@mycadet/assistant 0.12.7 → 0.12.9

package/src/runtime/routes/credential-routes.ts

@@ -3,7 +3,7 @@
  *
  * These routes provide higher-level credential operations (list with metadata,
  * inspect, reveal, set, delete, status) that compose the lower-level secret
- * storage primitives with metadata, OAuth connections, and platform-managed
+ * storage primitives with metadata, OAuth connections, and cloud-managed
  * credential catalogs.
  *
  * POST   /v1/credentials/list    — list all credentials with metadata
@@ -19,9 +19,9 @@ import { z } from "zod";
 import { AcpCredentialFormatError } from "../../acp/acp-credentials.js";
 import { isAssistantFeatureFlagEnabled } from "../../config/assistant-feature-flags.js";
 import {
-  fetchManagedCatalog,
-  type ManagedCredentialDescriptor,
-} from "../../credential-execution/managed-catalog.js";
+  type CloudCredentialDescriptor,
+  fetchCloudCatalog,
+} from "../../credential-execution/cloud-catalog.js";
 import { buildForChatSentinel } from "../../daemon/chat-credential-redaction.js";
 import { invalidateEmailReadinessForByoCredential } from "../../email/byo-email-credential.js";
 import {
@@ -53,17 +53,17 @@ import {
 import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import { recordForChatMint } from "../for-chat-mint-registry.js";
 import { recordRevealSuccess } from "../reveal-success-registry.js";
+import {
+  isPlatformCloudCredential,
+  type PlatformCloudCredentialAction,
+  platformCloudCredentialRefusal,
+} from "./cloud-credentials.js";
 import {
   assertCredentialNotInUse,
   invalidateConnectionsAfterCredentialDelete,
 } from "./credential-in-use.js";
 import { InjectionTemplateSchema } from "./credential-prompt-routes.js";
 import { BadRequestError, ForbiddenError, InternalError } from "./errors.js";
-import {
-  isPlatformManagedCredential,
-  type PlatformManagedCredentialAction,
-  platformManagedCredentialRefusal,
-} from "./platform-managed-credentials.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
 // ---------------------------------------------------------------------------
@@ -134,8 +134,8 @@ function buildCredentialOutput(
   return output;
 }
 
-function buildManagedCredentialOutput(
-  descriptor: ManagedCredentialDescriptor,
+function buildCloudCredentialOutput(
+  descriptor: CloudCredentialDescriptor,
 ): Record<string, unknown> {
   return {
     source: "platform",
@@ -162,10 +162,10 @@ interface CredentialLookup {
 /**
  * Resolve a credential lookup from service+field or UUID.
  * Throws BadRequestError when neither is provided or the UUID is not found,
- * and ForbiddenError for a credential the platform owns.
+ * and ForbiddenError for a credential the cloud owns.
  *
  * Every read handler that returns credential material (inspect, reveal)
- * resolves through here, so the platform-managed refusal sits at the single
+ * resolves through here, so the cloud-managed refusal sits at the single
  * point they share and cannot drift apart from the list filter.
  */
 function resolveCredentialLookup(
@@ -205,24 +205,24 @@ function resolveCredentialLookup(
 }
 
 /**
- * Refuse any use of a credential the platform provisions for itself, whatever
+ * Refuse any use of a credential the cloud provisions for itself, whatever
  * the calling principal. Reads are refused because the API key spends
  * inference on Cadet's account. Writes are refused because they are a read
- * by another name: repointing `cadet:platform_base_url` sends the next
- * platform call, bearing that same key, to a host of the writer's choosing.
+ * they are owned by the cloud's own provisioning; a hand-set key or
+ * identity id would silently misroute or impersonate every platform call.
  *
- * The platform's own provisioning does not come through here. It writes over
+ * The cloud's own provisioning does not come through here. It writes over
  * `POST /v1/secrets` (Django to vembda to the pod), as does the CLI and the
  * local-mode connect flow in the web client.
  */
 function assertNotPlatformManaged(
   service: string,
   field: string,
-  action: PlatformManagedCredentialAction,
+  action: PlatformCloudCredentialAction,
 ): void {
-  if (isPlatformManagedCredential(service, field)) {
+  if (isPlatformCloudCredential(service, field)) {
     throw new ForbiddenError(
-      platformManagedCredentialRefusal(service, field, action),
+      platformCloudCredentialRefusal(service, field, action),
     );
   }
 }
@@ -245,7 +245,7 @@ async function handleCredentialsList({ body }: RouteHandlerArgs) {
   // Platform-provisioned credentials are not the user's to act on, so they
   // never become a Settings row (and never a click-to-reveal).
   let allMetadata = live.records.filter(
-    (m) => !isPlatformManagedCredential(m.service, m.field),
+    (m) => !isPlatformCloudCredential(m.service, m.field),
   );
 
   if (search) {
@@ -290,9 +290,9 @@ async function handleCredentialsList({ body }: RouteHandlerArgs) {
     }),
   );
 
