 } from "../../../oauth/connection.js";
 import { decodeOAuthResponseBytes } from "../../../oauth/connection.js";
-import {
-  CredentialRequiredError,
-  InsufficientBalanceError,
-  PlatformOAuthConnection,
-  ProviderUnreachableError,
-} from "../../../oauth/platform-connection.js";
-import type { CadetPlatformClient } from "../../../platform/client.js";
 import { resolveScopeProfile } from "../../auth/scopes.js";
 import type { AuthContext } from "../../auth/types.js";
 import { routeDefinitionsToHTTPRoutes } from "../http-adapter.js";
@@ -70,29 +70,29 @@ const byoConnection: OAuthConnection = {
 };
 
 /**
- * A real managed connection over a stub platform, for the paths whose behavior
- * lives inside `PlatformOAuthConnection` rather than in the route.
+ * A real cloud connection over a stub platform, for the paths whose behavior
+ * lives inside `CloudOAuthConnection` rather than in the route.
  */
 function realManagedConnection(
   fetchImpl: (path: string, init?: RequestInit) => Promise<Response>,
-): PlatformOAuthConnection {
-  return new PlatformOAuthConnection({
+): CloudOAuthConnection {
+  return new CloudOAuthConnection({
     id: "conn-managed",
     provider: "stripe_link",
     externalId: "ext-1",
     accountInfo: null,
     connectionId: "platform-conn-1",
     client: {
-      platformAssistantId: "asst-1",
+      cloudAssistantId: "asst-1",
       fetch: fetchImpl,
-    } as unknown as CadetPlatformClient,
+    } as unknown as CadetCloudClient,
   });
 }
 
-/** Satisfies the route's `instanceof PlatformOAuthConnection` check. */
+/** Satisfies the route's `instanceof CloudOAuthConnection` check. */
 function managedConnection(): OAuthConnection {
   return Object.assign(
-    Object.create(PlatformOAuthConnection.prototype) as OAuthConnection,
+    Object.create(CloudOAuthConnection.prototype) as OAuthConnection,
     {
       id: "conn-managed",
       provider: "stripe_link",
@@ -145,15 +145,15 @@ mock.module("../../../oauth/connection-resolver.js", () => ({
 
 // Spread the real module so the rest of the import graph keeps its env
 // readers; only the two auth-bypass readings are pinned. They move
-// independently: DISABLE_HTTP_AUTH is set on any host, the platform-managed
+// independently: DISABLE_HTTP_AUTH is set on any host, the cloud-managed
 // bypass only on a vembda pod.
 let httpAuthDisabled = false;
-let platformAuthBypass = false;
+let cloudAuthBypass = false;
 const env = await import("../../../config/env.js");
 mock.module("../../../config/env.js", () => ({
   ...env,
   isHttpAuthDisabled: () => httpAuthDisabled,
-  isPlatformAuthBypassActive: () => platformAuthBypass,
+  isCloudAuthBypassActive: () => cloudAuthBypass,
 }));
 
 const { handleOAuthProxy, ROUTES } = await import("../oauth-proxy-routes.js");
@@ -271,7 +271,7 @@ function requireCaptured(): OAuthConnectionRequest {
 
 beforeEach(() => {
   httpAuthDisabled = false;
-  platformAuthBypass = false;
+  cloudAuthBypass = false;
   captured = undefined;
   upstreamBytes = undefined;
   requestError = undefined;
@@ -322,7 +322,7 @@ describe("path and query fidelity", () => {
     const req = requireCaptured();
     // Byte-exact for a provider that signs the query it receives.
     expect(req.rawQuery).toBe("?a=1&b=2&a=3&q=x%20y&flag");
-    // The parsed form is all a managed connection can send.
+    // The parsed form is all a cloud connection can send.
     expect(req.query).toEqual({ a: ["1", "3"], b: "2", q: "x y", flag: "" });
   });
 
@@ -364,7 +364,7 @@ describe("method passthrough", () => {
     expect((await response.arrayBuffer()).byteLength).toBe(0);
   });
 
-  test("rejects HEAD against a managed connection", async () => {
+  test("rejects HEAD against a cloud connection", async () => {
     resolution = { ...resolution, connection: managedConnection() };
 
     const response = await callProxy({ method: "HEAD" });
@@ -391,7 +391,7 @@ describe("write safety", () => {
     });
   }
 
