@mycadet/assistant 0.12.7 → 0.12.9

package/src/daemon/handlers/skills.ts

@@ -60,18 +60,18 @@ import {
   clawhubUpdate,
 } from "../../skills/clawhub.js";
 import { createClawhubProvider } from "../../skills/clawhub-files.js";
-import type { SkillInstallMeta } from "../../skills/install-meta.js";
-import { readInstallMeta } from "../../skills/install-meta.js";
-import {
-  createManagedSkill,
-  deleteManagedSkill,
-  validateManagedSkillId,
-} from "../../skills/managed-store.js";
 import {
   filterSkillsByPlatform,
-  isSkillCompatibleWithPlatform,
+  isSkillCompatibleWithCloud,
   skillPlatformUnavailableMessage,
-} from "../../skills/platform-compatibility.js";
+} from "../../skills/cloud-compatibility.js";
+import {
+  createCloudSkill,
+  deleteCloudSkill,
+  validateCloudSkillId,
+} from "../../skills/cloud-store.js";
+import type { SkillInstallMeta } from "../../skills/install-meta.js";
+import { readInstallMeta } from "../../skills/install-meta.js";
 import type { SkillFileProvider } from "../../skills/skill-file-provider.js";
 import { createSkillsShProvider } from "../../skills/skillssh-files.js";
 import type { SkillAuditData } from "../../skills/skillssh-registry.js";
@@ -1239,7 +1239,7 @@ export async function installSkill(spec: {
     const config = getConfig();
     const catalogSkill = catalog.find((s) => s.id === spec.slug);
     if (catalogSkill) {
-      if (!isSkillCompatibleWithPlatform(catalogSkill)) {
+      if (!isSkillCompatibleWithCloud(catalogSkill)) {
         return {
           success: false,
           error: skillPlatformUnavailableMessage(spec.slug, catalogSkill),
@@ -1282,7 +1282,7 @@ export async function installSkill(spec: {
       return { success: true, skillId: spec.slug };
     }
 
-    // Check the Cadet catalog (first-party skills hosted on the platform).
+    // Check the Cadet catalog (first-party skills hosted on the cloud).
     // Skip when the caller explicitly specified a community origin — this
     // prevents slug collisions where a catalog skill shadows a community
     // skill the user selected from search results.
@@ -1291,7 +1291,7 @@ export async function installSkill(spec: {
         const cadetCatalog = await getCatalog();
         const catalogEntry = cadetCatalog.find((s) => s.id === spec.slug);
         if (catalogEntry) {
-          if (!isSkillCompatibleWithPlatform(catalogEntry)) {
+          if (!isSkillCompatibleWithCloud(catalogEntry)) {
             return {
               success: false,
               error: skillPlatformUnavailableMessage(spec.slug, catalogEntry),
@@ -1401,10 +1401,10 @@ export async function uninstallSkill(
   }
 
   try {
-    // Use shared managed-store logic for simple managed skill IDs
-    const isManagedId = !validateManagedSkillId(skillId);
+    // Use shared cloud-store logic for simple managed skill IDs
+    const isManagedId = !validateCloudSkillId(skillId);
     if (isManagedId) {
-      const result = deleteManagedSkill(skillId);
+      const result = deleteCloudSkill(skillId);
       if (!result.deleted) {
         return {
           success: false,
@@ -1419,7 +1419,7 @@ export async function uninstallSkill(
       }
       rmSync(skillDir, { recursive: true });
       // Best-effort cleanup of capability memory for uninstalled skill
-      // (managed path handles this internally via deleteManagedSkill)
+      // (managed path handles this internally via deleteCloudSkill)
       deleteSkillCapabilityNode(skillId);
     }
 
@@ -1724,7 +1724,7 @@ export async function draftSkill(params: {
           const { signal, cleanup } = createTimeout(LLM_DRAFT_TIMEOUT_MS);
           try {
             const prompt = [
-              "Given the following skill body text, generate metadata for a managed skill.",
+              "Given the following skill body text, generate metadata for a cloud skill.",
               `Return ONLY valid JSON with these fields: ${missing.join(
                 ", ",
               )}.`,
@@ -1811,7 +1811,7 @@ export async function draftSkill(params: {
       }
     }
 