-  // Fetch platform-managed credentials (best-effort).
-  const managedResult = await fetchManagedCatalog();
-  let managedCredentials: Record<string, unknown>[] = [];
+  // Fetch cloud credentials (best-effort).
+  const managedResult = await fetchCloudCatalog();
+  let cloudCredentials: Record<string, unknown>[] = [];
   if (managedResult.ok && managedResult.descriptors.length > 0) {
     let descriptors = managedResult.descriptors;
     if (search) {
@@ -304,10 +304,10 @@ async function handleCredentialsList({ body }: RouteHandlerArgs) {
           (d.accountInfo ?? "").toLowerCase().includes(query),
       );
     }
-    managedCredentials = descriptors.map(buildManagedCredentialOutput);
+    cloudCredentials = descriptors.map(buildCloudCredentialOutput);
   }
 
-  return { credentials, managedCredentials };
+  return { credentials, cloudCredentials };
 }
 
 async function handleCredentialsInspect({ body }: RouteHandlerArgs) {
@@ -625,7 +625,7 @@ export const ROUTES: RouteDefinition[] = [
     },
     summary: "List all credentials with metadata",
     description:
-      "Return credentials from the live credential vault, with OAuth connection info and platform-managed credentials. Fails if the vault is unreachable.",
+      "Return credentials from the live credential vault, with OAuth connection info and cloud credentials. Fails if the vault is unreachable.",
     tags: ["credentials"],
     requestBody: z.object({
       search: z.string().optional().describe("Filter by substring match"),
@@ -634,9 +634,7 @@ export const ROUTES: RouteDefinition[] = [
       credentials: z
         .array(z.unknown())
         .describe("Local credentials with metadata"),
-      managedCredentials: z
-        .array(z.unknown())
-        .describe("Platform-managed credentials"),
+      cloudCredentials: z.array(z.unknown()).describe("Cloud credentials"),
     }),
     handler: handleCredentialsList,
   },

package/src/runtime/routes/default-provider-routes.ts

@@ -7,7 +7,7 @@
  *
  * The dedicated PUT exists because the generic config write paths parse
  * `llm.default` as a partial fragment — a provider the matrix cannot
- * implement is silently dropped or clamped to the managed column on the next
+ * implement is silently dropped or clamped to the cloud column on the next
  * reparse instead of rejected. This route strict-parses and fails loudly.
  *
  * Availability is reported, never enforced: a dangling connection pin is a

package/src/runtime/routes/desktop-setup-routes.test.ts

@@ -14,7 +14,7 @@ import { ROUTES } from "./desktop-setup-routes.js";
 import { NotFoundError } from "./errors.js";
 
 const originalContainerized = process.env.IS_CONTAINERIZED;
-const originalPlatform = process.env.IS_PLATFORM;
+const originalPlatform = process.env.IS_CLOUD;
 const status = spyOn(desktopDependencies, "getStatus");
 
 afterAll(() => {
@@ -23,7 +23,7 @@ afterAll(() => {
 
 beforeEach(() => {
   process.env.IS_CONTAINERIZED = "true";
-  process.env.IS_PLATFORM = "true";
+  process.env.IS_CLOUD = "true";
   status.mockReturnValue({ state: "ready" });
 });
 
