@mycadet/assistant 0.12.7 → 0.12.9

package/src/telemetry/usage-telemetry-reporter.test.ts

@@ -2,12 +2,12 @@
  * Tests for UsageTelemetryReporter.
  *
  * Covers the authenticated send path (and the skip behavior when credentials
- * are absent or the platform is disabled), watermark advancement, error
+ * are absent or the cloud is disabled), watermark advancement, error
  * handling, batch recursion, device ID resolution, and payload shape.
  */
 import { afterEach, beforeEach, describe, expect, mock, test } from "bun:test";
 
-import type { ConsentState } from "../platform/consent-cache.js";
+import type { ConsentState } from "../cloud/consent-cache.js";
 
 // ---------------------------------------------------------------------------
 // Module mocks (must precede production imports)
@@ -60,23 +60,23 @@ mock.module("./turn-events-store.js", () => ({
   queryUnreportedTurnEvents: mockQueryUnreportedTurnEvents,
 }));
 
-let mockPlatformClient: Record<string, unknown> | null = null;
+let mockCloudClient: Record<string, unknown> | null = null;
 
-mock.module("../platform/client.js", () => ({
-  CadetPlatformClient: {
-    create: async () => mockPlatformClient,
+mock.module("../cloud/client.js", () => ({
+  CadetCloudClient: {
+    create: async () => mockCloudClient,
   },
 }));
 
-const mockGetPlatformBaseUrl = mock(() => "https://cloud.mycadet.ai");
+const mockGetCloudBaseUrl = mock(() => "https://cloud.mycadet.ai");
 
 const mockGetPlatformOrganizationId = mock(() => "");
 const mockGetPlatformUserId = mock(() => "");
 
 mock.module("../config/env.js", () => ({
-  getPlatformBaseUrl: mockGetPlatformBaseUrl,
-  getPlatformOrganizationId: mockGetPlatformOrganizationId,
-  getPlatformUserId: mockGetPlatformUserId,
+  getCloudBaseUrl: mockGetCloudBaseUrl,
+  getCloudOrganizationId: mockGetPlatformOrganizationId,
+  getCloudUserId: mockGetPlatformUserId,
   // Re-export anything else the module might import transitively
   str: () => undefined,
   num: () => undefined,
@@ -105,7 +105,7 @@ const mockGetCachedShareDiagnostics = mock(() => false);
 // cases override it with old/empty values.
 const mockGetCachedShareDiagnosticsVersion = mock(() => "2999-01-01");
 
-mock.module("../platform/consent-cache.js", () => ({
+mock.module("../cloud/consent-cache.js", () => ({
   getRawShareAnalytics: mockGetRawShareAnalytics,
   getCachedShareDiagnostics: mockGetCachedShareDiagnostics,
   getCachedShareDiagnosticsVersion: mockGetCachedShareDiagnosticsVersion,
@@ -362,9 +362,9 @@ beforeEach(() => {
   mockQueryUnreportedTurnEvents.mockReturnValue([]);
   getDb().delete(toolInvocations).run();
   getTelemetryDb()!.delete(telemetryEvents).run();
-  delete process.env.CADET_DISABLE_PLATFORM;
-  delete process.env.IS_PLATFORM;
-  mockGetPlatformBaseUrl.mockReset();
+  delete process.env.CADET_DISABLE_CLOUD;
+  delete process.env.IS_CLOUD;
+  mockGetCloudBaseUrl.mockReset();
   mockGetDeviceId.mockReset();
   mockGetDeviceId.mockReturnValue("test-device-id");
   mockGetPlatformOrganizationId.mockReset();
@@ -374,7 +374,7 @@ beforeEach(() => {
 
   // Defaults
   mockGetFlushCheckpoint.mockReturnValue(null);
-  mockGetPlatformBaseUrl.mockReturnValue("https://cloud.mycadet.ai");
+  mockGetCloudBaseUrl.mockReturnValue("https://cloud.mycadet.ai");
 
   mockFetch = mock(() =>
     Promise.resolve(new Response('{"accepted":0}', { status: 200 })),
@@ -384,19 +384,19 @@ beforeEach(() => {
   // Default to an authenticated client whose fetch delegates to the mockFetch
   // spy, so the existing payload/body assertions keep working. The reporter
   // sends authenticated-only; tests that exercise the no-credentials path
-  // override this with `mockPlatformClient = null`.
-  mockPlatformClient = {
+  // override this with `mockCloudClient = null`.
+  mockCloudClient = {
     baseUrl: "https://test.mycadet.ai",
     assistantApiKey: "test-key",
-    platformAssistantId: "asst-123",
+    cloudAssistantId: "asst-123",
     fetch: (path: string, init?: RequestInit) => mockFetch(path, init),
   };
 });
 
