@mycadet/assistant 0.12.7 → 0.12.9

package/src/live-voice/live-activity-reporter.ts

@@ -1,5 +1,5 @@
 /**
- * Reports a live-voice session's phase to the platform, which pushes it to the
+ * Reports a live-voice session's phase to the cloud, which pushes it to the
  * iOS Live Activity over APNs.
  *
  * ## Why the server reports a phase the client already knows
@@ -27,7 +27,7 @@
  * throw here would cost the conversation.
  */
 
-import { CadetPlatformClient } from "../platform/client.js";
+import { CadetCloudClient } from "../cloud/client.js";
 import { getLogger } from "../util/logger.js";
 import type { LiveVoiceServerFramePayload } from "./protocol.js";
 
@@ -188,7 +188,7 @@ export class LiveActivityReporter {
    * Retire the activity as the session ends.
    *
    * Latched, because a session can end more than one way — a clean hangup, a
-   * dropped socket, a process shutdown — and the platform deletes the
+   * dropped socket, a process shutdown — and the cloud deletes the
    * registration on the first one. Sending a second would push at an activity
    * that is already gone.
    */
@@ -234,7 +234,7 @@ export class LiveActivityReporter {
       }
       signal.addEventListener("abort", () => resolve(), { once: true });
     });
-    // Race the whole operation, including platform-client and credential
+    // Race the whole operation, including cloud-client and credential
     // resolution. The same signal reaches `fetch`, so a timed-out operation
     // that resolves credentials later cannot send its stale snapshot.
     void Promise.race([
@@ -284,12 +284,12 @@ export class LiveActivityReporter {
     signal: AbortSignal,
   ): Promise<void> {
     try {
-      const client = await CadetPlatformClient.create();
-      if (!client?.platformAssistantId) {
+      const client = await CadetCloudClient.create();
+      if (!client?.cloudAssistantId) {
         return;
       }
       const path = `/v1/assistants/${encodeURIComponent(
-        client.platformAssistantId,
+        client.cloudAssistantId,
       )}/live-activity/dispatch/`;
       const response = await client.fetch(path, {
         method: "POST",

package/src/live-voice/live-voice-credential-preflight.ts

@@ -21,8 +21,8 @@ import {
   fishAudioReferenceIdConfigured,
   ttsSecretResolves,
 } from "../calls/telephony-tts-capability.js";
-import { resolveEffectiveSpeechProviders } from "../config/managed-speech-defaults.js";
-import { managedSpeechAvailable } from "../platform/managed-speech.js";
+import { managedSpeechAvailable } from "../cloud/cloud-speech.js";
+import { resolveEffectiveSpeechProviders } from "../config/cloud-speech-defaults.js";
 import { getProviderEntry } from "../providers/speech-to-text/provider-catalog.js";
 import {
   resolveStreamingTranscriber,
@@ -144,7 +144,7 @@ async function resolveSttGap(
       },
       clause:
         entry.credentialProvider === "cadet"
-          ? `a Cadet Cloud connection for managed speech (run 'assistant cloud connect')`
+          ? `a Cadet Cloud connection for cloud speech (run 'assistant cloud connect')`
           : `an API key for the speech-to-text provider "${entry.id}"`,
     };
   }
@@ -197,7 +197,7 @@ async function resolveTtsGap(
     };
   }
 
-  // Managed speech authenticates via the cloud connection — full
+  // Cloud speech authenticates via the cloud connection — full
   // availability (API key + assistant ID) is the credential, so the
   // stored-secret loop below would pass half-connected states that
   // synthesis rejects.
@@ -207,9 +207,9 @@ async function resolveTtsGap(
         gap: {
           kind: "tts",
           providerId: entry.id,
-          reason: `TTS provider "${entry.id}" needs a Cadet Cloud connection for managed speech`,
+          reason: `TTS provider "${entry.id}" needs a Cadet Cloud connection for cloud speech`,
         },
-        clause: `a Cadet Cloud connection for managed speech (run 'assistant cloud connect')`,
+        clause: `a Cadet Cloud connection for cloud speech (run 'assistant cloud connect')`,
       };
     }
     return null;