@@ -34,9 +34,9 @@ afterEach(() => {
     process.env.IS_CONTAINERIZED = originalContainerized;
   }
   if (originalPlatform === undefined) {
-    delete process.env.IS_PLATFORM;
+    delete process.env.IS_CLOUD;
   } else {
-    process.env.IS_PLATFORM = originalPlatform;
+    process.env.IS_CLOUD = originalPlatform;
   }
   setOverridesForTesting({});
   status.mockClear();
@@ -62,7 +62,7 @@ describe("desktop setup route feature gate", () => {
     });
 
     test(`${route.method} rejects self-hosted Docker assistants without inspecting dependencies`, () => {
-      process.env.IS_PLATFORM = "false";
+      process.env.IS_CLOUD = "false";
       setOverridesForTesting({ "assistant-desktop": true });
       expect(() => route.handler({})).toThrow(NotFoundError);
       expect(status).not.toHaveBeenCalled();

package/src/runtime/routes/desktop-setup-routes.ts

@@ -23,7 +23,7 @@ export const ROUTES: RouteDefinition[] = ["GET", "POST"].map((method) => ({
   handler: () => {
     if (!isVirtualDesktopEnabled()) {
       throw new NotFoundError(
-        "Virtual desktop is available only on enabled platform-hosted assistants",
+        "Virtual desktop is available only on enabled cloud-hosted assistants",
       );
     }
     const status = desktopDependencies.getStatus();

package/src/runtime/routes/domain-routes.ts

@@ -7,14 +7,9 @@
 
 import { z } from "zod";
 
+import { CadetCloudClient } from "../../cloud/client.js";
 import { getApexDomain } from "../../config/env.js";
-import {
-  getConfig,
-  loadRawConfig,
-  saveRawConfig,
-  setNestedValue,
-} from "../../config/loader.js";
-import { CadetPlatformClient } from "../../platform/client.js";
+import { getConfig, setConfigSection } from "../../config/loader.js";
 import { getLogger } from "../../util/logger.js";
 import { LOCAL_PRINCIPALS } from "../auth/route-policy.js";
 import { BadRequestError, RouteError, UnauthorizedError } from "./errors.js";
@@ -53,14 +48,14 @@ const DomainVerificationStatusResponseSchema = z.object({
 
 // ── Helpers ───────────────────────────────────────────────────────────
 
-async function requireClient(): Promise<CadetPlatformClient> {
-  const client = await CadetPlatformClient.create();
+async function requireClient(): Promise<CadetCloudClient> {
+  const client = await CadetCloudClient.create();
   if (!client) {
     throw new UnauthorizedError(
       "Platform credentials not configured. Run: assistant cloud connect",
     );
   }
-  if (!client.platformAssistantId) {
+  if (!client.cloudAssistantId) {
     throw new UnauthorizedError(
       "Assistant ID not configured. Run: assistant cloud connect",
     );
@@ -69,10 +64,10 @@ async function requireClient(): Promise<CadetPlatformClient> {
 }
 
 async function fetchDomains(
-  client: CadetPlatformClient,
+  client: CadetCloudClient,
 ): Promise<DomainListResponse> {
   const response = await client.fetch(
-    `/v1/assistants/${client.platformAssistantId}/domains/`,
+    `/v1/assistants/${client.cloudAssistantId}/domains/`,
   );
 
   if (!response.ok) {
@@ -106,7 +101,7 @@ async function handleDomainRegister({ body = {} }: RouteHandlerArgs) {
   }
 
   const response = await client.fetch(
-    `/v1/assistants/${client.platformAssistantId}/domains/`,
+    `/v1/assistants/${client.cloudAssistantId}/domains/`,
     {
       method: "POST",
       headers: { "Content-Type": "application/json" },
@@ -140,9 +135,10 @@ async function handleDomainRegister({ body = {} }: RouteHandlerArgs) {
   const registeredSubdomain =
     data.subdomain ?? data.domain?.replace(`.${apexDomain}`, "") ?? subdomain;
   if (registeredSubdomain) {
-    const raw = loadRawConfig();
-    setNestedValue(raw, "platform.subdomain", registeredSubdomain);
-    saveRawConfig(raw);
+    setConfigSection("cloud", {
+      ...getConfig().cloud,
+      subdomain: registeredSubdomain,
+    });
   }
 
   return data;
@@ -160,10 +156,8 @@ async function handleDomainStatus(_args: RouteHandlerArgs) {
     const first = domains[0];
     const sub = first.subdomain ?? first.domain?.replace(`.${apexDomain}`, "");
     if (sub) {
-      if (getConfig().platform.subdomain !== sub) {
-        const raw = loadRawConfig();
-        setNestedValue(raw, "platform.subdomain", sub);
-        saveRawConfig(raw);
+      if (getConfig().cloud.subdomain !== sub) {
+        setConfigSection("cloud", { ...getConfig().cloud, subdomain: sub });
       }
     }
   }
@@ -190,7 +184,7 @@ async function handleDomainVerificationStatus({ body = {} }: RouteHandlerArgs) {
   }
 
   const response = await client.fetch(
-    `/v1/assistants/${client.platformAssistantId}/domains/${encodeURIComponent(domain_id)}/verification-status/`,
+    `/v1/assistants/${client.cloudAssistantId}/domains/${encodeURIComponent(domain_id)}/verification-status/`,
   );
 
   if (!response.ok) {

package/src/runtime/routes/email-routes.ts

@@ -7,6 +7,7 @@
 
 import { z } from "zod";
 