 afterEach(() => {
   globalThis.fetch = originalFetch;
-  delete process.env.CADET_DISABLE_PLATFORM;
-  delete process.env.IS_PLATFORM;
+  delete process.env.CADET_DISABLE_CLOUD;
+  delete process.env.IS_CLOUD;
 });
 
 // ---------------------------------------------------------------------------
@@ -408,10 +408,10 @@ describe("UsageTelemetryReporter", () => {
     const clientFetchMock = mock(async (_path: string, _init?: RequestInit) => {
       return new Response('{"accepted":2}', { status: 200 });
     });
-    mockPlatformClient = {
+    mockCloudClient = {
       baseUrl: "https://test.mycadet.ai",
       assistantApiKey: "test-key",
-      platformAssistantId: "asst-123",
+      cloudAssistantId: "asst-123",
       fetch: clientFetchMock,
     };
     const events = [makeUsageEvent(), makeUsageEvent()];
@@ -430,7 +430,7 @@ describe("UsageTelemetryReporter", () => {
   test("flush is skipped when no platform credentials are available", async () => {
     // Authenticated-only: with no client, nothing is sent and the watermark is
     // left intact so the backlog ships once credentials resolve.
-    mockPlatformClient = null;
+    mockCloudClient = null;
 
     const events = [makeUsageEvent()];
     mockQueryUnreportedUsageEvents.mockReturnValue(events);
@@ -445,11 +445,11 @@ describe("UsageTelemetryReporter", () => {
     expect(watermarkCalls.length).toBe(0);
   });
 
-  test("flush is skipped when CADET_DISABLE_PLATFORM is set in local mode", async () => {
-    // The platform-disabled toggle suppresses the send. Unlike the opt-out
+  test("flush is skipped when CADET_DISABLE_CLOUD is set in local mode", async () => {
+    // The cloud-disabled toggle suppresses the send. Unlike the opt-out
     // branch, watermarks are NOT advanced, so the backlog ships once the flag
     // is cleared.
-    process.env.CADET_DISABLE_PLATFORM = "true";
+    process.env.CADET_DISABLE_CLOUD = "true";
 
     const events = [makeUsageEvent()];
     mockQueryUnreportedUsageEvents.mockReturnValue(events);
@@ -464,12 +464,12 @@ describe("UsageTelemetryReporter", () => {
     expect(mockSetFlushCheckpoint).not.toHaveBeenCalled();
   });
 
-  test("CADET_DISABLE_PLATFORM is ignored when IS_PLATFORM is set (managed mode)", async () => {
-    // Platform-managed assistants always connect to the platform; an inherited
-    // CADET_DISABLE_PLATFORM must not suppress telemetry for them (matches
-    // arePlatformFeaturesEnabled / CadetPlatformClient.create()).
-    process.env.IS_PLATFORM = "true";
-    process.env.CADET_DISABLE_PLATFORM = "true";
+  test("CADET_DISABLE_CLOUD is ignored when IS_CLOUD is set (managed mode)", async () => {
+    // Cloud assistants always connect to the cloud; an inherited
+    // CADET_DISABLE_CLOUD must not suppress telemetry for them (matches
+    // areCloudFeaturesEnabled / CadetCloudClient.create()).
+    process.env.IS_CLOUD = "true";
+    process.env.CADET_DISABLE_CLOUD = "true";
 
     const events = [makeUsageEvent()];
     mockQueryUnreportedUsageEvents.mockReturnValue(events);
@@ -677,7 +677,7 @@ describe("UsageTelemetryReporter", () => {
     mockGetRawShareAnalytics.mockReturnValue(true);
 
