@mycadet/assistant 0.12.9 → 0.12.10

package/src/config/bundled-skills/settings/tools/open-system-settings.test.ts

@@ -3,7 +3,7 @@ import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import type { ToolContext } from "../../../../tools/types.js";
 
 // The real isWindows() reads process.platform, so simulate the host platform
-// directly instead of mocking util/platform.js.
+// directly instead of mocking util/os.js.
 const originalProcessPlatform = process.platform;
 
 function setProcessPlatform(value: string): void {

package/src/config/bundled-skills/settings/tools/open-system-settings.ts

@@ -3,7 +3,7 @@ import type {
   ToolContext,
   ToolExecutionResult,
 } from "../../../../tools/types.js";
-import { isWindows } from "../../../../util/platform.js";
+import { isWindows } from "../../../../util/os.js";
 
 const PANES = {
   microphone: {

package/src/config/call-site-defaults.ts

@@ -159,12 +159,6 @@ export const CALL_SITE_DEFAULTS: Record<LLMCallSite, CallSiteDefaultConfig> = {
   voiceEscalationJudge: {
     profile: JEV_MANAGED_PROFILE_KEY,
   },
-  // Picks the default profile for a turn pinned to the Auto profile. On a
-  // BYOK install the cloud-only Jev profile has no body, so the router is
-  // unavailable and the turn runs on Balanced.
-  autoProfileRouter: {
-    profile: JEV_MANAGED_PROFILE_KEY,
-  },
   // The barge-in continuation judge remains off until a TypeSafe profile is
   // pinned here (see live-voice/continuation-judge.ts).
   voiceContinuationJudge: { profile: "cost-optimized" },

package/src/config/cloud-identity.ts

@@ -3,11 +3,10 @@
  *
  * Django maps an assistant API key to these ids via
  * `POST /v1/internal/assistants/validate/`. Process startup rehydrates from
- * that endpoint into the in-memory overrides. Resolution reads those
- * overrides (and `CLOUD_ORGANIZATION_ID` / `CLOUD_USER_ID` when set).
- * When the in-memory assistant id is empty, the next resolve retries
- * validate (single-flight, with a cooldown after a failed attempt that holds
- * only while the same API key and base URL are stored).
+ * that endpoint into the in-memory overrides. Resolution reads only those
+ * overrides. When the in-memory assistant id is empty, the next resolve
+ * retries validate (single-flight, with a cooldown after a failed attempt
+ * that holds only while the same API key and base URL are stored).
  */
 
 import { credentialKey } from "../security/credential-key.js";
@@ -174,6 +173,14 @@ export async function ensureCloudIdentityIds(): Promise<void> {
         failedFingerprint = null;
         nextEnsureAttemptAt = 0;
         log.info("Loaded platform identity from platform validate");
+      } catch (err) {
+        // Startup rehydration must never take a process down: an
+        // unreachable credential store only means identity is not bound
+        // yet, and the next resolve retries.
+        log.warn(
+          { error: err instanceof Error ? err.message : String(err) },
+          "Failed to ensure cloud identity ids (non-fatal)",
+        );
       } finally {
         ensureInFlight = null;
       }

package/src/config/composer-preferences.ts

@@ -10,7 +10,7 @@ import { join } from "node:path";
 
 import { z } from "zod";
 
-import { getDataDir } from "../util/platform.js";
+import { getDataDir } from "../util/layout.js";
 
 export const ComposerPreferencesSchema = z.object({
   favoriteModeIds: z.array(z.string().min(1).max(200)).max(5).default([]),