+import { CadetCloudClient } from "../../cloud/client.js";
 import { getReadinessService } from "../../daemon/handlers/config-channels.js";
 import { markdownToEmailHtml } from "../../email/html-renderer.js";
 import {
@@ -14,7 +15,6 @@ import {
   listEmailAddresses,
   type RegisteredEmailAddress,
 } from "../../email/registered-inbox.js";
-import { CadetPlatformClient } from "../../platform/client.js";
 import { LOCAL_PRINCIPALS } from "../auth/route-policy.js";
 import {
   BadRequestError,
@@ -26,14 +26,14 @@ import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
 // ── Helpers ───────────────────────────────────────────────────────────
 
-async function requireClient(): Promise<CadetPlatformClient> {
-  const client = await CadetPlatformClient.create();
+async function requireClient(): Promise<CadetCloudClient> {
+  const client = await CadetCloudClient.create();
   if (!client) {
     throw new UnauthorizedError(
       "Platform credentials not configured. Run: assistant cloud connect",
     );
   }
-  if (!client.platformAssistantId) {
+  if (!client.cloudAssistantId) {
     throw new UnauthorizedError(
       "Assistant ID not configured. Run: assistant cloud connect",
     );
@@ -48,7 +48,7 @@ async function handleEmailRegister({ body = {} }: RouteHandlerArgs) {
   const client = await requireClient();
 
   const response = await client.fetch(
-    `/v1/assistants/${client.platformAssistantId}/email-addresses/`,
+    `/v1/assistants/${client.cloudAssistantId}/email-addresses/`,
     {
       method: "POST",
       headers: { "Content-Type": "application/json" },
@@ -92,10 +92,10 @@ function invalidateEmailReadinessState(): void {
 
 /**
  * The registered addresses, or the route-appropriate error: a listing
- * failure maps to LIST_FAILED with the platform's status when it sent one.
+ * failure maps to LIST_FAILED with the cloud's status when it sent one.
  */
 async function requireEmailAddressList(
-  client: CadetPlatformClient,
+  client: CadetCloudClient,
 ): Promise<RegisteredEmailAddress[]> {
   const list = await listEmailAddresses(client);
   if (!list.ok) {
@@ -119,7 +119,7 @@ async function handleEmailUnregister(_args: RouteHandlerArgs) {
   const target = addresses[0];
 
   const deleteResponse = await client.fetch(
-    `/v1/assistants/${client.platformAssistantId}/email-addresses/${target.id}/`,
+    `/v1/assistants/${client.cloudAssistantId}/email-addresses/${target.id}/`,
     { method: "DELETE" },
   );
 
@@ -153,7 +153,7 @@ async function handleEmailStatus(_args: RouteHandlerArgs) {
   const target = addresses[0];
 
   const statusResponse = await client.fetch(
-    `/v1/assistants/${client.platformAssistantId}/email-addresses/${target.id}/status/`,
+    `/v1/assistants/${client.cloudAssistantId}/email-addresses/${target.id}/status/`,
   );
 
   if (!statusResponse.ok) {
@@ -198,7 +198,7 @@ async function handleEmailList({ queryParams = {} }: RouteHandlerArgs) {
   }
 
   const qs = params.toString();
-  const path = `/v1/assistants/${client.platformAssistantId}/emails/${qs ? `?${qs}` : ""}`;
+  const path = `/v1/assistants/${client.cloudAssistantId}/emails/${qs ? `?${qs}` : ""}`;
   const response = await client.fetch(path);
 
   if (!response.ok) {
@@ -222,7 +222,7 @@ async function handleEmailDownload({ queryParams = {} }: RouteHandlerArgs) {
   const { messageId } = queryParams;
 
   const response = await client.fetch(
-    `/v1/assistants/${client.platformAssistantId}/emails/${messageId}/`,
+    `/v1/assistants/${client.cloudAssistantId}/emails/${messageId}/`,
   );
 