     // no-credentials: authenticated-only, no platform client resolved.
-    mockPlatformClient = null;
+    mockCloudClient = null;
     expect(await reporter.flush()).toEqual({
       flushed: false,
       reason: "no-credentials",
@@ -1230,7 +1230,7 @@ describe("UsageTelemetryReporter", () => {
   test("omits the trace when the accepted consent version predates the disclosure threshold (share_diagnostics on)", async () => {
     mockGetCachedShareDiagnostics.mockReturnValue(true);
     // Consent recorded under an older version that never disclosed trace
-    // collection → gate closed, mirroring the platform ingest gate.
+    // collection → gate closed, mirroring the cloud ingest gate.
     mockGetCachedShareDiagnosticsVersion.mockReturnValue("2000-01-01");
     mockQueryUnreportedUsageEvents.mockReturnValue([]);
     mockQueryUnreportedTurnEvents.mockReturnValue(singleTurnEvent());
@@ -1836,12 +1836,12 @@ describe("UsageTelemetryReporter", () => {
   });
 
   test("platform disabled takes precedence over consent off — watermarks NOT advanced", async () => {
-    // CADET_DISABLE_PLATFORM keeps the consent cache false (the consent
-    // refresh can't create a platform client), so both gates would fire. The
+    // CADET_DISABLE_CLOUD keeps the consent cache false (the consent
+    // refresh can't create a cloud client), so both gates would fire. The
     // platform-disabled gate runs first and returns without advancing
     // watermarks, preserving the backlog until the flag is cleared — a
     // deployment toggle must not be treated as a privacy opt-out.
-    process.env.CADET_DISABLE_PLATFORM = "true";
+    process.env.CADET_DISABLE_CLOUD = "true";
     mockGetRawShareAnalytics.mockReturnValue(false);
     const events = [makeUsageEvent()];
     mockQueryUnreportedUsageEvents.mockReturnValue(events);
@@ -1913,7 +1913,7 @@ describe("UsageTelemetryReporter", () => {
   // `APP_VERSION` directly until their respective follow-ups land.
   // Nullable llm_usage cases (legacy rows from before migration 267 ran)
   // fall back to the running binary's `APP_VERSION` rather than emitting
-  // explicit `null` — under the platform contract a present-but-null
+  // explicit `null` — under the cloud contract a present-but-null
   // per-event value would override the envelope, and we'd rather have a
   // concrete version than no version.
   // -------------------------------------------------------------------------
@@ -1960,7 +1960,7 @@ describe("UsageTelemetryReporter", () => {
     );
     // No explicit null on the wire — the running binary's APP_VERSION is
     // stamped instead so a present-but-null value can't override the
-    // envelope under the platform's per-event-wins contract.
+    // envelope under the cloud's per-event-wins contract.
     expect(body.events[0].assistant_version).toBe("1.2.3-test");
   });
 
@@ -1969,7 +1969,7 @@ describe("UsageTelemetryReporter", () => {
     // don't yet carry a per-event version. Until the follow-up migration
     // adds a column to `messages`, we stamp the running binary's
     // APP_VERSION instead of explicit null — matches what the envelope
-    // would have provided but per-event so it survives the platform
+    // would have provided but per-event so it survives the cloud
     // contract that treats present per-event values as winning over the
     // envelope.
     mockQueryUnreportedUsageEvents.mockReturnValue([]);
@@ -2978,7 +2978,7 @@ describe("UsageTelemetryReporter", () => {
   });
 
   test("acknowledge is NOT called when platform credentials are missing", async () => {
-    mockPlatformClient = null;
+    mockCloudClient = null;
     const { source, acknowledge, pending } = makeAckSource("fake_ack", [
       "row-1",
     ]);
@@ -3315,7 +3315,7 @@ describe("UsageTelemetryReporter", () => {
   });
 
   test("expired rows are pruned even when the flush skips for platform-disabled", async () => {
-    process.env.CADET_DISABLE_PLATFORM = "true";
+    process.env.CADET_DISABLE_CLOUD = "true";
     seedExpiredAndFreshRows();
     const reporter = new UsageTelemetryReporter(
       [outboxSource(OUTBOX_NAME)],

package/src/telemetry/usage-telemetry-reporter.ts

@@ -20,16 +20,16 @@
  * processes open read-write; each instance only touches its own sources'
  * cursors, so the split shares no flush state.
  *
- * Authenticated-only: events are sent via the managed proxy context
+ * Authenticated-only: events are sent via the cloud proxy context
  * (Api-Key header). When no cloud credentials are available, or when
- * platform features are disabled (CADET_DISABLE_PLATFORM in local mode), the
+ * platform features are disabled (CADET_DISABLE_CLOUD in local mode), the
  * flush is skipped and retried next cycle.
  */
 