package/src/config/default-profile-catalog.ts

@@ -8,7 +8,6 @@ import { resolveModelIntent } from "../providers/model-intents.js";
 import { isCodexSubscriptionModel } from "../providers/openai/codex-models.js";
 import type { ModelIntent } from "../providers/types.js";
 import {
-  AUTO_PROFILE_KEY,
   BACKUP_PROFILE_KEYS,
   type BackupProfileKey,
   DEFAULT_PROFILE_KEYS,
@@ -93,7 +92,6 @@ const CADET_PROFILE_IMPLS: ProfileImpls = {
   balanced: {
     model: "accounts/fireworks/models/glm-5p3-flash",
     provider: "cadet",
-    source: "managed",
     label: "Balanced",
     description: "Good balance of quality, cost, and speed",
     fallbackProfile: FALLBACK_PROFILE_BY_KEY.balanced,
@@ -107,7 +105,6 @@ const CADET_PROFILE_IMPLS: ProfileImpls = {
   "quality-optimized": {
     model: "gpt-5.6-sol",
     provider: "cadet",
-    source: "managed",
     label: "Quality",
     description: "High-quality results with the most capable model",
     fallbackProfile: FALLBACK_PROFILE_BY_KEY["quality-optimized"],
@@ -121,7 +118,6 @@ const CADET_PROFILE_IMPLS: ProfileImpls = {
   "cost-optimized": {
     model: "accounts/fireworks/models/deepseek-v4p1-flash",
     provider: "cadet",
-    source: "managed",
     label: "Budget",
     // Tier intent only - never name the concrete model here. Clients
     // surface the live model beside the description, so a model name in
@@ -154,7 +150,6 @@ const CADET_PROFILE_IMPLS: ProfileImpls = {
     // owner. This model is the one live-voice TTFT drives validated.
     model: "gpt-5.6-luna",
     provider: "cadet",
-    source: "managed",
     label: "Fast",
     description: "Fastest responses, with reasoning turned off",
     fallbackProfile: FALLBACK_PROFILE_BY_KEY["latency-optimized"],
@@ -189,7 +184,6 @@ const BACKUP_PROFILE_IMPLS: Record<BackupProfileKey, DefaultProfileTemplate> = {
   "balanced-backup": {
     model: "claude-sonnet-5",
     provider: "cadet",
-    source: "managed",
     label: "Balanced Backup",
     description: "Automatic backup for the Balanced profile",
     maxTokens: 32000,
@@ -202,7 +196,6 @@ const BACKUP_PROFILE_IMPLS: Record<BackupProfileKey, DefaultProfileTemplate> = {
   "quality-optimized-backup": {
     model: "claude-opus-5",
     provider: "cadet",
-    source: "managed",
     label: "Quality Backup",
     description: "Automatic backup for the Quality profile",
     maxTokens: 32000,
@@ -215,7 +208,6 @@ const BACKUP_PROFILE_IMPLS: Record<BackupProfileKey, DefaultProfileTemplate> = {
   "cost-optimized-backup": {
     model: "gemini-3.1-flash-lite",
     provider: "cadet",
-    source: "managed",
     label: "Budget Backup",
     description: "Automatic backup for the Budget profile",
     maxTokens: 8192,
@@ -233,7 +225,6 @@ const BACKUP_PROFILE_IMPLS: Record<BackupProfileKey, DefaultProfileTemplate> = {
   "latency-optimized-backup": {
     model: "claude-haiku-4-5-20251001",
     provider: "cadet",
-    source: "managed",
     label: "Fast Backup",
     description: "Automatic backup for the Fast profile",
     maxTokens: 8192,
@@ -259,7 +250,6 @@ const CHATGPT_PROFILE_IMPLS: ProfileImpls = {
   balanced: {
     model: "gpt-5.6-luna",
     provider: "chatgpt",
-    source: "managed",
     label: "Balanced",
     description: "Good balance of quality, cost, and speed",
     // Matches the cadet column's Balanced token budget: the Codex path
@@ -272,7 +262,6 @@ const CHATGPT_PROFILE_IMPLS: ProfileImpls = {
   "quality-optimized": {
     model: "gpt-5.6-sol",
     provider: "chatgpt",
-    source: "managed",
     label: "Quality",
     description: "Best results with the most capable model",
     maxTokens: 32000,
@@ -283,7 +272,6 @@ const CHATGPT_PROFILE_IMPLS: ProfileImpls = {
   "cost-optimized": {
     model: "gpt-5.6-luna",
     provider: "chatgpt",
-    source: "managed",
     label: "Budget",
     description: "Cheapest responses, for high-volume work",
     maxTokens: 8192,
@@ -294,7 +282,6 @@ const CHATGPT_PROFILE_IMPLS: ProfileImpls = {
   "latency-optimized": {
     model: "gpt-5.6-luna",
     provider: "chatgpt",
-    source: "managed",
     label: "Fast",
     description: "Fastest responses, with reasoning turned off",
     maxTokens: 8192,
@@ -322,7 +309,6 @@ const BYOK_PROFILE_IMPLS: Record<
 > = {
   balanced: {
     intent: "balanced",
-    source: "user",
     label: "Balanced",
     description: "Good balance of quality, cost, and speed",
     maxTokens: 16000,
@@ -332,7 +318,6 @@ const BYOK_PROFILE_IMPLS: Record<
   },
   "quality-optimized": {
     intent: "quality-optimized",
-    source: "user",
     label: "Quality",
     description: "Best results with the most capable model",
     maxTokens: 32000,
@@ -345,7 +330,6 @@ const BYOK_PROFILE_IMPLS: Record<
   // is effort alone (see PROVIDER_MODEL_INTENTS).
   "cost-optimized": {
     intent: "cost-optimized",
-    source: "user",
     label: "Budget",
     description: "Cheapest responses, for high-volume work",
     maxTokens: 8192,
@@ -355,7 +339,6 @@ const BYOK_PROFILE_IMPLS: Record<
   },
   "latency-optimized": {
     intent: "latency-optimized",
-    source: "user",
     label: "Fast",
     description: "Fastest responses, with reasoning turned off",
     maxTokens: 8192,
@@ -402,7 +385,6 @@ export const PROFILE_IMPLS: Record<
 export const JEV_MANAGED_PROFILE_TEMPLATE: DefaultProfileTemplate = {
   model: "jev-latest",
   provider: "cadet",
-  source: "managed",
   label: "Jev",
   description:
     "TypeSafe decision model for yes/no verdicts, for the voice judges and memory selection",
@@ -411,27 +393,6 @@ export const JEV_MANAGED_PROFILE_TEMPLATE: DefaultProfileTemplate = {
   contextWindow: { maxInputTokens: 32_000 },
 };
 