   if (!response.ok) {
@@ -344,7 +344,7 @@ async function handleEmailAttachmentList({
   const { messageId } = queryParams;
 
   const response = await client.fetch(
-    `/v1/assistants/${client.platformAssistantId}/emails/${messageId}/attachments/`,
+    `/v1/assistants/${client.cloudAssistantId}/emails/${messageId}/attachments/`,
   );
 
   if (!response.ok) {
@@ -370,7 +370,7 @@ async function handleEmailAttachmentGet({
   const { messageId, attachmentId } = queryParams;
 
   const response = await client.fetch(
-    `/v1/assistants/${client.platformAssistantId}/emails/${messageId}/attachments/${attachmentId}/download/`,
+    `/v1/assistants/${client.cloudAssistantId}/emails/${messageId}/attachments/${attachmentId}/download/`,
   );
 
   if (!response.ok) {

package/src/runtime/routes/errors.ts

@@ -14,7 +14,7 @@ export class RouteError extends Error {
    * Optional structured payload surfaced to clients in the standard
    * error envelope as `error.details`. Use sparingly — only when the
    * client genuinely needs machine-readable context beyond `code` and
-   * `message` (e.g. mirroring a platform-side response shape).
+   * `message` (e.g. mirroring a cloud-side response shape).
    */
   readonly details?: unknown;
 

package/src/runtime/routes/gateway-status-routes.ts

@@ -3,7 +3,7 @@
  *
  * The tunnel is the gateway's outbound public-ingress transport. It is only
  * used to tunnel inbound Twilio webhooks and live voice/audio WebSockets to
- * this assistant — it plays no part in cloud credentials or the managed
+ * this assistant — it plays no part in cloud credentials or the cloud
  * LLM proxy. The handler reads the live status from the gateway over the local
  * IPC socket, so the assistant does not need gateway signing material.
  *

package/src/runtime/routes/identity-routes.ts

@@ -7,7 +7,7 @@ import { totalmem } from "node:os";
 
 import { z } from "zod";
 
-import { getIsPlatform } from "../../config/env-registry.js";
+import { getIsCloud } from "../../config/env-registry.js";
 import { getDbMigrationReadiness } from "../../daemon/daemon-readiness.js";
 import { parseIdentityFields } from "../../daemon/handlers/identity.js";
 import { getProfilerRuntimeStatus } from "../../daemon/profiler-run-store.js";
@@ -59,7 +59,7 @@ function getMemoryInfo(): MemoryInfo {
   try {
     const bytesToMb = (b: number) =>
       Math.round((b / (1024 * 1024)) * 100) / 100;
-    // In platform-managed mode the daemon shares its Node process with whatever
+    // In cloud-managed mode the daemon shares its Node process with whatever
     // the container is doing as a whole; `process.memoryUsage().rss` only sees
     // this process's resident set, which understates the container footprint
     // operators care about. Read the cgroup usage file directly so /v1/health
@@ -67,7 +67,7 @@ function getMemoryInfo(): MemoryInfo {
     // can't be sampled, fall back to the cgroup usage (if any) before reporting 0
     // — the metric is best-effort and must never fail the probe.
     const currentBytes =
-      (getIsPlatform() ? getContainerMemoryUsageBytes() : null) ??
+      (getIsCloud() ? getContainerMemoryUsageBytes() : null) ??
       sampleProcessRssBytes() ??
       getContainerMemoryUsageBytes() ??
       0;

package/src/runtime/routes/inbound-message-handler.ts

@@ -421,7 +421,7 @@ export async function handleChannelInbound({
   // Canonicalize the sender identity so all trust lookups, member matching,
   // and guardian binding comparisons use a normalized form. Phone-like
   // channels (voice, whatsapp) are normalized to E.164; non-phone
-  // channels pass through the platform-stable ID unchanged.
+  // channels pass through the cloud-stable ID unchanged.
   const canonicalSenderId = rawSenderId
     ? canonicalizeInboundIdentity(sourceChannel, rawSenderId)
     : null;

package/src/runtime/routes/inbound-stages/acl-enforcement.ts

@@ -128,7 +128,7 @@ export interface AclEnforcementParams {
    */
   isCallbackInteraction: boolean;
   /**
-   * The platform named no actor for this event (the id is a channel's
+   * The cloud named no actor for this event (the id is a channel's
    * synthetic system identity). There is no identity claim to enforce, so
    * the ACL neither resolves a member nor denies: the family stage that
    * consumes such an event applies it only to a row the daemon already