package/src/live-voice/live-voice-session.ts

@@ -392,7 +392,7 @@ export interface LiveVoiceSessionOptions {
   metricsClock?: VoiceMetricsClock;
   /**
    * Mirrors phase changes to the iOS Live Activity. Injectable so tests can
-   * assert what a session reports without reaching the platform.
+   * assert what a session reports without reaching the cloud.
    */
   liveActivityReporter?: LiveActivityReporter;
   createTurnId?: () => string;
@@ -1223,7 +1223,7 @@ export class LiveVoiceSession implements LiveVoiceSessionContract {
   // that can point at the screen. Cleared when the share ends.
   private shareTargets: ShareTargetSnapshot | null = null;
   /**
-   * Mirrors phase changes to the iOS Live Activity through the platform, for
+   * Mirrors phase changes to the iOS Live Activity through the cloud, for
    * the case the client cannot cover: an app backgrounded long enough for iOS
    * to suspend the web layer that would otherwise push them.
    */
@@ -8326,7 +8326,7 @@ async function defaultResolveStreamingTranscriber(
   options: ResolveStreamingTranscriberOptions,
 ): Promise<StreamingTranscriber | null> {
   const { resolveEffectiveSpeechProviders } =
-    await import("../config/managed-speech-defaults.js");
+    await import("../config/cloud-speech-defaults.js");
   const { resolveStreamingTranscriber } =
     await import("../providers/speech-to-text/resolve.js");
   const { stt } = await resolveEffectiveSpeechProviders(undefined, {

package/src/live-voice/live-voice-tts.ts

@@ -221,7 +221,7 @@ async function resolveLiveVoiceStreamingTtsProvider(
 ): Promise<ResolvedStreamingTtsProvider> {
   const config = configOverride ?? (await loadAssistantConfig());
   const { resolveEffectiveSpeechProviders } =
-    await import("../config/managed-speech-defaults.js");
+    await import("../config/cloud-speech-defaults.js");
   const { tts: effectiveProviderId } =
     await resolveEffectiveSpeechProviders(config);
   const { provider: providerId, providerConfig } = resolveTtsConfig(

package/src/mcp/__tests__/mcp-oauth-client-registration.test.ts

@@ -24,7 +24,7 @@ const CLIENT_METADATA_URL = `${PUBLIC_BASE_URL}/oauth/client-metadata.json`;
 let resolvedCallbackUrl = CALLBACK_URL;
 let publicBaseUrl: string | undefined = PUBLIC_BASE_URL;
 
-mock.module("../../inbound/platform-callback-registration.js", () => ({
+mock.module("../../inbound/cloud-callback-registration.js", () => ({
   resolveCallbackUrl: async () => resolvedCallbackUrl,
 }));
 
@@ -45,8 +45,8 @@ mock.module("../../daemon/identity-helpers.js", () => ({
   getAssistantName: () => "Jarvis",
 }));
 
-import { setPlatformAssistantId } from "../../config/env.js";
-setPlatformAssistantId("019d6d4f-6dbd-779f-91d3-cb273b9429a5");
+import { setCloudAssistantId } from "../../config/env.js";
+setCloudAssistantId("019d6d4f-6dbd-779f-91d3-cb273b9429a5");
 
 const { McpOAuthProvider } = await import("../mcp-oauth-provider.js");
 
@@ -247,7 +247,7 @@ describe("McpOAuthProvider client metadata", () => {
     expect(provider.clientMetadataUrl).toBe(CLIENT_METADATA_URL);
   });
 
-  test("preserves DCR fallback for a platform-relayed callback", async () => {
+  test("preserves DCR fallback for a cloud-relayed callback", async () => {
     const provider = newProvider();
 
     await provider.startCallbackServer();

package/src/mcp/__tests__/mcp-oauth-provider.test.ts

@@ -4,7 +4,7 @@ import { describe, expect, mock, test } from "bun:test";
 // startGatewayCallback() dynamically imports these to resolve the public
 // callback URL. Stub them so the gateway flow runs without platform infra.
 