-  test("a managed write is not replayed after a 502", async () => {
+  test("a cloud write is not replayed after a 502", async () => {
     let attempts = 0;
     resolution = {
       ...resolution,
@@ -403,7 +403,7 @@ describe("write safety", () => {
 
     const response = await callProxy({ method: "POST", body: "{}" });
 
-    // The platform answers 502 only after calling the provider, so a replay
+    // The cloud answers 502 only after calling the provider, so a replay
     // could land the write twice.
     expect(attempts).toBe(1);
     expect(response.status).toBe(502);
@@ -564,7 +564,7 @@ describe("header handling", () => {
     ["GET", "Stripe-Version"],
     ["GET", "X-Custom-Option"],
   ]) {
-    test(`rejects managed ${method} with ${name} before the platform call`, async () => {
+    test(`rejects managed ${method} with ${name} before the cloud call`, async () => {
       let attempts = 0;
       resolution.connection = realManagedConnection(async () => {
         attempts++;
@@ -930,18 +930,18 @@ describe("grant binding", () => {
     expect(resolverCalls).toHaveLength(0);
   });
 
-  test("a platform-managed pod skips the comparison it has no subject for", async () => {
+  test("a cloud-managed pod skips the comparison it has no subject for", async () => {
     // The pod's daemon discards the token and synthesizes a context, so the
     // grant's subject never reaches the handler.
     httpAuthDisabled = true;
-    platformAuthBypass = true;
+    cloudAuthBypass = true;
 
     const response = await callProxy({ subject: "actor:self:dev-bypass" });
 
     expect(response.status).toBe(200);
   });
 
-  test("DISABLE_HTTP_AUTH off a platform pod still binds the grant", async () => {
+  test("DISABLE_HTTP_AUTH off a cloud pod still binds the grant", async () => {
     httpAuthDisabled = true;
 
     const response = await callProxy({ subject: "actor:self:dev-bypass" });

package/src/runtime/routes/__tests__/plugins-routes.test.ts

@@ -119,7 +119,7 @@ import {
   type UpgradePluginOptions,
 } from "../../../cli/lib/upgrade-plugin.js";
 
-// Spy on the route logger so tests can assert that a platform-catalog outage
+// Spy on the route logger so tests can assert that a cloud-catalog outage
 // is recorded before it is mapped to a client 503. The catalog fetcher and the
 // transport adapters swallow the failure otherwise (`RouteError` → wire error,
 // no capture), so the log line is the only trace an operator gets — assert it.
@@ -1626,8 +1626,8 @@ describe("POST /v1/plugins/install", () => {
     // The default (no-pin) path reads the same gated catalog `search`
     // advertises and installs from a trusted pre-resolved source — no direct
     // `plugins/marketplace.json` fetch (the pin/marketplace path is untouched).
-    const prev = process.env.CADET_DISABLE_PLATFORM;
-    process.env.CADET_DISABLE_PLATFORM = "true";
+    const prev = process.env.CADET_DISABLE_CLOUD;
+    process.env.CADET_DISABLE_CLOUD = "true";
     try {
       installSpy.mockImplementation(async (opts) => trustedInstallResult(opts));
 
@@ -1660,9 +1660,9 @@ describe("POST /v1/plugins/install", () => {
       });
     } finally {
       if (prev === undefined) {
-        delete process.env.CADET_DISABLE_PLATFORM;
+        delete process.env.CADET_DISABLE_CLOUD;
       } else {
-        process.env.CADET_DISABLE_PLATFORM = prev;
+        process.env.CADET_DISABLE_CLOUD = prev;
       }
     }
   });

package/src/runtime/routes/__tests__/ps-routes.test.ts

@@ -22,8 +22,8 @@ mock.module("../../../util/process-tree.js", () => ({
   },
   buildProcessTree: (_procs: ProcInfo[], rootPid: number): ProcTreeNode => ({
     pid: rootPid,
-    name: "assistant.ts",
-    command: "bun run assistant.ts",
+    name: "daemon-main",
+    command: "bun run /app/daemon/main.ts",
     origin: "workspace",
     children: [
       {
@@ -81,7 +81,9 @@ describe("ps route handler", () => {
 
     expect(processes).toHaveLength(1);
     const root = processes[0];
-    expect(root.name).toBe("assistant.ts");
+    // The route must surface the daemon's node as "assistant", not the
+    // entry-script name the tree builder derives ("daemon-main").
+    expect(root.name).toBe("assistant");
     expect(root.status).toBe("running");
     expect(root.info).toBe(`pid ${process.pid}`);
     expect(root.children).toHaveLength(2);

package/src/runtime/routes/__tests__/roadmap-routes.test.ts

@@ -9,14 +9,14 @@ import { afterEach, beforeEach, describe, expect, mock, test } from "bun:test";
 import { UnprocessableEntityError } from "../errors.js";
 import type { RouteDefinition } from "../types.js";
 
-let platformBaseUrl = "https://cloud.mycadet.ai";
+let cloudBaseUrl = "https://cloud.mycadet.ai";
 
 // Spread the real module: replacing it wholesale strips the other exports the
 // route graph pulls in.
 const actualEnv = await import("../../../config/env.js");
 mock.module("../../../config/env.js", () => ({
   ...actualEnv,
-  getPlatformBaseUrl: () => platformBaseUrl,
+  getCloudBaseUrl: () => cloudBaseUrl,
 }));
 
 import { useMemorySecureKeys } from "../../../__tests__/helpers/secure-keys.js";
@@ -90,7 +90,7 @@ const UPSTREAM_ITEM = {
 
 beforeEach(() => {
   secureKeys[ASSISTANT_API_KEY] = "assistant-key";
-  platformBaseUrl = "https://cloud.mycadet.ai";
+  cloudBaseUrl = "https://cloud.mycadet.ai";
   calls = [];
   process.env.CADET_MARKETING_URL = "https://marketing.test";
   process.env.CADET_WEB_URL = "https://web.test";
@@ -113,8 +113,8 @@ describe("which deployment the roadmap calls reach", () => {
     expect(calls[0].url).toBe("https://marketing.mycadet.ai/v1/roadmap");
   });
 
-  // The deployment is judged by the platform that issued the key, never by
-  // CADET_ENVIRONMENT: unset, that variable means dev to getPlatformBaseUrl
+  // The deployment is judged by the cloud that issued the key, never by
+  // CADET_ENVIRONMENT: unset, that variable means dev to getCloudBaseUrl
   // and local to every launcher, so trusting it would let exactly the assistant
   // with no label post to the real roadmap.
   test.each([
@@ -124,7 +124,7 @@ describe("which deployment the roadmap calls reach", () => {
   ])(
     "an unconfigured %s assistant refuses to touch the public roadmap",
     async (baseUrl) => {
-      platformBaseUrl = baseUrl;
+      cloudBaseUrl = baseUrl;
       delete process.env.CADET_MARKETING_URL;
       delete process.env.CADET_ENVIRONMENT;
       stubFetch({ items: [], total: 0 });
@@ -135,7 +135,7 @@ describe("which deployment the roadmap calls reach", () => {
   );
 
   test("CADET_ENVIRONMENT=production does not by itself unlock the real roadmap", async () => {
-    platformBaseUrl = "https://dev-cloud.mycadet.ai";
+    cloudBaseUrl = "https://dev-cloud.mycadet.ai";
     delete process.env.CADET_MARKETING_URL;
     process.env.CADET_ENVIRONMENT = "production";
     stubFetch({ items: [], total: 0 });
@@ -146,7 +146,7 @@ describe("which deployment the roadmap calls reach", () => {
 
   test("item links point at the deployment the item was read from", async () => {
     // Labelled staging, but authenticating against production: the link has to
-    // follow the platform, or it points at a staging page for a real item.
+    // follow the cloud, or it points at a staging page for a real item.
     process.env.CADET_ENVIRONMENT = "staging";
     delete process.env.CADET_WEB_URL;
     delete process.env.CADET_MARKETING_URL;
@@ -160,7 +160,7 @@ describe("which deployment the roadmap calls reach", () => {
   // A self-hosted platform is not in the seed table, so nothing is known about
   // it: naming its roadmap API says nothing about where its items are rendered.
   test("a self-hosted deployment must name its web origin too", async () => {
-    platformBaseUrl = "https://platform.self-hosted.example";
+    cloudBaseUrl = "https://platform.self-hosted.example";
     delete process.env.CADET_WEB_URL;
     stubFetch({ items: [], total: 0 });
 
@@ -169,7 +169,7 @@ describe("which deployment the roadmap calls reach", () => {
   });
 
   test("a self-hosted deployment works once both endpoints are named", async () => {
-    platformBaseUrl = "https://platform.self-hosted.example";
+    cloudBaseUrl = "https://platform.self-hosted.example";
     stubFetch({ items: [UPSTREAM_ITEM], total: 1 });
 
     const result = (await list({})) as { items: { url: string }[] };
@@ -178,7 +178,7 @@ describe("which deployment the roadmap calls reach", () => {
     expect(result.items[0].url).toBe("https://web.test/roadmap/dark-mode");
   });
 
-  test("a platform change mid-flight cannot fail a create that already published", async () => {
+  test("a cloud change mid-flight cannot fail a create that already published", async () => {
     delete process.env.CADET_MARKETING_URL;
     delete process.env.CADET_WEB_URL;
     globalThis.fetch = (async (
@@ -186,9 +186,9 @@ describe("which deployment the roadmap calls reach", () => {
       _init?: RequestInit,
     ): Promise<Response> => {
       // The item is published. Only now is the assistant repointed at a
-      // platform with no roadmap deployment, as a concurrent
-      // `platform_base_url` write would do.
-      platformBaseUrl = "https://platform.self-hosted.example";
+      // platform with no roadmap deployment, as a concurrent cloud base
+      // URL change would do.
+      cloudBaseUrl = "https://platform.self-hosted.example";
       return new Response(
         JSON.stringify({
           slug: "dark-mode",
@@ -207,7 +207,7 @@ describe("which deployment the roadmap calls reach", () => {
   });
 
   test("a named endpoint is honored on any deployment", async () => {
-    platformBaseUrl = "https://dev-cloud.mycadet.ai";
+    cloudBaseUrl = "https://dev-cloud.mycadet.ai";
     stubFetch({ items: [], total: 0 });
 
     await list({});

package/src/runtime/routes/__tests__/webhook-routes.test.ts

@@ -10,7 +10,7 @@ import { InternalError, UnprocessableEntityError } from "../errors.js";
 let isPlatform = false;
 let tunnelWebhooksEnabled = false;
 let config: Record<string, unknown> = {};
-let platformContextEnabled = false;
+let cloudContextEnabled = false;
 let registerCallbackRouteError: Error | undefined;
 
 let localWebhookRouteRegistered = true;
@@ -34,7 +34,7 @@ const registerLocalWebhookRouteMock = mock(
 const actualEnvRegistry = await import("../../../config/env-registry.js");
 mock.module("../../../config/env-registry.js", () => ({
   ...actualEnvRegistry,
-  getIsPlatform: () => isPlatform,
+  getIsCloud: () => isPlatform,
 }));
 
 const actualLoader = await import("../../../config/loader.js");
@@ -50,16 +50,16 @@ mock.module("../../../inbound/tunnel-webhooks-gate.js", () => ({
   isTunnelWebhooksEnabled: () => tunnelWebhooksEnabled,
 }));
 
-mock.module("../../../inbound/platform-callback-registration.js", () => ({
+mock.module("../../../inbound/cloud-callback-registration.js", () => ({
   registerCallbackRoute: registerCallbackRouteMock,
   registerLocalWebhookRoute: registerLocalWebhookRouteMock,
-  resolvePlatformCallbackRegistrationContext: async () => ({
+  resolveCloudCallbackRegistrationContext: async () => ({
     isPlatform,
-    platformBaseUrl: "https://cloud.mycadet.ai",
-    assistantId: platformContextEnabled ? "assistant-123" : "",
-    hasAssistantApiKey: platformContextEnabled,
-    authHeader: platformContextEnabled ? "Api-Key secret" : null,
-    enabled: platformContextEnabled,
+    cloudBaseUrl: "https://cloud.mycadet.ai",
+    assistantId: cloudContextEnabled ? "assistant-123" : "",
+    hasAssistantApiKey: cloudContextEnabled,
+    authHeader: cloudContextEnabled ? "Api-Key secret" : null,
+    enabled: cloudContextEnabled,
   }),
 }));
 
@@ -77,16 +77,16 @@ describe("webhooks_register callback URL resolution", () => {
     isPlatform = false;
     tunnelWebhooksEnabled = false;
     config = {};
-    platformContextEnabled = false;
+    cloudContextEnabled = false;
     registerCallbackRouteError = undefined;
     localWebhookRouteRegistered = true;
     registerCallbackRouteMock.mockClear();
     registerLocalWebhookRouteMock.mockClear();
   });
 
-  test("platform pods register with the platform gateway", async () => {
+  test("cloud pods register with the cloud gateway", async () => {
     isPlatform = true;
-    platformContextEnabled = true;
+    cloudContextEnabled = true;
 
     expect(await register({ type: "telegram" })).toEqual({
       callbackUrl: "https://tunnel.mycadet.ai/assistant-123/webhooks/telegram",
@@ -97,10 +97,10 @@ describe("webhooks_register callback URL resolution", () => {
     expect(registerLocalWebhookRouteMock).not.toHaveBeenCalled();
   });
 
-  // The bug: a local assistant that IS connected to the platform used to fall
+  // The bug: a local assistant that IS connected to the cloud used to fall
   // through to the self-hosted branch and 422 when it had no public ingress.
-  test("platform-connected local assistant with no ingress gets the platform callback URL", async () => {
-    platformContextEnabled = true;
+  test("platform-connected local assistant with no ingress gets the cloud callback URL", async () => {
+    cloudContextEnabled = true;
 
     expect(await register({ type: "telegram" })).toEqual({
       callbackUrl: "https://tunnel.mycadet.ai/assistant-123/webhooks/telegram",
@@ -118,7 +118,7 @@ describe("webhooks_register callback URL resolution", () => {
   test("tunnel-webhooks on: a pod claims the subpath and uses the published URL", async () => {
     isPlatform = true;
     tunnelWebhooksEnabled = true;
-    platformContextEnabled = true;
+    cloudContextEnabled = true;
     config = {
       ingress: { publicBaseUrl: "https://tunnel.mycadet.ai/assistant-123" },
     };
@@ -137,10 +137,10 @@ describe("webhooks_register callback URL resolution", () => {
     expect(registerCallbackRouteMock).not.toHaveBeenCalled();
   });
 
-  test("tunnel-webhooks on: a refused claim falls back to the platform", async () => {
+  test("tunnel-webhooks on: a refused claim falls back to the cloud", async () => {
     isPlatform = true;
     tunnelWebhooksEnabled = true;
-    platformContextEnabled = true;
+    cloudContextEnabled = true;
     localWebhookRouteRegistered = false;
     config = {
       ingress: { publicBaseUrl: "https://tunnel.mycadet.ai/assistant-123" },
@@ -153,10 +153,10 @@ describe("webhooks_register callback URL resolution", () => {
     expect(registerLocalWebhookRouteMock).toHaveBeenCalled();
   });
 
-  test("tunnel-webhooks on: a pod with no published URL still registers with the platform", async () => {
+  test("tunnel-webhooks on: a pod with no published URL still registers with the cloud", async () => {
     isPlatform = true;
     tunnelWebhooksEnabled = true;
-    platformContextEnabled = true;
+    cloudContextEnabled = true;
 
     expect(await register({ type: "telegram" })).toMatchObject({
       callbackUrl: "https://tunnel.mycadet.ai/assistant-123/webhooks/telegram",
@@ -165,10 +165,10 @@ describe("webhooks_register callback URL resolution", () => {
     expect(registerLocalWebhookRouteMock).not.toHaveBeenCalled();
   });
 
-  test("tunnel-webhooks on: a pod with ingress disabled falls back to the platform", async () => {
+  test("tunnel-webhooks on: a pod with ingress disabled falls back to the cloud", async () => {
     isPlatform = true;
     tunnelWebhooksEnabled = true;
-    platformContextEnabled = true;
+    cloudContextEnabled = true;
     config = { ingress: { enabled: false } };
 
     expect(await register({ type: "telegram" })).toMatchObject({
@@ -199,7 +199,7 @@ describe("webhooks_register callback URL resolution", () => {
   // A logged-in local assistant holds platform credentials for the LLM proxy,
   // so credential presence must not override an explicitly configured tunnel.
   test("a configured publicBaseUrl wins over platform connectivity", async () => {
-    platformContextEnabled = true;
+    cloudContextEnabled = true;
     config = { ingress: { publicBaseUrl: "https://abc.ngrok.io" } };
 
     expect(await register({ type: "telegram" })).toMatchObject({
@@ -214,7 +214,7 @@ describe("webhooks_register callback URL resolution", () => {
   // a tunneled platform-connected assistant already resolves to a stable
   // platform-owned URL through the ingress tier.
   test("a Tunnel-managed publicBaseUrl resolves through the ingress tier", async () => {
-    platformContextEnabled = true;
+    cloudContextEnabled = true;
     config = {
       ingress: {
         publicBaseUrl: "https://tunnel.mycadet.ai/assistant-123",
@@ -231,8 +231,8 @@ describe("webhooks_register callback URL resolution", () => {
     });
   });
 
-  test("explicitly disabled ingress is not routed around via the platform", async () => {
-    platformContextEnabled = true;
+  test("explicitly disabled ingress is not routed around via the cloud", async () => {
+    cloudContextEnabled = true;
     config = { ingress: { enabled: false } };
 
     await expect(register({ type: "telegram" })).rejects.toBeInstanceOf(
@@ -241,8 +241,8 @@ describe("webhooks_register callback URL resolution", () => {
     expect(registerCallbackRouteMock).not.toHaveBeenCalled();
   });
 
-  test("the source identifier is forwarded to the platform registration", async () => {
-    platformContextEnabled = true;
+  test("the source identifier is forwarded to the cloud registration", async () => {
+    cloudContextEnabled = true;
 
     await register({ type: "telegram", source: "@my_bot" });
 
@@ -254,7 +254,7 @@ describe("webhooks_register callback URL resolution", () => {
   });
 
   test("a failed platform registration surfaces as a 500", async () => {
-    platformContextEnabled = true;
+    cloudContextEnabled = true;
     registerCallbackRouteError = new Error(
       "Platform callback route registration failed (HTTP 502)",
     );
@@ -265,7 +265,7 @@ describe("webhooks_register callback URL resolution", () => {
   });
 
   test("a missing platform registration context surfaces as a 422", async () => {
-    platformContextEnabled = true;
+    cloudContextEnabled = true;
     registerCallbackRouteError = new Error(
       "Platform callbacks not available — missing platform registration context",
     );
@@ -276,7 +276,7 @@ describe("webhooks_register callback URL resolution", () => {
   });
 
   test("a path override replaces the derived webhook path", async () => {
-    platformContextEnabled = true;
+    cloudContextEnabled = true;
 
     expect(
       await register({ type: "custom", path: "webhooks/my-provider" }),

package/src/runtime/routes/app-management-routes.ts

@@ -528,7 +528,7 @@ async function importBundle(
   let bundleBytes: Uint8Array;
   const contentType = headers["content-type"] ?? "";
   if (contentType.includes("multipart/form-data")) {
-    // Reconstruct a Request to use the platform's multipart parser
+    // Reconstruct a Request to use the cloud's multipart parser
     const syntheticReq = new Request("http://localhost", {
       method: "POST",
       headers: { "content-type": contentType },

package/src/runtime/routes/attachment-routes.ts

@@ -207,7 +207,7 @@ async function handleMultipartUpload(
     );
   }
 
-  // Reconstruct a Request to use the platform's multipart parser.
+  // Reconstruct a Request to use the cloud's multipart parser.
   const syntheticReq = new Request("http://localhost", {
     method: "POST",
     headers: { "content-type": headers["content-type"] ?? "" },

package/src/runtime/routes/auth-routes.ts

@@ -7,17 +7,17 @@
 import { z } from "zod";
 
 import {
-  getPlatformAssistantId,
-  getPlatformBaseUrl,
-  getPlatformOrganizationId,
-  getPlatformUserId,
+  getCloudAssistantId,
+  getCloudBaseUrl,
+  getCloudOrganizationId,
+  getCloudUserId,
 } from "../../config/env.js";
-import { resolveManagedProxyContext } from "../../providers/platform-proxy/context.js";
+import { resolveCloudProxyContext } from "../../providers/cloud-proxy/context.js";
 import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
 interface AuthInfoResult {
-  platformUrl: string | null;
+  cloudUrl: string | null;
   assistantId: string | null;
   organizationId: string | null;
   userId: string | null;
@@ -28,16 +28,16 @@ interface AuthInfoResult {
 async function handleAuthInfo(
   _args: RouteHandlerArgs,
 ): Promise<AuthInfoResult> {
-  const ctx = await resolveManagedProxyContext();
+  const ctx = await resolveCloudProxyContext();
 
-  const platformUrl = getPlatformBaseUrl();
-  const assistantId = getPlatformAssistantId();
-  const organizationId = getPlatformOrganizationId();
-  const userId = getPlatformUserId();
+  const cloudUrl = getCloudBaseUrl();
+  const assistantId = getCloudAssistantId();
+  const organizationId = getCloudOrganizationId();
+  const userId = getCloudUserId();
   const authenticated = ctx.enabled;
 
   const result: AuthInfoResult = {
-    platformUrl: platformUrl || null,
+    cloudUrl: cloudUrl || null,
     assistantId: assistantId || null,
     organizationId: organizationId || null,
     userId: userId || null,
@@ -45,7 +45,7 @@ async function handleAuthInfo(
   };
 
   if (!authenticated) {
-    result.message = !platformUrl
+    result.message = !cloudUrl
       ? "Platform URL not configured. Run assistant config set platform.baseUrl <url>"
       : "Assistant API key not found. Store one with: assistant keys set credential/cadet/assistant_api_key <key>";
   }
@@ -67,7 +67,7 @@ export const ROUTES: RouteDefinition[] = [
       "Returns platform identity and authentication status for this assistant.",
     tags: ["auth"],
     responseBody: z.object({
-      platformUrl: z.string().nullable(),
+      cloudUrl: z.string().nullable(),
       assistantId: z.string().nullable(),
       organizationId: z.string().nullable(),
       userId: z.string().nullable(),

package/src/runtime/routes/avatar-routes.ts

@@ -32,9 +32,6 @@ import {
   ensureAvatarRasterPath,
 } from "../../avatar/ensure-raster.js";
 import type { CharacterTraits } from "../../avatar/traits-png-sync.js";
-import { setPlatformBaseUrl } from "../../config/env.js";
-import { credentialKey } from "../../security/credential-key.js";
-import { getSecureKeyAsync } from "../../security/secure-keys.js";
 import { detectMediaType } from "../../tools/shared/filesystem/image-read.js";
 import { generateAvatarImage } from "../../tools/system/avatar-generator.js";
 import { getLogger } from "../../util/logger.js";
@@ -178,17 +175,6 @@ async function handleGenerateAvatar({ body, headers }: RouteHandlerArgs) {
     throw new BadRequestError("description is required");
   }
 
-  // Rehydrate platform base URL from credential store
-  try {
-    const key = credentialKey("cadet", "platform_base_url");
-    const persisted = await getSecureKeyAsync(key);
-    if (persisted) {
-      setPlatformBaseUrl(persisted);
-    }
-  } catch {
-    // Non-fatal
-  }
-
   const result = await generateAvatarImage(description);
   if (result.isError || !result.pngBuffer) {
     throw new ServiceUnavailableError(result.content);

package/src/runtime/routes/background-wake-routes.ts

@@ -20,7 +20,7 @@ import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 /** The scheduler and heartbeat surface the drain-due lease needs. */
 type BackgroundWakeRuntime = {
   scheduler: Pick<SchedulerHandle, "runOnce" | "runDueWorkOnce">;
-  heartbeat: Pick<HeartbeatService, "nextRunAt" | "runManagedWakeIfDue">;
+  heartbeat: Pick<HeartbeatService, "nextRunAt" | "runCloudWakeIfDue">;
 };
 
 const PREPARE_SLEEP_DEFER_WINDOW_MS = 60_000;
@@ -127,7 +127,7 @@ function parseDrainDueBody(body: Record<string, unknown>): DrainDueRequest {
 
 async function defaultRenewWakeLease(leaseId: string): Promise<unknown> {
   const { renewBackgroundWakeLease } =
-    await import("../../background-wake/platform-client.js");
+    await import("../../background-wake/cloud-client.js");
   return renewBackgroundWakeLease(leaseId);
 }
 
@@ -135,7 +135,7 @@ async function defaultCompleteWakeLease(
   args: Parameters<CompleteWakeLease>[0],
 ): Promise<unknown> {
   const { completeBackgroundWakeLease } =
-    await import("../../background-wake/platform-client.js");
+    await import("../../background-wake/cloud-client.js");
   return completeBackgroundWakeLease(args);
 }
 
@@ -242,7 +242,7 @@ async function performDrainDue(
 
   if (heartbeatDue) {
     if (hasStartBudget(request.deadlineAt)) {
-      await runtime.heartbeat.runManagedWakeIfDue({
+      await runtime.heartbeat.runCloudWakeIfDue({
         now,
         toleranceMs: HEARTBEAT_DUE_TOLERANCE_MS,
         scheduledFor: request.startedAt,