-import { getPlatformOrganizationId, getPlatformUserId } from "../config/env.js";
-import { CadetPlatformClient } from "../platform/client.js";
-import { getRawShareAnalytics } from "../platform/consent-cache.js";
-import { arePlatformFeaturesEnabled } from "../platform/feature-gate.js";
+import { CadetCloudClient } from "../cloud/client.js";
+import { getRawShareAnalytics } from "../cloud/consent-cache.js";
+import { areCloudFeaturesEnabled } from "../cloud/feature-gate.js";
+import { getCloudOrganizationId, getCloudUserId } from "../config/env.js";
 import { getDeviceId } from "../util/device-id.js";
 import { getLogger } from "../util/logger.js";
 import { APP_VERSION } from "../version.js";
@@ -71,8 +71,8 @@ const TELEMETRY_PATH = "/v1/telemetry/ingest/";
 
 /**
  * Outcome of a {@link UsageTelemetryReporter.flush} call. `flushed: true` means
- * at least one batch reached the platform (2xx). `sent` is the count the daemon
- * POSTed; `persisted` is the count the platform confirmed written; `dropped` is
+ * at least one batch reached the cloud (2xx). `sent` is the count the daemon
+ * POSTed; `persisted` is the count the cloud confirmed written; `dropped` is
  * `sent - persisted` — folding server-side drops (opt-out, unauthenticated) and
  * events silently skipped at ingest validation (unknown/invalid type) into one
  * "did not land" number. `flushed: false` carries a kebab-case skip reason.
@@ -257,7 +257,7 @@ export class UsageTelemetryReporter {
 
   start(): void {
     // Delay the first flush to allow the credential infrastructure (CES
-    // handshake) to complete. Without this delay, CadetPlatformClient.create()
+    // handshake) to complete. Without this delay, CadetCloudClient.create()
     // returns null because the credential backend hasn't resolved yet, causing
     // the initial flush to be skipped (we send authenticated-only); the
     // delay lets credentials resolve so the first flush can actually ship.
@@ -338,12 +338,12 @@ export class UsageTelemetryReporter {
         }
       }
 
-      // Skip when platform features are disabled (CADET_DISABLE_PLATFORM in
-      // local mode; the flag is ignored when IS_PLATFORM is set, matching
-      // CadetPlatformClient.create()). Watermarks are NOT advanced here: this
+      // Skip when platform features are disabled (CADET_DISABLE_CLOUD in
+      // local mode; the flag is ignored when IS_CLOUD is set, matching
+      // CadetCloudClient.create()). Watermarks are NOT advanced here: this
       // is a deployment/local-mode toggle, not a privacy opt-out, so the unsent
       // backlog ships once the flag is cleared.
-      if (!arePlatformFeaturesEnabled()) {
+      if (!areCloudFeaturesEnabled()) {
         return settle("disabled");
       }
 
@@ -377,7 +377,7 @@ export class UsageTelemetryReporter {
         return settle("unknown-consent");
       }
 
-      // Respect a confirmed opt-out: if the platform owner declined
+      // Respect a confirmed opt-out: if the cloud owner declined
       // `share_analytics` consent, skip the flush and advance watermarks so
       // events recorded during the opt-out window are never sent
       // retroactively. The daemon runs the reporter even when opted out
@@ -468,7 +468,7 @@ export class UsageTelemetryReporter {
       // Resolve auth context. We send authenticated-only: if no platform
       // credentials are available yet, skip without advancing watermarks so the
       // backlog ships on a later cycle once credentials resolve.
-      const client = await CadetPlatformClient.create();
+      const client = await CadetCloudClient.create();
       if (!client) {
         log.debug(
           {
@@ -501,8 +501,8 @@ export class UsageTelemetryReporter {
       // the server would silently drop; the batch is POSTed unchanged.
       validateWireEvents(typedEvents, log);
 
-      const organizationId = getPlatformOrganizationId() || undefined;
-      const userId = getPlatformUserId() || undefined;
+      const organizationId = getCloudOrganizationId() || undefined;
+      const userId = getCloudUserId() || undefined;
       const payload = {
         device_id: getDeviceId(),
         assistant_version: APP_VERSION,

package/src/telemetry/watchdog-direct-emit.test.ts

@@ -8,22 +8,22 @@
  */
 import { beforeEach, describe, expect, mock, test } from "bun:test";
 