-mock.module("../../inbound/platform-callback-registration.js", () => ({
+mock.module("../../inbound/cloud-callback-registration.js", () => ({
   resolveCallbackUrl: async () =>
     "https://platform.example/v1/gateway/callbacks/abc/webhooks/oauth/callback/",
 }));

package/src/mcp/mcp-oauth-provider.ts

@@ -29,7 +29,7 @@ import type {
 } from "@modelcontextprotocol/sdk/shared/auth.js";
 import { buildMcpOAuthClientMetadata } from "@mycadet/service-contracts/mcp-oauth";
 
-import { getPlatformAssistantId } from "../config/env.js";
+import { getCloudAssistantId } from "../config/env.js";
 import { getAssistantName } from "../daemon/identity-helpers.js";
 import {
   deleteSecureKeyAsync,
@@ -143,7 +143,7 @@ export class McpOAuthProvider implements OAuthClientProvider {
    */
   get clientMetadata(): OAuthClientMetadata {
     const assistantName = getAssistantName();
-    const assistantId = getPlatformAssistantId().trim();
+    const assistantId = getCloudAssistantId().trim();
     return buildMcpOAuthClientMetadata({
       clientName: assistantName ?? "Cadet Assistant",
       redirectUris: this._redirectUrl ? [this._redirectUrl] : [],

package/src/media/gemini-image-service.ts

@@ -1,12 +1,12 @@
 import { ApiError, GoogleGenAI } from "@google/genai";
 
 import {
+  type CloudProxyCredentials,
   type GeneratedImage,
   type ImageGenCredentials,
   type ImageGenerationRequest,
   type ImageGenerationResult,
   isImageProviderBillingError,
-  type ManagedProxyCredentials,
   MAX_VARIANTS,
 } from "./types.js";
 
@@ -47,8 +47,8 @@ export function mapGeminiError(error: unknown): string {
     return `Gemini API error (status ${status}). Please try again.`;
   }
   if (error instanceof Error) {
-    // The managed proxy surfaces failures as plain Errors whose message embeds
-    // the upstream status (e.g. "Managed proxy request failed (402): ...").
+    // The cloud proxy surfaces failures as plain Errors whose message embeds
+    // the upstream status (e.g. "Cloud proxy request failed (402): ...").
     if (isImageProviderBillingError({ message: error.message })) {
       return GEMINI_BILLING_MESSAGE;
     }
@@ -57,17 +57,17 @@ export function mapGeminiError(error: unknown): string {
   return "An unexpected error occurred during image generation.";
 }
 
-// --- Managed proxy direct HTTP call ---
+// --- Cloud proxy direct HTTP call ---
 
 /**
- * Call the managed proxy directly via fetch, using the Gemini API URL format.
- * The platform proxy translates this to Vertex AI internally with ADC auth.
+ * Call the cloud proxy directly via fetch, using the Gemini API URL format.
+ * The cloud proxy translates this to Vertex AI internally with ADC auth.
  *
  * Uses the Gemini API format:
  *   POST {baseUrl}/v1beta/models/{model}:generateContent
  */
 async function generateImageViaProxy(
-  credentials: ManagedProxyCredentials,
+  credentials: CloudProxyCredentials,
   model: string,
   contents: unknown[],
   config: Record<string, unknown>,
@@ -93,9 +93,7 @@ async function generateImageViaProxy(
 
   if (!response.ok) {
     const body = await response.text();
-    throw new Error(
-      `Managed proxy request failed (${response.status}): ${body}`,
-    );
+    throw new Error(`Cloud proxy request failed (${response.status}): ${body}`);
   }
 
   const data = (await response.json()) as {
@@ -161,11 +159,11 @@ export async function generateImage(
   const config = { responseModalities: ["TEXT", "IMAGE"] as string[] };
   const contents = [{ role: "user" as const, parts }];
 