package/src/runtime/routes/inbound-stages/transcribe-audio.test.ts

@@ -204,7 +204,7 @@ describe("tryTranscribeAudioAttachments", () => {
     const audio = makeAudioAttachment("a1");
     mockAttachments = [audio];
     const managedMessage =
-      "Managed speech needs a working Cadet Cloud connection — reconnect with 'assistant cloud connect'.";
+      "Cloud speech needs a working Cadet Cloud connection — reconnect with 'assistant cloud connect'.";
     mockTranscriber = {
       providerId: "cadet",
       boundaryId: "daemon-batch",

package/src/runtime/routes/index.ts

@@ -43,6 +43,7 @@ import { ROUTES as CHANNEL_SEND_ROUTES } from "./channel-send-routes.js";
 import { ROUTES as CHANNEL_VERIFICATION_ROUTES } from "./channel-verification-routes.js";
 import { ROUTES as CHATGPT_SUBSCRIPTION_AUTH_ROUTES } from "./chatgpt-subscription-auth-routes.js";
 import { ROUTES as CLIENT_ROUTES } from "./client-routes.js";
+import { ROUTES as PLATFORM_ROUTES } from "./cloud-routes.js";
 import { ROUTES as COMPOSER_SETTINGS_ROUTES } from "./composer-settings-routes.js";
 import { ROUTES as CONSOLIDATION_ROUTES } from "./consolidation-routes.js";
 import { CONTACT_PROMPT_ROUTES } from "./contact-prompt-routes.js";
@@ -126,7 +127,6 @@ import { ROUTES as OAUTH_PROVIDERS_ROUTES } from "./oauth-providers.js";
 import { ROUTES as OAUTH_PROXY_GRANT_ROUTES } from "./oauth-proxy-grant-routes.js";
 import { ROUTES as OAUTH_PROXY_ROUTES } from "./oauth-proxy-routes.js";
 import { ROUTES as ONBOARDING_CHECKIN_ROUTES } from "./onboarding-checkin-routes.js";
-import { ROUTES as PLATFORM_ROUTES } from "./platform-routes.js";
 import { ROUTES as PLAYGROUND_ROUTES } from "./playground/index.js";
 import { ROUTES as PLUGINS_ROUTES } from "./plugins-routes.js";
 import { ROUTES as PROFILER_ROUTES } from "./profiler-routes.js";

package/src/runtime/routes/inference-profile-availability-guard.ts

@@ -13,7 +13,7 @@
  * identically.
  */
 
-import { getManagedUpstream } from "../../providers/cadet-model-routing.js";
+import { getCloudUpstream } from "../../providers/cadet-model-routing.js";
 import { ROUTING_IDENTITY_PROVIDERS } from "../../providers/inference/auth.js";
 import type { ConnectionAvailability } from "../../providers/inference/connection-availability.js";
 import { cadetConnectionAvailability } from "../../providers/inference/connection-availability.js";
@@ -54,7 +54,7 @@ export function verifyProfileCommand(name: string): string {
 
 function managedAlternative(model: string, repair: ProfileRepairHint): string {
   const served =
-    "this model is served by your signed-in Cadet-managed route (no API key needed)";
+    "this model is served by your signed-in Cadet Cloud route (no API key needed)";
   const quotedModel = shellQuote(model);
   switch (repair.kind) {
     case "create":
@@ -89,8 +89,8 @@ function byoSequence(provider: string): string {
 
 /**
  * Build the repair guidance for an unavailable selection: the exact
- * Cadet-managed alternative when the model is managed-routable and the
- * managed route is usable; otherwise key collection alone when a connection
+ * Cadet Cloud alternative when the model is managed-routable and the
+ * cloud route is usable; otherwise key collection alone when a connection
  * already exists and only its credential is missing, or the full
  * bring-your-own-key sequence when there is no connection at all.
  */
@@ -109,7 +109,7 @@ async function repairGuidance(
   if (ROUTING_IDENTITY_PROVIDERS.has(provider)) {
     return `Sign in to the "${provider}" route in Settings → Models & Services, or pick a profile backed by a provider API key, then retry.`;
   }
-  if (model && getManagedUpstream(model) !== null) {
+  if (model && getCloudUpstream(model) !== null) {
     const managed = await cadetConnectionAvailability();
     if (managed.status === "ok") {
       return managedAlternative(model, repair);