-    // Normalize skillId to valid managed-skill slug format
+    // Normalize skillId to valid cloud-skill slug format
     const originalId = skillId!;
     skillId = toSkillSlug(originalId);
     if (!skillId) {
@@ -1822,7 +1822,7 @@ export async function draftSkill(params: {
     }
 
     // Final validation pass
-    const validationError = validateManagedSkillId(skillId);
+    const validationError = validateCloudSkillId(skillId);
     if (validationError) {
       skillId =
         toSkillSlug(skillId.replace(/[^a-z0-9]/g, "-")) || "untitled-skill";
@@ -1863,7 +1863,7 @@ export async function createSkill(
   params: CreateSkillParams,
 ): Promise<{ success: true } | { success: false; error: string }> {
   try {
-    const result = createManagedSkill({
+    const result = createCloudSkill({
       id: params.skillId,
       name: params.name,
       description: params.description,

package/src/daemon/host-cu-proxy.ts

@@ -2,7 +2,7 @@
  * Host computer-use proxy.
  *
  * Proxies computer-use actions to the desktop client when running as a
- * managed assistant, following the same request/resolve pattern as
+ * cloud assistant, following the same request/resolve pattern as
  * HostBashProxy. Also owns CU-specific state tracking (step counting,
  * loop detection, observation formatting) for the unified agent loop.
  *

package/src/daemon/lifecycle.ts

@@ -1,10 +1,13 @@
 import { config as dotenvConfig } from "dotenv";
 
 import { reconcileAppPins } from "../apps/app-pin-reconciler.js";
-import { syncAvatarToPlatform } from "../avatar/sync-avatar.js";
+import { syncAvatarToCloud } from "../avatar/sync-avatar.js";
 import { reconcileCallsOnStartup } from "../calls/call-recovery.js";
 import { TwilioVoiceProvider } from "../calls/twilio-provider.js";
 import { expireInteractionBoundGuardianRequests } from "../channels/gateway-guardian-requests.js";
+import { isCloudClientConfigured } from "../cloud/client.js";
+import { startConsentRefresh } from "../cloud/consent-cache.js";
+import { syncWorkspaceIdentityToPlatform } from "../cloud/sync-identity.js";
 import { initFeatureFlagOverrides } from "../config/assistant-feature-flags.js";
 import { setIngressPublicBaseUrl, validateEnv } from "../config/env.js";
 import {
@@ -16,7 +19,7 @@ import { seedInferenceProfiles } from "../config/seed-inference-profiles.js";
 import { reconcileFlagGatedProfiles } from "../config/sync-gated-profiles.js";
 import { startConversationAutoArchive } from "../conversations/auto-archive.js";
 import { startCes } from "../credential-execution/ces-runtime.js";
-import { refreshManagedConnectionCache } from "../credential-execution/managed-catalog.js";
+import { refreshManagedConnectionCache } from "../credential-execution/cloud-catalog.js";
 import { startHeartbeatService } from "../heartbeat/heartbeat-service.js";
 import { backfillRelationshipStateIfMissing } from "../home/relationship-state-writer.js";
 import { startCliIpcServer } from "../ipc/assistant-server.js";
@@ -31,9 +34,6 @@ import { initializeDb } from "../persistence/db-init.js";
 import { startEmbeddingRuntimeManager } from "../persistence/embeddings/embedding-backend.js";
 import { maybeEnqueueLexicalBackfillOnUpgrade } from "../persistence/job-handlers/message-lexical-backfill.js";
 import { clearLifecycleQuiesce } from "../persistence/lifecycle-quiesce.js";
-import { isPlatformClientConfigured } from "../platform/client.js";
-import { startConsentRefresh } from "../platform/consent-cache.js";
-import { syncWorkspaceIdentityToPlatform } from "../platform/sync-identity.js";
 import { ensurePromptFiles } from "../prompts/system-prompt.js";
 import { runProviderConnectionsBackfill } from "../providers/inference/backfill.js";
 import { repairSharedCredentialSlots } from "../providers/inference/credential-slot-repair.js";
@@ -67,7 +67,7 @@ import {
 import { APP_VERSION } from "../version.js";
 import { drainOrphanedWatchTimelineEntries } from "../watch/watch-timeline.js";
 import { getWorkflowRunManager } from "../workflows/run-manager.js";
-import { repairAdaptiveThinkingOnManagedProfiles } from "../workspace/adaptive-thinking-repair.js";
+import { repairAdaptiveThinkingOnCloudProfiles } from "../workspace/adaptive-thinking-repair.js";
 import { ensureByokDefaultProfiles } from "../workspace/byok-default-profile-ensure.js";
 import { ensureCompleteCustomProfiles } from "../workspace/custom-profile-ensure.js";
 import { WORKSPACE_MIGRATIONS } from "../workspace/migrations/registry.js";
@@ -218,7 +218,7 @@ export async function runDaemon(): Promise<void> {
   // immediately after the transport binds, ahead of DB init and readiness,
   // so an urgent signal arriving the moment requests are admitted is not
   // decided on an empty cache.
-  void isPlatformClientConfigured().catch((err) =>
+  void isCloudClientConfigured().catch((err) =>
     log.warn({ err }, "Platform configured-probe warmup failed"),
   );
 
@@ -227,7 +227,7 @@ export async function runDaemon(): Promise<void> {
   // so a slow or unreachable gateway doesn't delay daemon startup (the
   // IPC call has a 3s connect + 5s call timeout that would otherwise
   // stall the critical path).
-  // After the async fetch resolves, reconcile flag-gated managed profiles
+  // After the async fetch resolves, reconcile flag-gated cloud profiles
   // (OS Beta): `seedInferenceProfiles()` runs synchronously earlier in boot
   // before flags are available, so this lands the profile on the same boot once
   // the flag cache is populated. When this reconcile is the call that mutates
@@ -523,23 +523,23 @@ export async function runDaemon(): Promise<void> {
     }
   } // end if (dbReady)
 
-  // Populate the managed-connection cache so the `14-connected-services`
+  // Populate the cloud-connection cache so the `14-connected-services`
   // bundled section (rendered by `renderConnectedServices()` in
-  // system-sections.ts) can include platform-managed OAuth connections
+  // system-sections.ts) can include cloud OAuth connections
   // (e.g. Twitter) in the system prompt from the first turn.  This is
   // an HTTP-only call with no DB dependency, so it runs regardless of
   // dbReady.  A periodic refresh keeps the cache current when users
-  // connect/disconnect managed providers while the assistant is running.
+  // connect/disconnect cloud providers while the assistant is running.
   void refreshManagedConnectionCache().catch((err) =>
     log.warn(
       { err },
-      "Managed connection cache refresh failed — continuing startup",
+      "Cloud connection cache refresh failed — continuing startup",
     ),
   );
   const MANAGED_CONNECTION_REFRESH_INTERVAL_MS = 5 * 60 * 1000; // 5 minutes
   setInterval(() => {
     void refreshManagedConnectionCache().catch((err) =>
-      log.warn({ err }, "Periodic managed connection cache refresh failed"),
+      log.warn({ err }, "Periodic cloud connection cache refresh failed"),
     );
   }, MANAGED_CONNECTION_REFRESH_INTERVAL_MS);
 
@@ -550,7 +550,7 @@ export async function runDaemon(): Promise<void> {
   const defaultConfigMerge = mergeDefaultWorkspaceConfig();
 
   // Seed inference profiles into the workspace config: active/advisor
-  // resolution plus, on off-platform hatches, `llm.default` and a
+  // resolution plus, on off-cloud hatches, `llm.default` and a
   // personal provider connection for the hatch provider.
   try {
     seedInferenceProfiles({
@@ -564,7 +564,7 @@ export async function runDaemon(): Promise<void> {
   }
 
   // Re-run the adaptive thinking repair after overlay merge + profile seeding.
-  // Workspace migration 097 enables adaptive thinking on managed profiles, but
+  // Workspace migration 097 enables adaptive thinking on cloud profiles, but
   // it runs before mergeDefaultWorkspaceConfig() which can overwrite the fix
   // with overlay profiles that have thinking disabled or absent. On-platform
   // instances where the overlay supplies "balanced" / "quality-optimized"
@@ -573,7 +573,7 @@ export async function runDaemon(): Promise<void> {
   // ensures thinking is enabled regardless of overlay ordering.
   if (defaultConfigMerge.hadOverlay) {
     try {
-      repairAdaptiveThinkingOnManagedProfiles(getWorkspaceDir());
+      repairAdaptiveThinkingOnCloudProfiles(getWorkspaceDir());
       log.info("Post-overlay adaptive thinking repair complete");
     } catch (err) {
       log.warn(
@@ -681,7 +681,7 @@ export async function runDaemon(): Promise<void> {
   // Refresh the consent cache regardless of dev mode so record-time telemetry
   // writes (which drop on a confirmed opt-out) work in dev too. The usage
   // telemetry reporter re-checks share_analytics on every flush, so dev still
-  // never sends telemetry to the platform. Fire-and-forget: startConsentRefresh()
+  // never sends telemetry to the cloud. Fire-and-forget: startConsentRefresh()
   // runs an immediate non-blocking refresh, so the startup hot path is never
   // blocked.
   startConsentRefresh();
@@ -704,10 +704,10 @@ export async function runDaemon(): Promise<void> {
 
   // Initialize providers before Qdrant so HTTP routes can begin accepting
   // requests while Qdrant initializes, then best-effort sync the workspace
-  // identity name and avatar to the platform record.
+  // identity name and avatar to the cloud record.
   await initializeProviders(config);
   syncWorkspaceIdentityToPlatform();
-  syncAvatarToPlatform();
+  syncAvatarToCloud();
 
   // Start the idle/LRU/memory-pressure sweep over the in-memory conversation
   // pool.

package/src/daemon/parse-actual-tokens-from-error.ts

@@ -11,7 +11,7 @@ import { isContextOverflowError } from "../providers/types.js";
  *   "too many input tokens: 242201 > 200000"                (OpenAI)
  *
  * The regex path remains a safety net for provider-adapter paths (e.g.
- * managed-proxy rewrappers) that surface untyped errors.
+ * cloud-proxy rewrappers) that surface untyped errors.
  *
  * Accepts a raw error object, an `Error` instance, or a plain string.
  * Returns the actual token count, or `null` when it cannot be determined.
@@ -38,7 +38,7 @@ export function parseActualTokensFromError(
 /**
  * Message patterns that identify a provider context-overflow rejection.
  * Covers the typed wrapper's source patterns plus common provider phrasings
- * that adapter paths (e.g. managed-proxy rewrappers) surface as untyped
+ * that adapter paths (e.g. cloud-proxy rewrappers) surface as untyped
  * errors:
  *   "prompt is too long: 242201 tokens > 200000 maximum"   (Anthropic)
  *   "too many input tokens: 242201 > 200000"                (OpenAI)
@@ -55,7 +55,7 @@ const OVERFLOW_MESSAGE_PATTERNS: readonly RegExp[] = [
 /**
  * Heuristic context-overflow check that also catches REWRAPPED provider
  * errors. `isContextOverflowError` only matches the typed
- * `ContextOverflowError` wrapper; adapter layers (managed-proxy rewrappers,
+ * `ContextOverflowError` wrapper; adapter layers (cloud-proxy rewrappers,
  * retry shims) can re-throw the same rejection as a plain `Error`, hiding the
  * typed signal. Callers that must not misread an overflow as a clean
  * no-output stop (e.g. the suppressed-compaction agent-wake path) should use

package/src/daemon/providers-setup.ts

@@ -1,5 +1,5 @@
-import { maybeDefaultSpeechToManaged } from "../config/managed-speech-defaults.js";
-import { rehydratePlatformCredentials } from "../config/platform-rehydration.js";
+import { rehydrateCloudCredentials } from "../config/cloud-rehydration.js";
+import { maybeDefaultSpeechToCloud } from "../config/cloud-speech-defaults.js";
 import type { AssistantConfig } from "../config/types.js";
 import { getMcpServerManager } from "../mcp/manager.js";
 import { startConfiguredMcpServers } from "../mcp/startup.js";
@@ -29,17 +29,17 @@ export async function initializeProvidersAndTools(
 ): Promise<void> {
   log.info("Daemon startup: initializing providers and tools");
 
-  // Rehydrate the platform base URL and IDs from the credential store so
-  // managed proxy activation survives assistant restarts. The in-memory
+  // Rehydrate the cloud base URL and IDs from the credential store so
+  // cloud proxy activation survives assistant restarts. The in-memory
   // overrides are normally only set by the secret-routes handlers at runtime.
-  await rehydratePlatformCredentials();
+  await rehydrateCloudCredentials();
 
   // Speech defaulting normally fires when the cloud credentials land
   // (secret-routes); evaluating it once per boot also covers assistants whose
   // connection predates that trigger, so voice works for every connected
   // assistant with no configured speech credentials. Idempotent, and detached
   // per the startup philosophy — must not block boot.
-  void maybeDefaultSpeechToManaged();
+  void maybeDefaultSpeechToCloud();
 
   await initializeProviders(config);
   // initializeTools() also loads workspace tool overrides from

package/src/daemon/resource-pressure-guard-lifecycle.ts

@@ -3,7 +3,7 @@
  *
  * Starts the guard at boot and defers the first sample onto a macrotask so it
  * never blocks startup, and stops the guard (cancelling any pending deferred
- * sample) on shutdown. When the guard is disabled (non-platform), no deferred
+ * sample) on shutdown. When the guard is disabled (non-cloud), no deferred
  * sample is scheduled.
  */
 import { getLogger } from "../util/logger.js";

package/src/daemon/resource-pressure-guard.ts

@@ -1,5 +1,5 @@
 /**
- * Sustained CPU/memory pressure guard for platform-hosted assistants.
+ * Sustained CPU/memory pressure guard for cloud-hosted assistants.
  *
  * Samples container CPU utilization and working-set memory against the
  * container's allocation on a fixed cadence and reports an `elevated` state
@@ -8,14 +8,14 @@
  * sustained run of samples below a lower clear threshold (hysteresis), so the
  * state never flaps while usage hovers near a threshold.
  *
- * The guard is platform-gated: off-platform there is no plan allocation to
+ * The guard is platform-gated: off-cloud there is no plan allocation to
  * measure against, so the guard stays disabled and samples nothing.
  */
 import {
   type ResourcePressureState,
   type ResourcePressureStatus,
 } from "../api/events/resource-pressure-status-changed.js";
-import { getIsPlatform } from "../config/env-registry.js";
+import { getIsCloud } from "../config/env-registry.js";
 import { broadcastMessage } from "../runtime/assistant-event-hub.js";
 import { getContainerCpuCores } from "../util/cgroup-cpu.js";
 import {
@@ -252,7 +252,7 @@ function defaultSampleMemory(): ResourcePressureMemorySample | null {
 }
 
 export function startResourcePressureGuard(): ResourcePressureStatus {
-  if (!getIsPlatform()) {
+  if (!getIsCloud()) {
     return cloneStatus(state.status);
   }
 
@@ -279,7 +279,7 @@ export function stopResourcePressureGuard(): void {
 export function evaluateResourcePressureNow(
   deps?: ResourcePressureSamplers,
 ): ResourcePressureStatus {
-  if (!getIsPlatform()) {
+  if (!getIsCloud()) {
     return cloneStatus(state.status);
   }
 
@@ -364,7 +364,7 @@ export function evaluateResourcePressureNow(
 }
 
 export function getResourcePressureStatus(): ResourcePressureStatus {
-  if (!getIsPlatform()) {
+  if (!getIsCloud()) {
     return cloneStatus(DISABLED_STATUS);
   }
   if (!state.status.enabled) {

package/src/daemon/shutdown-handlers.ts

@@ -1,4 +1,5 @@
 import { disposeAcpSessionManager } from "../acp/index.js";
+import { stopConsentRefresh } from "../cloud/consent-cache.js";
 import { stopConversationAutoArchive } from "../conversations/auto-archive.js";
 import { stopCes } from "../credential-execution/ces-runtime.js";
 import { stopHeartbeatService } from "../heartbeat/heartbeat-service.js";
@@ -13,7 +14,6 @@ import {
 import { getSqlite, isDbOpen, resetDb } from "../persistence/db-connection.js";
 import { shutdownEmbeddingBackends } from "../persistence/embeddings/embedding-backend.js";
 import { stopQdrantManager } from "../persistence/embeddings/qdrant-manager.js";
-import { stopConsentRefresh } from "../platform/consent-cache.js";
 import { HOOKS } from "../plugin-api/constants.js";
 import { runHook } from "../plugins/pipeline.js";
 import { stopRouteHost } from "../routes/control.js";

package/src/daemon/sqlite-corruption-watchdog.ts

@@ -7,11 +7,11 @@
  * `SQLITE_CORRUPT` / `SQLITE_NOTADB` error ("database disk image is malformed"
  * / "file is not a database") on the next statement that touches the damaged
  * page. Left unobserved, that damage is only noticed when a user hits a broken
- * feature; the platform has no fleet-wide view of how often it happens.
+ * feature; the cloud has no fleet-wide view of how often it happens.
  *
  * This watchdog makes corruption observable. It emits a `watchdog` telemetry
  * event with `check_name = "sqlite_corrupted"` — the same stream the event-loop
- * watchdog uses — but POSTs it *directly* to the platform ingest rather than
+ * watchdog uses — but POSTs it *directly* to the cloud ingest rather than
  * through the SQLite-backed watchdog buffer: a check that fires because SQLite
  * is unusable must not depend on writing to SQLite, and going direct keeps this
  * module out of the `db-connection` import graph. The direct path still honors
@@ -37,7 +37,7 @@ import { getLogger } from "../util/logger.js";
 const log = getLogger("sqlite-corruption-watchdog");
 
 /**
- * Check name emitted for SQLite corruption events. The platform's
+ * Check name emitted for SQLite corruption events. The cloud's
  * `watchdog__sqlite_corruption_daily` admin query filters `check_name` to
  * this exact string — it is the cross-repo contract, keep it stable.
  */

package/src/daemon/trust-context.ts

@@ -46,7 +46,7 @@ export const FALLBACK_TURN_TRUST: TrustContext = {
  * trustContext, and in an auth-disabled (local) deployment that unresolved
  * actor is the guardian. A *present* trustContext always reflects the real
  * actor — even under `DISABLE_HTTP_AUTH`, which is the standing config in
- * platform-managed deployments — so a resolved non-guardian channel actor is
+ * cloud-managed deployments — so a resolved non-guardian channel actor is
  * never elevated to guardian.
  *
  * When no trust context is available and auth is enabled (e.g. a desktop-only

package/src/desktop/desktop-automation-lease.ts

@@ -71,7 +71,7 @@ export class DesktopAutomationLease {
   private assertAvailable(): void {
     if (!this.deps.enabled()) {
       throw new Error(
-        "Virtual desktop automation is available only on enabled platform-hosted assistants",
+        "Virtual desktop automation is available only on enabled cloud-hosted assistants",
       );
     }
     if (!this.deps.ready()) {

package/src/desktop/desktop-browser-endpoint.ts

@@ -47,7 +47,7 @@ export function validateDesktopWebSocket(value: unknown, port: number): string {
   return url.href;
 }
 
-// Match the listener to the managed Chrome process, including occupied-port races.
+// Match the listener to the cloud Chrome process, including occupied-port races.
 export async function assertDesktopListener(
   pid: number,
   port: number,
@@ -67,9 +67,7 @@ export async function assertDesktopListener(
       return;
     }
   }
-  throw new Error(
-    "Debug listener does not belong to the managed desktop Chrome",
-  );
+  throw new Error("Debug listener does not belong to the cloud desktop Chrome");
 }
 
 export async function findDesktopBrowserPid(

package/src/desktop/desktop-computer-use-routing.test.ts

@@ -21,7 +21,7 @@ import { sensitiveToolReach } from "../tools/tool-approval-handler.js";
 import * as computerUse from "./desktop-computer-use.js";
 import { shouldUseVirtualDesktop } from "./virtual-desktop-feature.js";
 
-const originalPlatform = process.env.IS_PLATFORM;
+const originalPlatform = process.env.IS_CLOUD;
 const originalContainerized = process.env.IS_CONTAINERIZED;
 const context = {
   trustClass: "guardian" as const,
@@ -32,7 +32,7 @@ const context = {
 const spies: Array<{ mockRestore(): void }> = [];
 
 beforeEach(() => {
-  process.env.IS_PLATFORM = "true";
+  process.env.IS_CLOUD = "true";
   process.env.IS_CONTAINERIZED = "true";
   setOverridesForTesting({ "assistant-desktop": true });
 });
@@ -43,9 +43,9 @@ afterEach(() => {
   }
   setOverridesForTesting({});
   if (originalPlatform === undefined) {
-    delete process.env.IS_PLATFORM;
+    delete process.env.IS_CLOUD;
   } else {
-    process.env.IS_PLATFORM = originalPlatform;
+    process.env.IS_CLOUD = originalPlatform;
   }
   if (originalContainerized === undefined) {
     delete process.env.IS_CONTAINERIZED;
@@ -135,7 +135,7 @@ test("native, unidentified and non-guardian turns do not select the virtual desk
   expect(shouldUseVirtualDesktop({ ...context, trustClass: "unknown" })).toBe(
     false,
   );
-  process.env.IS_PLATFORM = "false";
+  process.env.IS_CLOUD = "false";
   expect(shouldUseVirtualDesktop(context)).toBe(false);
 });
 
@@ -203,7 +203,7 @@ for (const input of [
 for (const platform of [true, false]) {
   for (const clientOs of ["web", "macos", "windows", "linux"] as const) {
     test(`bundled tool policy and dispatch agree for ${platform ? "platform" : "local"} ${clientOs}`, async () => {
-      process.env.IS_PLATFORM = String(platform);
+      process.env.IS_CLOUD = String(platform);
       const skillDir = join(getBundledSkillsDir(), "computer-use");
       const manifest = JSON.parse(
         readFileSync(join(skillDir, "TOOLS.json"), "utf8"),

package/src/desktop/desktop-stream-bridge.test.ts

@@ -91,12 +91,12 @@ function slotIsFree(manager: DesktopSessionManager): boolean {
 describe("DesktopStreamBridge", () => {
   test("streams without flag or filesystem checks after connecting", async () => {
     const originalContainerized = process.env.IS_CONTAINERIZED;
-    const originalPlatform = process.env.IS_PLATFORM;
+    const originalPlatform = process.env.IS_CLOUD;
     const h = newFakeDesktop({ profileDir });
     const isEnabled = mock(isVirtualDesktopEnabled);
     const b = newBridge(h.manager, async () => {}, isEnabled);
     process.env.IS_CONTAINERIZED = "true";
-    process.env.IS_PLATFORM = "true";
+    process.env.IS_CLOUD = "true";
     setOverridesForTesting({ "assistant-desktop": true });
     try {
       b.connectNow();
@@ -139,9 +139,9 @@ describe("DesktopStreamBridge", () => {
         process.env.IS_CONTAINERIZED = originalContainerized;
       }
       if (originalPlatform === undefined) {
-        delete process.env.IS_PLATFORM;
+        delete process.env.IS_CLOUD;
       } else {
-        process.env.IS_PLATFORM = originalPlatform;
+        process.env.IS_CLOUD = originalPlatform;
       }
     }
   });

package/src/desktop/desktop-stream-bridge.ts

@@ -176,7 +176,7 @@ export class DesktopStreamBridge {
     if (!this.isEnabled()) {
       this.fail(
         DESKTOP_CLOSE.unavailable,
-        "Virtual desktop is available only on enabled platform-hosted assistants",
+        "Virtual desktop is available only on enabled cloud-hosted assistants",
       );
       return false;
     }

package/src/desktop/{virtual-desktop-platform.test.ts → virtual-desktop-cloud.test.ts}

@@ -5,7 +5,7 @@ import { shouldUseVirtualDesktopBrowser } from "../browser/virtual-desktop-targe
 import { executeDesktopBrowserOperation } from "./desktop-browser-operations.js";
 import { desktopDependencies } from "./desktop-dependencies.js";
 
-const originalPlatform = process.env.IS_PLATFORM;
+const originalPlatform = process.env.IS_CLOUD;
 const originalContainerized = process.env.IS_CONTAINERIZED;
 const context = {
   workingDir: "/tmp",
@@ -19,7 +19,7 @@ let status: ReturnType<typeof spyOn<typeof desktopDependencies, "getStatus">>;
 
 beforeEach(() => {
   process.env.IS_CONTAINERIZED = "true";
-  process.env.IS_PLATFORM = "false";
+  process.env.IS_CLOUD = "false";
   setOverridesForTesting({ "assistant-desktop": true });
   status = spyOn(desktopDependencies, "getStatus").mockReturnValue({
     state: "ready",
@@ -30,9 +30,9 @@ afterEach(() => {
   status.mockRestore();
   setOverridesForTesting({});
   if (originalPlatform === undefined) {
-    delete process.env.IS_PLATFORM;
+    delete process.env.IS_CLOUD;
   } else {
-    process.env.IS_PLATFORM = originalPlatform;
+    process.env.IS_CLOUD = originalPlatform;
   }
   if (originalContainerized === undefined) {
     delete process.env.IS_CONTAINERIZED;
@@ -45,12 +45,12 @@ test("self-hosted Docker cannot automatically select or explicitly control virtu
   expect(shouldUseVirtualDesktopBrowser(undefined, {}, context)).toBe(false);
   await expect(
     executeDesktopBrowserOperation("snapshot", {}, context),
-  ).rejects.toThrow("only on enabled platform-hosted assistants");
+  ).rejects.toThrow("only on enabled cloud-hosted assistants");
   expect(status).not.toHaveBeenCalled();
 });
 
 test("platform web conversations select virtual Chrome even when image components are missing", () => {
-  process.env.IS_PLATFORM = "true";
+  process.env.IS_CLOUD = "true";
   expect(shouldUseVirtualDesktopBrowser(undefined, {}, context)).toBe(true);
   status.mockReturnValue({ state: "failed" });
   expect(shouldUseVirtualDesktopBrowser(undefined, {}, context)).toBe(true);

package/src/desktop/virtual-desktop-feature.ts

@@ -1,25 +1,25 @@
 import { isAssistantFeatureFlagEnabled } from "../config/assistant-feature-flags.js";
-import { getIsContainerized, getIsPlatform } from "../config/env-registry.js";
+import { getIsCloud, getIsContainerized } from "../config/env-registry.js";
 import type { AssistantConfig } from "../config/schema.js";
 import type { ToolContext } from "../tools/types.js";
 
 const VIRTUAL_DESKTOP_FLAG = "assistant-desktop" as const;
 
-export function isVirtualDesktopPlatform(
+export function isVirtualDesktopCloud(
   containerized: boolean = getIsContainerized(),
-  platformHosted: boolean = getIsPlatform(),
+  cloudHosted: boolean = getIsCloud(),
 ): boolean {
-  return platformHosted && containerized;
+  return cloudHosted && containerized;
 }
 
-/** Gates desktop streaming and control to enabled, platform-hosted containers. */
+/** Gates desktop streaming and control to enabled, cloud-hosted containers. */
 export function isVirtualDesktopEnabled(
   config?: AssistantConfig,
   containerized: boolean = getIsContainerized(),
-  platformHosted: boolean = getIsPlatform(),
+  cloudHosted: boolean = getIsCloud(),
 ): boolean {
   return (
-    isVirtualDesktopPlatform(containerized, platformHosted) &&
+    isVirtualDesktopCloud(containerized, cloudHosted) &&
     isAssistantFeatureFlagEnabled(VIRTUAL_DESKTOP_FLAG, config)
   );
 }

package/src/email/byo-email-credential.ts

@@ -1,6 +1,6 @@
 /**
  * "Your own" (BYO) email providers: the assistant sends and receives email
- * through the user's own provider account instead of a platform-managed
+ * through the user's own provider account instead of a cloud-managed
  * inbox. Configuration is the provider's stored `api_key` credential;
  * inbound arrives through the gateway's per-provider webhook routes
  * (`gateway/src/http/routes/resend-webhook.ts`, `mailgun-webhook.ts`).