-  // For the managed proxy, bypass the @google/genai SDK and make direct HTTP
+  // For the cloud proxy, bypass the @google/genai SDK and make direct HTTP
   // calls. The SDK's generateContent doesn't support responseModalities for
   // image generation. Direct fetch lets us use the Gemini API format with
-  // the managed proxy translating to Vertex internally.
-  if (credentials.type === "managed-proxy") {
+  // the cloud proxy translating to Vertex internally.
+  if (credentials.type === "cloud-proxy") {
     const makeSingleCall = () =>
       generateImageViaProxy(
         credentials,

package/src/media/image-credentials.ts

@@ -2,14 +2,14 @@
  * Shared credential resolver for image-generation call sites (image-studio
  * tool, CLI `image-generation` command, app-icon generator).
  *
- * Each call site picks between the managed-proxy path (routes through the
+ * Each call site picks between the cloud-proxy path (routes through the
  * platform) and the "your own" path (direct provider API key). This module
  * resolves either path and returns a provider-aware error hint when
  * credentials are unavailable.
  */
 
-import { PLATFORM_PROVIDER_META } from "../providers/platform-proxy/constants.js";
-import { resolveManagedProxyContext } from "../providers/platform-proxy/context.js";
+import { PLATFORM_PROVIDER_META } from "../providers/cloud-proxy/constants.js";
+import { resolveCloudProxyContext } from "../providers/cloud-proxy/context.js";
 import { getProviderKeyAsync } from "../security/secure-keys.js";
 import type { ImageGenCredentials, ImageGenProvider } from "./types.js";
 import { providerForImageModelPrefix, providerForModel } from "./types.js";
@@ -19,7 +19,7 @@ import { providerForImageModelPrefix, providerForModel } from "./types.js";
  *
  * `cadet` is unconditionally managed and carries no backend of its own: the
  * backend derives from the model prefix (`gpt-*`/`dall-e-*` proxy OpenAI,
- * anything else proxies Gemini), so one managed provider spans both runtime
+ * anything else proxies Gemini), so one cloud provider spans both runtime
  * proxies. Managed routing never falls back to a stored BYOK key, and a BYOK
  * provider never falls back to the proxy — billing follows the explicit
  * provider choice. Other providers use the caller's key, with an explicit
@@ -52,7 +52,7 @@ export function resolveImageGenRouting(
 /**
  * Resolve credentials for an image-generation request.
  *
- * - `managed`: returns managed-proxy credentials when the platform URL and
+ * - `managed`: returns cloud-proxy credentials when the cloud URL and
  *   assistant API key are both configured, otherwise a hint telling the
  *   user to log in.
  * - otherwise: returns direct credentials when the provider API key is
@@ -70,7 +70,7 @@ export async function resolveImageGenCredentials(opts: {
     // baseUrl and assistantApiKey can't diverge if the credential is cleared
     // between lookups.
     const meta = PLATFORM_PROVIDER_META[provider];
-    const ctx = await resolveManagedProxyContext();
+    const ctx = await resolveCloudProxyContext();
     if (
       !meta?.managed ||
       !meta.proxyPath ||
@@ -79,14 +79,14 @@ export async function resolveImageGenCredentials(opts: {
     ) {
       return {
         errorHint:
-          "Managed proxy is not available. Please log in to Cadet or switch to Your Own mode.",
+          "Cloud proxy is not available. Please log in to Cadet or switch to Your Own mode.",
       };
     }
     return {
       credentials: {
-        type: "managed-proxy",
+        type: "cloud-proxy",
         assistantApiKey: ctx.assistantApiKey,
-        baseUrl: `${ctx.platformBaseUrl}${meta.proxyPath}`,
+        baseUrl: `${ctx.cloudBaseUrl}${meta.proxyPath}`,
       },
     };
   }

package/src/media/openai-image-service.ts

@@ -99,7 +99,7 @@ export async function generateImageOpenAI(
   const variants = Math.max(1, Math.min(request.variants ?? 1, MAX_VARIANTS));
 
   const client =
-    credentials.type === "managed-proxy"
+    credentials.type === "cloud-proxy"
       ? new OpenAI({
           apiKey: credentials.assistantApiKey,
           baseURL: credentials.baseUrl,