package/src/runtime/routes/inference-profiles-routes.ts

@@ -12,7 +12,7 @@
  * the model must be in the catalog (unless `allowUnlisted`), a referenced
  * connection must exist, and the resulting profile must be able to dispatch
  * (unless `allowUnavailable`). Writes reuse the shared config-write plumbing
- * (`commitConfigWrite` + the managed-profile guards), so a CLI-created profile
+ * (`commitConfigWrite` + the cloud-profile guards), so a CLI-created profile
  * is completed/materialized identically to a UI-created one.
  */
 
@@ -62,8 +62,8 @@ import {
 import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import {
   commitConfigWrite,
-  normalizeManagedProfileWrites,
-  rejectManagedProfileDeletion,
+  normalizeCloudProfileWrites,
+  rejectCloudProfileDeletion,
 } from "./conversation-query-routes.js";
 import { BadRequestError, ConflictError, NotFoundError } from "./errors.js";
 import {
@@ -656,7 +656,7 @@ async function handleCreateProfile({ body = {} }: RouteHandlerArgs) {
   profiles[name] = entry;
   // Defensive: for a user-owned name this is a no-op; it re-asserts the
   // managed-name protection at the shared write choke point.
-  normalizeManagedProfileWrites({ llm: { profiles: { [name]: entry } } });
+  normalizeCloudProfileWrites({ llm: { profiles: { [name]: entry } } });
 
   await commitConfigWrite(raw, "create inference profile");
 
@@ -698,14 +698,14 @@ async function handleUpdateProfile({
   if (!existing) {
     if (MANAGED_PROFILE_NAMES.has(name)) {
       throw new BadRequestError(
-        `Cannot edit managed profile "${name}". Managed profiles are read-only; duplicate to a custom profile to customize.`,
+        `Cannot edit cloud profile "${name}". Cloud profiles are read-only; duplicate to a custom profile to customize.`,
       );
     }
     throw new NotFoundError(`Profile "${name}" not found.`);
   }
   if (MANAGED_PROFILE_NAMES.has(name) && existing.source === "managed") {
     throw new BadRequestError(
-      `Cannot edit managed profile "${name}". Managed profiles are read-only; duplicate to a custom profile to customize.`,
+      `Cannot edit cloud profile "${name}". Cloud profiles are read-only; duplicate to a custom profile to customize.`,
     );
   }
 
@@ -799,7 +799,7 @@ async function handleUpdateProfile({
   }
 
   profiles[name] = merged;
-  normalizeManagedProfileWrites({ llm: { profiles: { [name]: merged } } });
+  normalizeCloudProfileWrites({ llm: { profiles: { [name]: merged } } });
 
   await commitConfigWrite(raw, "update inference profile");
 
@@ -834,10 +834,10 @@ async function handleDeleteProfile({ pathParams = {} }: RouteHandlerArgs) {
   const llm = asPlainObject(raw.llm);
   const profiles = asPlainObject(llm?.profiles);
 
-  // Reject deletion of a managed default with a clear message before the
+  // Reject deletion of a cloud default with a clear message before the
   // existence check, so `delete balanced` explains itself even when the
   // managed stub is on disk.
-  rejectManagedProfileDeletion({ llm: { profiles: { [name]: null } } });
+  rejectCloudProfileDeletion({ llm: { profiles: { [name]: null } } });
 
   if (!profiles || profiles[name] === undefined) {
     throw new NotFoundError(`Profile "${name}" not found.`);
@@ -997,7 +997,7 @@ export const ROUTES: RouteDefinition[] = [
     additionalResponses: {
       "400": {
         description:
-          "Invalid fields, a profile that cannot serve requests, or attempt to edit a managed profile",
+          "Invalid fields, a profile that cannot serve requests, or attempt to edit a cloud profile",
       },
       "404": { description: "Profile not found" },
     },
@@ -1018,7 +1018,7 @@ export const ROUTES: RouteDefinition[] = [
     pathParams: [{ name: "name", description: "Profile name" }],
     responseBody: z.object({ ok: z.literal(true), name: z.string() }),
     additionalResponses: {
-      "400": { description: "Attempt to delete a managed profile" },
+      "400": { description: "Attempt to delete a cloud profile" },
       "404": { description: "Profile not found" },
       "409": {
         description: