@mycadet/assistant 0.12.7 → 0.12.8

package/src/runtime/routes/oauth-request-hints.test.ts

@@ -158,7 +158,7 @@ describe("composeRequestHint", () => {
     );
   });
 
-  test("a rejected managed credential points at connection health", () => {
+  test("a rejected cloud credential points at connection health", () => {
     expect(composeRequestHint(asPerson({ status: 403, managed: true }))).toBe(
       "Request returned HTTP 403. The OAuth token may be expired or revoked.\n\n" +
         "Run 'assistant oauth status google' to check connection health.\n" +

package/src/runtime/routes/oauth-request-hints.ts

@@ -26,7 +26,7 @@ export interface RequestHintFacts {
    * request acted as a person through their OAuth integration.
    */
   botChannel?: string;
-  /** The provider runs in platform-managed mode. */
+  /** The provider runs in cloud-managed mode. */
   managed: boolean;
   /**
    * The base URL the request resolved against: an absolute URL's own origin,

package/src/runtime/routes/plugins-routes.ts

@@ -93,7 +93,7 @@ import {
   PluginNotUpgradableError,
   upgradePlugin,
 } from "../../cli/lib/upgrade-plugin.js";
-import { getPlatformBaseUrl } from "../../config/env.js";
+import { getCloudBaseUrl } from "../../config/env.js";
 import { isPluginDisabled } from "../../plugins/disabled-state.js";
 import { ensurePluginApiShim } from "../../plugins/ensure-plugin-api-shim.js";
 import {
@@ -250,7 +250,7 @@ const pluginSearchMatchSchema = z.object({
     .string()
     .optional()
     .describe(
-      "Plugin icon: a curated emoji from the marketplace entry, or an icon URL served by the platform catalog when the plugin ships a bundled image.",
+      "Plugin icon: a curated emoji from the marketplace entry, or an icon URL served by the cloud catalog when the plugin ships a bundled image.",
     ),
   category: z
     .string()
@@ -774,13 +774,13 @@ const pluginDiffResponseSchema = z.object({
 const log = getLogger("plugins-routes");
 
 /**
- * Emit a structured log for a platform plugin-catalog outage before the caller
+ * Emit a structured log for a cloud plugin-catalog outage before the caller
  * maps it to a client-facing error.
  *
- * The catalog fetcher (`plugin-catalog-platform.ts`) throws
+ * The catalog fetcher (`plugin-catalog-cloud.ts`) throws
  * `PluginCatalogUnavailableError` without logging, and the transport adapters
  * return the resulting `RouteError` (a 503) without logging it — so an
- * outage on the platform-first paths (`search`, `install`, the remote-only
+ * outage on the cloud-first paths (`search`, `install`, the remote-only
  * detail view) otherwise leaves no trace beyond the daemon access-log status
  * code, and the real upstream status / URL is lost. Log at `error` so the
  * outage is time-correlatable in the daemon log and lands in error telemetry;
@@ -796,7 +796,7 @@ function logPluginCatalogUnavailable(
       err,
       operation,
       upstreamStatus: err.status,
-      platformBaseUrl: getPlatformBaseUrl(),
+      cloudBaseUrl: getCloudBaseUrl(),
     },
     "Platform plugin catalog unavailable",
   );
@@ -984,7 +984,7 @@ export async function loadCategoryMapBounded(
       // categories rather than stalling. Non-fatal, but log it so a slow
       // marketplace is diagnosable and not silently invisible.
       log.warn(
-        { timeoutMs, platformBaseUrl: getPlatformBaseUrl() },
+        { timeoutMs, cloudBaseUrl: getCloudBaseUrl() },
         "Plugin catalog lookup timed out; listing without categories",
       );
       return new Map();
@@ -998,7 +998,7 @@ export async function loadCategoryMapBounded(
     log.warn(
       {
         err,
-        platformBaseUrl: getPlatformBaseUrl(),
+        cloudBaseUrl: getCloudBaseUrl(),
         ...(err instanceof PluginCatalogUnavailableError
           ? { upstreamStatus: err.status }
           : {}),
@@ -1093,7 +1093,7 @@ async function handleSearchPlugins({
     // cheap deterministic 400 rather than a wasted catalog fetch.
     assertValidSearchPattern(query);
     // getPluginCatalog is platform-first (or the bundled manifest when platform
-    // features are disabled) and fails hard on a platform error — never served
+    // features are disabled) and fails hard on a cloud error — never served
     // stale. Filtering by the query is in-memory over the resolved catalog.
     const catalog = await getPluginCatalog(ref, {
       fetch: globalThis.fetch.bind(globalThis),