package/src/media/types.ts

@@ -4,12 +4,12 @@ export interface DirectCredentials {
   type: "direct";
   apiKey: string;
 }
-export interface ManagedProxyCredentials {
-  type: "managed-proxy";
+export interface CloudProxyCredentials {
+  type: "cloud-proxy";
   assistantApiKey: string;
   baseUrl: string;
 }
-export type ImageGenCredentials = DirectCredentials | ManagedProxyCredentials;
+export type ImageGenCredentials = DirectCredentials | CloudProxyCredentials;
 
 export interface ImageGenerationRequest {
   prompt: string;

package/src/messaging/providers/channel-transport.ts

@@ -105,7 +105,7 @@ export interface ReactionTarget {
  * Tagged with its kind so a second way of naming a destination is additive
  * rather than a reinterpretation of `chatId`. Reaching a person who has not
  * been named as a chat is deliberately not a kind here: on Slack and Discord
- * it costs a platform call whose result must be resolved at send time rather
+ * it costs a cloud call whose result must be resolved at send time rather
  * than stored, and nothing asks for it yet.
  */
 export type ProactiveTarget = {

package/src/messaging/providers/discord/transport.ts

@@ -55,7 +55,7 @@ export const discordTransport: ChannelTransport = {
   /**
    * A chat is a channel id, with `threadId` naming the thread, which is its
    * own channel. Reaching a person who has not been named as a chat would
-   * mean opening their DM first, a platform call this resolution does not
+   * mean opening their DM first, a cloud call this resolution does not
    * make; the inbound `dm` param below is how an event-carried callback says
    * its `chatId` is a recipient rather than a room.
    */

package/src/messaging/providers/gmail/adapter.ts

@@ -1,7 +1,7 @@
 /**
  * Gmail messaging provider adapter.
  *
- * Maps Gmail API responses to the platform-agnostic messaging types
+ * Maps Gmail API responses to the cloud-agnostic messaging types
  * and implements the MessagingProvider interface.
  */
 

package/src/messaging/providers/gmail/client.ts

@@ -28,13 +28,13 @@ export const GMAIL_API_BASE_URL =
 /**
  * Minimum Google OAuth scope a connection must carry for Gmail read access.
  *
- * The managed `google` OAuth app bundles Gmail + Calendar + Drive, but a
+ * The cloud `google` OAuth app bundles Gmail + Calendar + Drive, but a
  * connection can be granted a narrow subset (e.g. the onboarding check-in flow
  * requests Calendar-only). Resolving against Gmail read access turns a
  * downstream 403 into an actionable "reconnect Google and grant Gmail" error
  * at resolution time when the selected connection cannot read Gmail.
  *
- * Managed connections never carry this scope: Cadet's app grants Gmail as
+ * Cloud connections never carry this scope: Cadet's app grants Gmail as
  * `https://mail.google.com/`, which `scopeDifference` in `oauth/scope-utils.ts`
  * accepts as covering it.
  */
@@ -526,7 +526,7 @@ async function fetchMessagesIndividually(
  * Packs up to 100 sub-requests per HTTP call and runs up to BATCH_CONCURRENCY calls in parallel.
  * Falls back to individual getMessage for any sub-requests that fail within a batch.
  *
- * For connections that do not support raw token access (e.g. platform-managed connections),
+ * For connections that do not support raw token access (e.g. cloud connections),
  * falls back to fetching each message individually via connection.request().
  */
 export async function batchGetMessages(
@@ -556,7 +556,7 @@ export async function batchGetMessages(
   }
 
   // Try batch API first; fall back to individual fetches if withToken is unavailable
-  // (e.g. platform-managed connections where raw tokens cannot be exposed).
+  // (e.g. cloud connections where raw tokens cannot be exposed).
   let useBatch = true;
   try {
     // Probe withToken availability with a no-op call

package/src/messaging/providers/outlook/adapter.ts

@@ -1,7 +1,7 @@
 /**
  * Outlook messaging provider adapter.
  *
- * Maps Microsoft Graph API responses to the platform-agnostic messaging types
+ * Maps Microsoft Graph API responses to the cloud-agnostic messaging types
  * and implements the MessagingProvider interface.
  */
 

package/src/messaging/providers/slack/adapter.ts

@@ -1,7 +1,7 @@
 /**
  * Slack messaging provider adapter.
  *
- * Maps Slack API responses to the platform-agnostic messaging types and
+ * Maps Slack API responses to the cloud-agnostic messaging types and
  * implements the MessagingProvider interface.
  */
 

package/src/messaging/providers/slack/transport.ts

@@ -29,7 +29,7 @@ export const slackTransport: ChannelTransport = {
   /**
    * A chat is a channel or DM id, with `threadTs` naming the thread to post
    * under. Reaching a person who has not been named as a chat would mean
-   * opening the DM first (`conversations.open`), a platform call this
+   * opening the DM first (`conversations.open`), a cloud call this
    * resolution does not make.
    */
   addressFor(target) {

package/src/messaging/providers/telegram-bot/transport.ts

@@ -150,7 +150,7 @@ export const telegramTransport: ChannelTransport = {
    * A start that Telegram refuses (a chat that is not private, where drafts
    * are not offered) reports not-ok, and the caller falls back to sending the
    * finished reply. That is the whole of the per-conversation rule: it is
-   * answered here, where the platform's constraint lives.
+   * answered here, where the cloud's constraint lives.
    */
   async streamReply(ctx, chatId, op) {
     const opts = threadOptions(ctx);

package/src/monitoring/db-integrity-check.ts

@@ -21,7 +21,7 @@ const MAX_ERRORS = 10;
  * Cap on each error message's UTF-8 byte length. With MAX_ERRORS rows this
  * bounds the whole error payload well under the 4096-byte watchdog `detail`
  * limit (WATCHDOG_DETAIL_MAX_JSON_BYTES) — an oversized detail is silently
- * dropped by the platform, which would selectively erase the most-corrupted
+ * dropped by the cloud, which would selectively erase the most-corrupted
  * databases from the prevalence metric. Bytes, not `String.length`: ten
  * 160-character CJK messages would otherwise serialize to ~4.9 KB.
  */

package/src/monitoring/db-integrity-sample.ts

@@ -1,6 +1,6 @@
 /**
  * Periodic database integrity sample, reported as a `db_integrity` watchdog
- * event so the platform can read corruption prevalence across the fleet.
+ * event so the cloud can read corruption prevalence across the fleet.
  *
  * The `PRAGMA quick_check` itself runs in a short-lived subprocess
  * (`db-integrity-check.ts`) — bun:sqlite's page walk is synchronous, and a
@@ -18,7 +18,7 @@
 import { existsSync, statSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { getRawShareAnalytics } from "../platform/consent-cache.js";
+import { getRawShareAnalytics } from "../cloud/consent-cache.js";
 import { recordWatchdogEvent } from "../telemetry/watchdog-events-store.js";
 import { getLogger } from "../util/logger.js";
 import { getDbPath, getMonitoringDataDir } from "../util/platform.js";

package/src/monitoring/mount-watch.ts

@@ -19,7 +19,7 @@ import { getLogger } from "../util/logger.js";
 
 const log = getLogger("mount-watch");
 
-/** Assistant-container PVC bind targets in the managed pod template. */
+/** Assistant-container PVC bind targets in the cloud pod template. */
 export const ASSISTANT_VOLUME_MOUNT_POINTS = ["/workspace", "/data"] as const;
 
 const VIRTIOFS_TYPES = new Set(["virtiofs", "fuse.virtiofs"]);

package/src/monitoring/oom-kill-reporter.ts

@@ -14,7 +14,7 @@
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
-import { getRawShareAnalytics } from "../platform/consent-cache.js";
+import { getRawShareAnalytics } from "../cloud/consent-cache.js";
 import { recordWatchdogEvent } from "../telemetry/watchdog-events-store.js";
 import { getContainerMemoryEvents } from "../util/cgroup-memory.js";
 import { getLogger } from "../util/logger.js";

package/src/monitoring/worker.ts

@@ -15,10 +15,10 @@
 
 import { mkdirSync, writeFileSync } from "node:fs";
 