-import type { ConsentState } from "../platform/consent-cache.js";
+import type { ConsentState } from "../cloud/consent-cache.js";
 
 let shareAnalytics: ConsentState = true;
-mock.module("../platform/consent-cache.js", () => ({
+mock.module("../cloud/consent-cache.js", () => ({
   getRawShareAnalytics: () => shareAnalytics,
 }));
 
 let platformEnabled = true;
-mock.module("../platform/feature-gate.js", () => ({
-  arePlatformFeaturesEnabled: () => platformEnabled,
+mock.module("../cloud/feature-gate.js", () => ({
+  areCloudFeaturesEnabled: () => platformEnabled,
 }));
 
 const fetchCalls: Array<{ path: string; body: string }> = [];
 let clientAvailable = true;
-mock.module("../platform/client.js", () => ({
-  CadetPlatformClient: {
+mock.module("../cloud/client.js", () => ({
+  CadetCloudClient: {
     create: async () =>
       clientAvailable
         ? {
@@ -36,9 +36,9 @@ mock.module("../platform/client.js", () => ({
   },
 }));
 
-import { setPlatformOrganizationId, setPlatformUserId } from "../config/env.js";
-setPlatformOrganizationId("org-1");
-setPlatformUserId("user-1");
+import { setCloudOrganizationId, setCloudUserId } from "../config/env.js";
+setCloudOrganizationId("org-1");
+setCloudUserId("user-1");
 
 mock.module("../util/device-id.js", () => ({
   getDeviceId: () => "device-xyz",

package/src/telemetry/watchdog-direct-emit.ts

@@ -9,7 +9,7 @@
  * damage it is reporting, and the store's `recordWatchdogEvent` drags the whole
  * `db-connection` graph in behind it.
  *
- * This helper POSTs the event straight to the platform ingest instead. It is
+ * This helper POSTs the event straight to the cloud ingest instead. It is
  * best-effort: opt-out, missing credentials (early boot, before the CES
  * handshake), platform-disabled, and HTTP failures all no-op. No retry — a lost
  * event is acceptable for a rare, high-signal check. Deduped downstream on
@@ -18,10 +18,10 @@
 
 import { v4 as uuid } from "uuid";
 
-import { getPlatformOrganizationId, getPlatformUserId } from "../config/env.js";
-import { CadetPlatformClient } from "../platform/client.js";
-import { getRawShareAnalytics } from "../platform/consent-cache.js";
-import { arePlatformFeaturesEnabled } from "../platform/feature-gate.js";
+import { CadetCloudClient } from "../cloud/client.js";
+import { getRawShareAnalytics } from "../cloud/consent-cache.js";
+import { areCloudFeaturesEnabled } from "../cloud/feature-gate.js";
+import { getCloudOrganizationId, getCloudUserId } from "../config/env.js";
 import { getDeviceId } from "../util/device-id.js";
 import { getLogger } from "../util/logger.js";
 import { APP_VERSION } from "../version.js";
@@ -34,7 +34,7 @@ const log = getLogger("watchdog-direct-emit");
 const TELEMETRY_INGEST_PATH = "/v1/telemetry/ingest/";
 
 /**
- * POST one `watchdog` event directly to the platform, bypassing the SQLite
+ * POST one `watchdog` event directly to the cloud, bypassing the SQLite
  * buffer. Honors a confirmed `share_analytics` opt-out and the
  * platform-features gate. An unknown consent state emits: this path reports
  * SQLite corruption and has no outbox to defer into, and platform ingest
@@ -52,13 +52,13 @@ export async function emitWatchdogEventDirect(
     if (getRawShareAnalytics() === false) {
       return;
     }
-    if (!arePlatformFeaturesEnabled()) {
+    if (!areCloudFeaturesEnabled()) {
       return;
     }
 
     // Authenticated-only. Null before the CES handshake resolves credentials;
     // the event is simply dropped (no durable backlog to retry from).
-    const client = await CadetPlatformClient.create();
+    const client = await CadetCloudClient.create();
     if (!client) {
       return;
     }
@@ -77,8 +77,8 @@ export async function emitWatchdogEventDirect(
     // would silently drop the event; the POST proceeds unchanged.
     validateWireEvents([event], log);
 
-    const organizationId = getPlatformOrganizationId() || undefined;
-    const userId = getPlatformUserId() || undefined;
+    const organizationId = getCloudOrganizationId() || undefined;
+    const userId = getCloudUserId() || undefined;
     const resp = await client.fetch(TELEMETRY_INGEST_PATH, {
       method: "POST",
       headers: { "Content-Type": "application/json" },

package/src/tools/__tests__/side-effect-abort-guard.test.ts

@@ -293,7 +293,7 @@ const SKILL_TOOLS: GuardedTool[] = [
   proxied("screen_point_at"),
 
   {
-    name: "scaffold_managed_skill",
+    name: "scaffold_cloud_skill",
     input: {
       skill_id: "guard-skill",
       name: "Guard Skill",
@@ -302,7 +302,7 @@ const SKILL_TOOLS: GuardedTool[] = [
       activation_hints: ["guard"],
     },
   },
-  { name: "delete_managed_skill", input: { skill_id: "guard-skill" } },
+  { name: "delete_cloud_skill", input: { skill_id: "guard-skill" } },
   { name: "find_similar_skills", input: { goal: "do a thing" } },
 
   {

package/src/tools/browser/cdp-client/factory.ts

@@ -1268,7 +1268,7 @@ function extractCdpError(
  * `BrowserBackend.send`. Converts thrown CdpErrors back into a
  * `CdpResult` envelope with an `error` payload so the manager does
  * not need to know about our thrown-error convention, then the
- * envelope is unwrapped again on the way out of the managed client.
+ * envelope is unwrapped again on the way out of the cloud client.
  *
  * The per-command `command.sessionId` (populated by the manager from
  * a session's opaque `targetId`) is intentionally not forwarded to

package/src/tools/computer-use/target.ts

@@ -1,5 +1,5 @@
 import {
-  isVirtualDesktopPlatform,
+  isVirtualDesktopCloud,
   shouldUseVirtualDesktop,
 } from "../../desktop/virtual-desktop-feature.js";
 import type { ExecutionTarget } from "../tool-types.js";
@@ -13,7 +13,7 @@ export function computerUseTarget(
     input.target ??
     (input.target_client_id === undefined &&
     context &&
-    shouldUseVirtualDesktop(context, isVirtualDesktopPlatform())
+    shouldUseVirtualDesktop(context, isVirtualDesktopCloud())
       ? "assistant-desktop"
       : "connected-computer");
   if (target !== "connected-computer" && target !== "assistant-desktop") {

package/src/tools/credentials/store.ts

@@ -131,28 +131,10 @@ export async function storeCredentialValue(
     );
   }
 
-  // The stored plaintext may already sit in recent transcripts: the user
-  // message that pasted it, the persisted tool_use input, the tool result
-  // echoing the command. This is the scrub seam, not setSecureKeyAsync, which
-  // also fires on OAuth refresh rotations and MCP header writes whose values
-  // never transited a transcript.
   if (!input.skipTranscriptScrub) {
-    const { isNonSecretPlatformField, scrubStoredCredentialFromTranscripts } =
+    const { scrubStoredCredentialFromTranscripts } =
       await import("../../daemon/credential-transcript-scrub.js");
-    if (!isNonSecretPlatformField(service, field)) {
-      try {
-        const scrubbed = await scrubStoredCredentialFromTranscripts(value);
-        log.info(
-          { service, field, ...scrubbed },
-          "Credential stored; scrubbed value from recent transcripts",
-        );
-      } catch (err) {
-        log.warn(
-          { err, service, field },
-          "Credential stored, but transcript scrub failed",
-        );
-      }
-    }
+    await scrubStoredCredentialFromTranscripts(value, { service, field });
   }
 
   const metadata = upsertCredentialMetadata(service, field, {

package/src/tools/network/__tests__/{managed-search-proxy.test.ts → cloud-search-proxy.test.ts}

@@ -1,24 +1,24 @@
 import { afterEach, beforeEach, describe, expect, mock, test } from "bun:test";
 
-interface MockPlatformClient {
-  platformAssistantId: string;
+interface MockCloudClient {
+  cloudAssistantId: string;
   fetch: ReturnType<typeof mock>;
 }
 
-let mockClient: MockPlatformClient | null = null;
+let mockClient: MockCloudClient | null = null;
 
-mock.module("../../../platform/client.js", () => ({
-  CadetPlatformClient: {
+mock.module("../../../cloud/client.js", () => ({
+  CadetCloudClient: {
     create: async () => mockClient,
   },
 }));
 
-import { callManagedSearchProxy } from "../managed-search-proxy.js";
+import { callManagedSearchProxy } from "../cloud-search-proxy.js";
 
 describe("callManagedSearchProxy", () => {
   beforeEach(() => {
     mockClient = {
-      platformAssistantId: "asst-123",
+      cloudAssistantId: "asst-123",
       fetch: mock(async () => {
         return new Response(
           JSON.stringify({
@@ -36,7 +36,7 @@ describe("callManagedSearchProxy", () => {
     mockClient = null;
   });
 
-  test("posts to the managed search proxy endpoint for the assistant and provider", async () => {
+  test("posts to the cloud search proxy endpoint for the assistant and provider", async () => {
     await callManagedSearchProxy("brave", {
       method: "GET",
       path: "/res/v1/web/search",
@@ -44,12 +44,12 @@ describe("callManagedSearchProxy", () => {
 
     expect(mockClient!.fetch).toHaveBeenCalledTimes(1);
     expect(mockClient!.fetch.mock.calls[0][0]).toBe(
-      "/v1/assistants/asst-123/managed-search-proxy/brave/",
+      "/v1/assistants/asst-123/cloud-search-proxy/brave/",
     );
   });
 
   test("encodes URL path segments", async () => {
-    mockClient!.platformAssistantId = "asst/123";
+    mockClient!.cloudAssistantId = "asst/123";
 
     await callManagedSearchProxy("brave", {
       method: "GET",
@@ -57,11 +57,11 @@ describe("callManagedSearchProxy", () => {
     });
 
     expect(mockClient!.fetch.mock.calls[0][0]).toBe(
-      "/v1/assistants/asst%2F123/managed-search-proxy/brave/",
+      "/v1/assistants/asst%2F123/cloud-search-proxy/brave/",
     );
   });
 
-  test("sends the platform contract request envelope", async () => {
+  test("sends the cloud contract request envelope", async () => {
     await callManagedSearchProxy("brave", {
       method: "GET",
       path: "/res/v1/web/search",
@@ -173,7 +173,7 @@ describe("callManagedSearchProxy", () => {
   test("returns a typed platform error for non-2xx platform responses", async () => {
     mockClient!.fetch = mock(async () => {
       return new Response(
-        JSON.stringify({ detail: "unsupported managed search provider" }),
+        JSON.stringify({ detail: "unsupported cloud search provider" }),
         {
           status: 400,
           headers: {
@@ -197,9 +197,9 @@ describe("callManagedSearchProxy", () => {
         "content-type": "application/json",
         "x-platform-request-id": "platform-req-123",
       },
-      body: { detail: "unsupported managed search provider" },
+      body: { detail: "unsupported cloud search provider" },
       message:
-        "Managed search proxy returned status 400: unsupported managed search provider",
+        "Cloud search proxy returned status 400: unsupported cloud search provider",
     });
   });
 
@@ -224,7 +224,7 @@ describe("callManagedSearchProxy", () => {
         "content-type": "application/json",
       },
       body: { detail: "Insufficient balance" },
-      message: "Managed search proxy returned status 402: Insufficient balance",
+      message: "Cloud search proxy returned status 402: Insufficient balance",
     });
   });
 
@@ -239,12 +239,12 @@ describe("callManagedSearchProxy", () => {
     expect(result).toEqual({
       ok: false,
       kind: "unavailable",
-      message: "Managed search proxy is unavailable in this environment.",
+      message: "Cloud search proxy is unavailable in this environment.",
     });
   });
 
   test("returns unavailable when platform assistant ID is missing", async () => {
-    mockClient!.platformAssistantId = "";
+    mockClient!.cloudAssistantId = "";
 
     const result = await callManagedSearchProxy("brave", {
       method: "GET",
@@ -255,7 +255,7 @@ describe("callManagedSearchProxy", () => {
       ok: false,
       kind: "unavailable",
       message:
-        "Managed search proxy is unavailable: platform assistant ID is missing.",
+        "Cloud search proxy is unavailable: platform assistant ID is missing.",
     });
   });
 
@@ -276,7 +276,7 @@ describe("callManagedSearchProxy", () => {
       ok: false,
       kind: "invalid-response",
       body: { ok: true },
-      message: "Managed search proxy returned an invalid response envelope.",
+      message: "Cloud search proxy returned an invalid response envelope.",
     });
   });
 });