package/src/runtime/routes/profiler-routes.ts

@@ -1,5 +1,5 @@
 /**
- * Route handlers for managed profiler run management.
+ * Route handlers for cloud profiler run management.
  *
  * Control-plane callers (proxied via vembda) can enumerate, inspect, export,
  * and delete completed profiler runs without opening a shell on the assistant

package/src/runtime/routes/ps-routes.ts

@@ -82,6 +82,10 @@ async function getProcessStatus() {
   try {
     const procs = await listProcesses();
     entry = toEntry(buildProcessTree(procs, process.pid));
+    // The daemon's own node derives its name from the entry script
+    // (`daemon-main`); callers know this process as the assistant itself —
+    // the fallback branch below already reports that name.
+    entry.name = "assistant";
   } catch (err) {
     // Enumeration failed (no /proc and `ps` unavailable). Still report the
     // daemon itself so the endpoint stays useful for liveness.

package/src/runtime/routes/roadmap-routes.ts

@@ -1,10 +1,8 @@
 /**
  * Public Cadet roadmap, acted on as the assistant itself.
  *
- * Mirrors the surface of the user-facing `cadet roadmap` CLI
- * (`cli/src/commands/roadmap.ts`), but authenticates with the assistant's own
- * platform API key instead of the owner's session token, so items, upvotes and
- * comments are attributed to the assistant (`creator_kind: assistant`).
+ * Authenticates with the assistant's own platform API key, so items, upvotes
+ * and comments are attributed to the assistant (`creator_kind: assistant`).
  *
  * The key never leaves the daemon: it is read from the credential vault here
  * and used only in the `Authorization` header. Reads fall back to anonymous
@@ -22,7 +20,7 @@
 import { type EnvironmentDefinition, SEEDS } from "@mycadet/environments";
 import { z } from "zod";
 
-import { getPlatformBaseUrl } from "../../config/env.js";
+import { getCloudBaseUrl } from "../../config/env.js";
 import { credentialKey } from "../../security/credential-key.js";
 import { getSecureKeyAsync } from "../../security/secure-keys.js";
 import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
@@ -68,27 +66,27 @@ function hostnameOf(url: string): string | undefined {
 }
 
 /**
- * The deployment this assistant belongs to, judged by the platform it
+ * The deployment this assistant belongs to, judged by the cloud it
  * authenticates against.
  *
  * `CADET_ENVIRONMENT` cannot answer this. Unset, it means dev to
- * `getPlatformBaseUrl` and local to every launcher, but it would have to mean
+ * `getCloudBaseUrl` and local to every launcher, but it would have to mean
  * production for a roadmap default to be safe, and it is blind to the config
- * file and `CADET_PLATFORM_URL`, either of which can point a differently
- * labelled assistant at production. The platform base URL is the one signal
+ * file and `CADET_CLOUD_URL`, either of which can point a differently
+ * labelled assistant at production. The cloud base URL is the one signal
  * that already accounts for all three, and it names the deployment that issued
  * the very key these calls are signed with.
  *
- * Undefined for a platform outside the seed table (a self-hosted one, say),
+ * Undefined for a cloud outside the seed table (a self-hosted one, say),
  * which is not production and whose roadmap and web origins must be named.
  */
 function resolveDeployment(): EnvironmentDefinition | undefined {
-  const host = hostnameOf(getPlatformBaseUrl());
+  const host = hostnameOf(getCloudBaseUrl());
   if (!host) {
     return undefined;
   }
   return Object.values(SEEDS).find(
-    (seed) => hostnameOf(seed.platformUrl) === host,
+    (seed) => hostnameOf(seed.cloudUrl) === host,
   );
 }
 
@@ -117,10 +115,10 @@ interface RoadmapEndpoints {
  *
  * Each handler resolves this once and carries the result through both the
  * request and the response mapping. Resolving again while rendering the reply
- * would reintroduce the failure this ordering exists to prevent: a
- * `platform_base_url` write landing mid-flight could make a create throw after
- * the item was already published, or stamp a link from a deployment other than
- * the one that answered.
+ * would reintroduce the failure this ordering exists to prevent: a config
+ * write landing mid-flight could make a create throw after the item was
+ * already published, or stamp a link from a deployment other than the one
+ * that answered.
  */
 function resolveEndpoints(): RoadmapEndpoints {
   const deployment = resolveDeployment();
@@ -129,14 +127,14 @@ function resolveEndpoints(): RoadmapEndpoints {
 
   if (!apiOverride && deployment?.name !== "production") {
     throw new UnprocessableEntityError(
-      `The Cadet roadmap has no deployment for a ${getPlatformBaseUrl()} assistant. Set CADET_MARKETING_URL to the roadmap service for this environment.`,
+      `The Cadet roadmap has no deployment for a ${getCloudBaseUrl()} assistant. Set CADET_MARKETING_URL to the roadmap service for this environment.`,
     );
   }
 
   const web = webOverride || deployment?.webUrl;
   if (!web) {
     throw new UnprocessableEntityError(
-      `No web origin is known for a ${getPlatformBaseUrl()} assistant, so roadmap item links cannot be built. Set CADET_WEB_URL to the site that renders this environment's roadmap.`,
+      `No web origin is known for a ${getCloudBaseUrl()} assistant, so roadmap item links cannot be built. Set CADET_WEB_URL to the site that renders this environment's roadmap.`,
     );
   }
 
@@ -156,7 +154,7 @@ function itemUrl(web: string, slug: string): string {
 
 /**
  * The assistant's own platform API key, or undefined when the assistant is not
- * connected to the platform.
+ * connected to the cloud.
  */
 async function assistantApiKey(): Promise<string | undefined> {
   const key = await getSecureKeyAsync(
@@ -651,7 +649,7 @@ export const ROUTES: RouteDefinition[] = [
     },
     summary: "List public roadmap items",
     description:
-      "Lists items from the public Cadet roadmap. Authenticated as the assistant when a platform API key is stored, which fills in viewerUpvoted; anonymous otherwise.",
+      "Lists items from the public Cadet roadmap. Authenticated as the assistant when a cloud API key is stored, which fills in viewerUpvoted; anonymous otherwise.",
     tags: ["roadmap"],
     queryParams: [
       { name: "q", required: false, description: "Search query" },

package/src/runtime/routes/secret-routes.ts

@@ -14,22 +14,16 @@ import {
   AcpCredentialFormatError,
   assertAcpCredentialFormat,
 } from "../../acp/acp-credentials.js";
-import { syncAvatarToPlatform } from "../../avatar/sync-avatar.js";
-import {
-  getPlatformAssistantId,
-  setPlatformBaseUrl,
-} from "../../config/env.js";
+import { syncAvatarToCloud } from "../../avatar/sync-avatar.js";
+import { syncWorkspaceIdentityToPlatform } from "../../cloud/sync-identity.js";
+import { maybeDefaultSpeechToCloud } from "../../config/cloud-speech-defaults.js";
+import { getCloudAssistantId } from "../../config/env.js";
 import { getConfig } from "../../config/loader.js";
-import { maybeDefaultSpeechToManaged } from "../../config/managed-speech-defaults.js";
 import { getCesClient } from "../../credential-execution/ces-runtime.js";
 import type { CesClient } from "../../credential-execution/client.js";
-import {
-  isNonSecretPlatformField,
-  scrubStoredCredentialFromTranscripts,
-} from "../../daemon/credential-transcript-scrub.js";
+import { scrubStoredCredentialFromTranscripts } from "../../daemon/credential-transcript-scrub.js";
 import { syncManualTokenConnection } from "../../oauth/manual-token-connection.js";
-import { syncWorkspaceIdentityToPlatform } from "../../platform/sync-identity.js";
-import { maybeReseedCapabilitiesAfterManagedCredential } from "../../plugins/defaults/memory/substrate/boot-maintenance.js";
+import { maybeReseedCapabilitiesAfterCloudCredential } from "../../plugins/defaults/memory/substrate/boot-maintenance.js";
 import { validateAnthropicApiKey } from "../../providers/anthropic/client.js";
 import { validateAtlasCloudApiKey } from "../../providers/atlascloud/client.js";
 import { validateBasetenApiKey } from "../../providers/baseten/client.js";
@@ -59,6 +53,7 @@ import {
 } from "../../tools/credentials/metadata-store.js";
 import { getLogger } from "../../util/logger.js";
 import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
+import { isPlatformCloudCredential } from "./cloud-credentials.js";
 import {
   assertCredentialNotInUse,
   invalidateConnectionsAfterCredentialDelete,
@@ -69,7 +64,6 @@ import {
   NotFoundError,
   RouteError,
 } from "./errors.js";
-import { isPlatformManagedCredential } from "./platform-managed-credentials.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
 const log = getLogger("runtime-http");
@@ -80,7 +74,6 @@ const CES_READY_POLL_TIMEOUT_MS = 30_000;
 const WRITABLE_CADET_CREDENTIAL_FIELDS = [
   "assistant_api_key",
   "webhook_secret",
-  "platform_base_url",
 ] as const;
 
 function isWritableCadetCredentialField(field: string): boolean {
@@ -101,20 +94,11 @@ async function persistCredential(
       `Failed to store credential in secure storage (backend: ${getActiveBackendName()})`,
     );
   }
-  if (!isNonSecretPlatformField(service, field)) {
-    try {
-      const scrubbed = await scrubStoredCredentialFromTranscripts(value);
-      log.info(
-        { service, field, ...scrubbed },
-        "Credential stored; scrubbed value from recent transcripts",
-      );
-    } catch (err) {
-      log.warn(
-        { err, service, field },
-        "Credential stored, but transcript scrub failed",
-      );
-    }
-  }
+  const scrubbed = await scrubStoredCredentialFromTranscripts(value);
+  log.info(
+    { service, field, ...scrubbed },
+    "Credential stored; scrubbed value from recent transcripts",
+  );
   upsertCredentialMetadata(service, field, {});
   await syncManualTokenConnection(service);
 }
@@ -148,7 +132,7 @@ async function queueApiKeyPropagation(
       try {
         await cesClient.updateAssistantApiKey(
           apiKey,
-          getPlatformAssistantId() || undefined,
+          getCloudAssistantId() || undefined,
         );
         log.info(
           "Notified CES of the queued assistant API key after handshake completed (ack only; CES reads the durable value from the credential store)",
@@ -189,7 +173,7 @@ export async function notifyCesOfAssistantApiKeyUpdate(
     try {
       await cesClient.updateAssistantApiKey(
         value,
-        getPlatformAssistantId() || undefined,
+        getCloudAssistantId() || undefined,
       );
       logger.info(
         "Notified CES of the updated assistant API key (ack only; CES reads the durable value from the credential store)",
@@ -330,19 +314,12 @@ async function handleAddSecret({ body }: RouteHandlerArgs) {
       // refresh: that side effect can throw, and a stored-but-unscrubbed key
       // must not depend on it succeeding. The key IS stored at this point;
       // the scrub is best-effort hygiene and must stay invisible to the
-      // caller. Counts only — never the value.
-      try {
-        const scrubbed = await scrubStoredCredentialFromTranscripts(value);
-        log.info(
-          { provider: name, ...scrubbed },
-          "API key stored; scrubbed value from recent transcripts",
-        );
-      } catch (err) {
-        log.warn(
-          { err, provider: name },
-          "API key stored, but transcript scrub failed",
-        );
-      }
+      // Counts only — never the value.
+      const scrubbed = await scrubStoredCredentialFromTranscripts(value);
+      log.info(
+        { provider: name, ...scrubbed },
+        "API key stored; scrubbed value from recent transcripts",
+      );
 
       await refreshProvidersAfterSecretChange();
       log.info({ provider: name }, "API key updated via HTTP");
@@ -367,32 +344,29 @@ async function handleAddSecret({ body }: RouteHandlerArgs) {
         }
         assertMetadataWritable();
         await persistCredential(service, field, value);
-        if (field === "platform_base_url") {
-          setPlatformBaseUrl(value);
-        }
-        if (isPlatformManagedCredential(service, field)) {
+        if (isPlatformCloudCredential(service, field)) {
           await refreshProvidersAfterSecretChange();
           // Close the first-boot race where the startup capability seed ran before
-          // the managed embedding credential was provisioned, leaving skill/CLI
+          // the cloud embedding credential was provisioned, leaving skill/CLI
           // pages unseeded until restart. Detached, must not block the response.
-          void maybeReseedCapabilitiesAfterManagedCredential(getConfig());
+          void maybeReseedCapabilitiesAfterCloudCredential(getConfig());
           if (field === "assistant_api_key") {
             await notifyCesOfAssistantApiKeyUpdate(value, getCesClient());
           }
         } else {
           await refreshProvidersForRotatedCredential(service, field);
         }
-        if (field === "assistant_api_key" || field === "platform_base_url") {
-          // Managed-speech availability needs the API key, the assistant ID,
-          // and the base URL. Fire on each write that completes a piece of
-          // that set; the hook no-ops until the connection is complete.
+        if (field === "assistant_api_key") {
+          // Managed-speech availability needs the API key and the assistant
+          // ID. Fire on each write that completes a piece of that set; the
+          // hook no-ops until the connection is complete.
           // Detached, must not block the response.
-          void maybeDefaultSpeechToManaged();
+          void maybeDefaultSpeechToCloud();
           // Same last-write-wins shape: the startup syncs no-op before live
           // registration, so re-enqueue them here. Both dedup and no-op until
           // the client and assistant id exist.
           syncWorkspaceIdentityToPlatform();
-          syncAvatarToPlatform();
+          syncAvatarToCloud();
         }
         log.info({ service, field }, "Credential added via HTTP");
         return { success: true, type, name };

package/src/runtime/routes/settings-routes.ts

@@ -9,14 +9,12 @@ import { basename, join } from "node:path";
 import { normalizePublicBaseUrl } from "@mycadet/service-contracts/ingress";
 import { z } from "zod";
 
-import {
-  getPlatformBaseUrl,
-  setIngressPublicBaseUrl,
-} from "../../config/env.js";
+import { getCloudBaseUrl, setIngressPublicBaseUrl } from "../../config/env.js";
 import {
   getConfig,
   loadRawConfig,
   saveRawConfig,
+  setConfigSection,
 } from "../../config/loader.js";
 import { loadSkillCatalog } from "../../config/skills.js";
 import { getGuardianDelivery } from "../../contacts/guardian-delivery-reader.js";
@@ -794,26 +792,23 @@ function handleEnvVars() {
 }
 
 // ---------------------------------------------------------------------------
-// Platform config
+// Cloud config
 // ---------------------------------------------------------------------------
 
-function handleGetPlatformConfig() {
-  const baseUrl = getConfig().platform.baseUrl || getPlatformBaseUrl();
+function handleGetCloudConfig() {
+  const baseUrl = getConfig().cloud.baseUrl || getCloudBaseUrl();
   return { baseUrl, success: true };
 }
 
-function handleUpdatePlatformConfig({ body = {} }: RouteHandlerArgs) {
+function handleUpdateCloudConfig({ body = {} }: RouteHandlerArgs) {
   try {
     const { baseUrl: rawBaseUrl } = body as { baseUrl?: string };
     const value = normalizePublicBaseUrl(rawBaseUrl);
-    const raw = loadRawConfig();
-    const platform = (raw?.platform ?? {}) as Record<string, unknown>;
-    platform.baseUrl = value;
-    saveRawConfig({ ...raw, platform });
+    setConfigSection("cloud", { ...getConfig().cloud, baseUrl: value ?? "" });
     return { baseUrl: value ?? "", success: true };
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log.error({ err }, "Failed to update platform config");
+    log.error({ err }, "Failed to update cloud config");
     throw new InternalError(message);
   }
 }
@@ -1051,37 +1046,37 @@ export const ROUTES: RouteDefinition[] = [
     handler: () => handleEnvVars(),
   },
   {
-    operationId: "config_platform_get",
-    endpoint: "config/platform",
+    operationId: "config_cloud_get",
+    endpoint: "config/cloud",
     method: "GET",
     policy: {
       requiredScopes: ["settings.read"],
       allowedPrincipalTypes: ACTOR_PRINCIPALS,
     },
-    summary: "Get platform config",
-    description: "Return the platform base URL configuration.",
+    summary: "Get cloud config",
+    description: "Return the cloud base URL configuration.",
     tags: ["config"],
     responseBody: z.object({
       baseUrl: z.string(),
       success: z.boolean(),
     }),
-    handler: () => handleGetPlatformConfig(),
+    handler: () => handleGetCloudConfig(),
   },
   {
-    operationId: "config_platform_put",
-    endpoint: "config/platform",
+    operationId: "config_cloud_put",
+    endpoint: "config/cloud",
     method: "PUT",
     policy: {
       requiredScopes: ["settings.write"],
       allowedPrincipalTypes: ACTOR_PRINCIPALS,
     },
-    summary: "Update platform config",
-    description: "Set the platform base URL.",
+    summary: "Update cloud config",
+    description: "Set the cloud base URL.",
     tags: ["config"],
     requestBody: z.object({
       baseUrl: z.string(),
     }),
-    handler: handleUpdatePlatformConfig,
+    handler: handleUpdateCloudConfig,
   },
   {
     operationId: "integrations_ingress_config_get",

package/src/runtime/routes/telemetry-routes.ts

@@ -228,13 +228,13 @@ export const ROUTES: RouteDefinition[] = [
     },
     summary: "Flush pending telemetry events",
     description:
-      "Force-flush the telemetry events owned by the assistant process (turn events) to the platform. Other event types are flushed on their own cycle by the resource monitor process.",
+      "Force-flush the telemetry events owned by the assistant process (turn events) to the cloud. Other event types are flushed on their own cycle by the resource monitor process.",
     tags: ["telemetry"],
     responseBody: z.union([
       z.object({
         flushed: z.literal(true),
-        sent: z.number().describe("Events POSTed to the platform"),
-        persisted: z.number().describe("Events the platform confirmed written"),
+        sent: z.number().describe("Events POSTed to the cloud"),
+        persisted: z.number().describe("Events the cloud confirmed written"),
         dropped: z
           .number()
           .describe("Events that did not land (sent - persisted)"),
@@ -256,7 +256,7 @@ export const ROUTES: RouteDefinition[] = [
     },
     summary: "Record an outbox-backed telemetry event",
     description:
-      "Record any outbox-backed telemetry event by its wire `type` + `fields`. For events a client observes and the daemon can't detect on its own (e.g. onboarding_research). The type must be an outbox-backed event — the watermark types (turn, llm_usage, tool_executed) have no variant — and the payload must pass the platform wire schema. Gated on share_analytics consent like every other outbox-backed event; the platform re-checks the owner's consent server-side at ingest.",
+      "Record any outbox-backed telemetry event by its wire `type` + `fields`. For events a client observes and the daemon can't detect on its own (e.g. onboarding_research). The type must be an outbox-backed event — the watermark types (turn, llm_usage, tool_executed) have no variant — and the payload must pass the cloud wire schema. Gated on share_analytics consent like every other outbox-backed event; the cloud re-checks the owner's consent server-side at ingest.",
     tags: ["telemetry"],
     requestBody: telemetryIngestRequestSchema,
     responseBody: z.union([

package/src/runtime/routes/tts-routes.ts

@@ -8,8 +8,8 @@
 import { z } from "zod";
 
 import { sanitizeForTts } from "../../calls/tts-text-sanitizer.js";
+import { managedSpeechVoices } from "../../cloud/cloud-speech.js";
 import { getConfig } from "../../config/loader.js";
-import { managedSpeechVoices } from "../../platform/managed-speech.js";
 import { listCatalogProvidersForDisplay } from "../../tts/provider-catalog.js";
 import {
   synthesizeText,
@@ -132,7 +132,7 @@ function handleListTtsProviders() {
   return { providers: listCatalogProvidersForDisplay() };
 }
 
-async function handleListManagedVoices() {
+async function handleListCloudVoices() {
   const result = await managedSpeechVoices();
   if (!result.ok) {
     if (result.kind === "unavailable") {
@@ -244,7 +244,7 @@ export const ROUTES: RouteDefinition[] = [
     },
     summary: "List managed TTS voices",
     description:
-      "Return the voices offered by Cadet managed TTS, fetched live from the platform. Only currently-usable voices are returned; defaultModel is always one of them (null when none are offered).",
+      "Return the voices offered by Cadet Cloud TTS, fetched live from the cloud. Only currently-usable voices are returned; defaultModel is always one of them (null when none are offered).",
     tags: ["tts"],
     responseBody: z.object({
       voices: z.array(
@@ -258,7 +258,7 @@ export const ROUTES: RouteDefinition[] = [
       ),
       defaultModel: z.string().nullable(),
     }),
-    handler: handleListManagedVoices,
+    handler: handleListCloudVoices,
   },
   {
     operationId: "tts_synthesize",

package/src/runtime/routes/user-route-resolution.ts

@@ -14,7 +14,7 @@
  * - `plugins/defaults/<name>/routes/<path>` (the app source tree) — a
  *   first-party default plugin's routes, served in the same
  *   `/x/plugins/<name>/<path>` namespace, where `<name>` is the plugin's
- *   `default-…` manifest name (e.g. `default-platform-hosted`) — the same name
+ *   `default-…` manifest name (e.g. `default-cloud-hosted`) — the same name
  *   its `.disabled` sentinel is keyed by. Default plugins live in the binary's
  *   source, not the workspace, so their routes resolve from the source tree.
  *   An installed plugin of the same name takes precedence (it can override a