+import { startConsentRefresh } from "../cloud/consent-cache.js";
+import { rehydrateCloudCredentials } from "../config/cloud-rehydration.js";
 import { getConfig } from "../config/loader.js";
-import { rehydratePlatformCredentials } from "../config/platform-rehydration.js";
 import { resetDb } from "../persistence/db-connection.js";
-import { startConsentRefresh } from "../platform/consent-cache.js";
 import { disableStreamSeqStamping } from "../runtime/assistant-stream-state.js";
 import {
   startConfigSnapshotReporter,
@@ -91,12 +91,12 @@ async function main(): Promise<void> {
     "Resource monitor process started",
   );
 
-  // Rehydrate the platform base URL and IDs from the credential store before
+  // Rehydrate the cloud base URL and IDs from the credential store before
   // the telemetry reporter starts. The daemon does this in
   // initializeProvidersAndTools(); this standalone process must do it itself so
-  // the non-turn telemetry it flushes carries the platform organization and
+  // the non-turn telemetry it flushes carries the cloud organization and
   // user context instead of shipping with those fields empty.
-  await rehydratePlatformCredentials();
+  await rehydrateCloudCredentials();
 
   let sampler: ResourceSamplerHandle | null = null;
   let fdMonitor: FileDescriptorMonitorHandle | null = null;

package/src/notifications/README.md

@@ -412,7 +412,7 @@ A guardian-sensitive notification (approval requests, access requests, channel a
 
 ### Platform (always connected)
 
-The `PlatformPushAdapter` posts the notification to the platform's `/v1/assistants/{id}/push/dispatch/` endpoint, which fans it out to the bound user's registered devices for native mobile push. Without cloud credentials the delivery is recorded as failed.
+The `CloudPushAdapter` posts the notification to the cloud's `/v1/assistants/{id}/push/dispatch/` endpoint, which fans it out to the bound user's registered devices for native mobile push. Without cloud credentials the delivery is recorded as failed.
 
 ### External channels: Telegram, Slack, Discord
 
@@ -537,7 +537,7 @@ Where classification does not run, any other code-less reply falls through to th
 | `conversation-seed-composer.ts` | Surface-aware conversation seed generation (richer than notification copy)                                 |
 | `destination-resolver.ts`       | Resolves per-channel endpoints (Telegram and Slack chat ID, Discord user ID)                               |
 | `adapters/macos.ts`             | Cadet adapter -- broadcasts `notification_intent` via SSE with deep-link metadata                          |
-| `adapters/platform.ts`          | Platform adapter: posts to the platform push-dispatch endpoint for native mobile push                      |
+| `adapters/platform.ts`          | Platform adapter: posts to the cloud push-dispatch endpoint for native mobile push                         |
 | `adapters/telegram.ts`          | Telegram adapter: calls the Telegram Bot API through `messaging/providers/telegram-bot/send.ts`            |
 | `adapters/slack.ts`             | Slack adapter: posts to the guardian's DM through `messaging/providers/slack/send.ts`                      |
 | `adapters/discord.ts`           | Discord adapter: sends to the guardian's DM through `messaging/providers/discord/send.ts`                  |

package/src/notifications/__tests__/broadcaster.test.ts

@@ -1111,7 +1111,7 @@ describe("NotificationBroadcaster remotePushDispatched flag", () => {
       renderedCopy: {},
     });
 
-  test("cadet payload carries true when the platform adapter reports an accepted push; platform payload omits it", async () => {
+  test("cadet payload carries true when the cloud adapter reports an accepted push; platform payload omits it", async () => {
     bothChannelsCopy();
 
     const cadet = makeCapturingAdapter("cadet");
@@ -1135,7 +1135,7 @@ describe("NotificationBroadcaster remotePushDispatched flag", () => {
     expect(platform.sends[0]?.payload.remotePushDispatched).toBeUndefined();
   });
 
-  test("cadet payload carries false when the platform dispatch fails", async () => {
+  test("cadet payload carries false when the cloud dispatch fails", async () => {
     bothChannelsCopy();
 
     const cadet = makeCapturingAdapter("cadet");
@@ -1173,7 +1173,7 @@ describe("NotificationBroadcaster remotePushDispatched flag", () => {
     expect(cadet.sends[0]?.payload.remotePushPlatforms).toEqual(["ios"]);
   });
 
-  test("cadet payload carries false when the platform reports no accepted push (skipped or zero tokens)", async () => {
+  test("cadet payload carries false when the cloud reports no accepted push (skipped or zero tokens)", async () => {
     bothChannelsCopy();
 
     const cadet = makeCapturingAdapter("cadet");
@@ -1192,7 +1192,7 @@ describe("NotificationBroadcaster remotePushDispatched flag", () => {
     expect(cadet.sends[0]?.payload.remotePushDispatched).toBe(false);
   });
 
-  test("cadet payload carries false when the platform result omits remotePushAccepted", async () => {
+  test("cadet payload carries false when the cloud result omits remotePushAccepted", async () => {
     bothChannelsCopy();
 
     const cadet = makeCapturingAdapter("cadet");
@@ -1208,7 +1208,7 @@ describe("NotificationBroadcaster remotePushDispatched flag", () => {
     expect(cadet.sends[0]?.payload.remotePushDispatched).toBe(false);
   });
 
-  test("cadet payload carries false when the platform adapter throws", async () => {
+  test("cadet payload carries false when the cloud adapter throws", async () => {
     bothChannelsCopy();
 
     const cadet = makeCapturingAdapter("cadet");
@@ -1233,7 +1233,7 @@ describe("NotificationBroadcaster remotePushDispatched flag", () => {
     expect(results.find((r) => r.channel === "cadet")?.status).toBe("sent");
   });
 
-  test("cadet intent still flushes with false when the platform channel's prep throws", async () => {
+  test("cadet intent still flushes with false when the cloud channel's prep throws", async () => {
     bothChannelsCopy();
     pairingErrorByChannel = { platform: new Error("pairing exploded") };
 
@@ -1251,14 +1251,14 @@ describe("NotificationBroadcaster remotePushDispatched flag", () => {
       broadcaster.broadcastDecision(makeSignal(), bothChannelsDecision()),
     ).rejects.toThrow("pairing exploded");
 
-    // The platform adapter never ran, but the deferred cadet send must not
+    // The cloud adapter never ran, but the deferred cadet send must not
     // be lost -- its pending delivery row would block retries forever.
     expect(platform.sends.length).toBe(0);
     expect(cadet.sends.length).toBe(1);
     expect(cadet.sends[0]?.payload.remotePushDispatched).toBe(false);
   });
 
-  test("deadline expiry flushes cadet with false while the platform dispatch finishes in the background", async () => {
+  test("deadline expiry flushes cadet with false while the cloud dispatch finishes in the background", async () => {
     bothChannelsCopy();
 
     let resolvePlatform: ((result: DeliveryResult) => void) | undefined;
@@ -1325,7 +1325,7 @@ describe("NotificationBroadcaster remotePushDispatched flag", () => {
     expect(results.find((r) => r.channel === "platform")?.status).toBe("sent");
   });
 
-  test("dispatches the platform adapter before the cadet intent when both are selected", async () => {
+  test("dispatches the cloud adapter before the cadet intent when both are selected", async () => {
     bothChannelsCopy();
 
     const callOrder: string[] = [];

package/src/notifications/__tests__/completion-policy.test.ts

@@ -225,7 +225,7 @@ describe("completion local delivery policy", () => {
   );
 
   test.each(["chat.assistant_reply", "schedule.result"])(
-    "%s retains the platform owner fallback when the guardian lookup is unavailable",
+    "%s retains the cloud owner fallback when the guardian lookup is unavailable",
     (sourceEventName) => {
       expect(
         isCompletionRecipientUnavailable(