-/**
- * The Auto profile: the cloud Balanced body under its own label, so that
- * anything dispatching the name directly runs Balanced. The per-message
- * choice among the defaults happens in the agent loop, not here (see
- * `AUTO_PROFILE_KEY`). No `fallbackProfile`: the code-owned fallback mapping
- * is keyed by default profile, and a direct dispatch of this name is already
- * the fallback path. Flag-gated like `os-beta`: NOT in
- * `MANAGED_PROFILE_TEMPLATES`, so the unconditional boot seed never creates
- * it; the flag-gated profile reconcile materializes it while the
- * `auto-profile` feature flag is on.
- */
-export const AUTO_PROFILE_TEMPLATE: DefaultProfileTemplate = (() => {
-  const { fallbackProfile: _fallbackProfile, ...balanced } =
-    CADET_PROFILE_IMPLS.balanced;
-  return {
-    ...balanced,
-    label: "Auto",
-    description: "Picks the profile that fits each message, in beta",
-  };
-})();
-
 /**
  * Cloud profiles, i.e. the `cadet` column keyed by profile name, plus the
  * managed backup profiles and the cloud Jev profile. Backups come after the
@@ -498,7 +459,6 @@ export const USER_PROFILE_TEMPLATES: Record<string, DefaultProfileTemplate> =
 export const OS_BETA_PROFILE_TEMPLATE: DefaultProfileTemplate = {
   model: "MiniMaxAI/MiniMax-M3",
   provider: "cadet",
-  source: "managed",
   label: "OS Beta",
   description: "Good balance of quality, cost, and speed, in beta",
   maxTokens: 32000,
@@ -537,31 +497,13 @@ export const CODE_OWNED_PROFILE_NAMES = new Set<string>([
   JEV_MANAGED_PROFILE_KEY,
 ]);
 
-// All cloud profiles, including the flag-gated os-beta, are invariant:
-// their MANAGED-SOURCE entries are read-only to user-facing writes except
-// re-enabling a disabled one (enforced at commitConfigWrite). A user-owned
-// profile sharing one of these names is NOT locked — invariance is gated on
-// the on-disk entry's `source` being `managed`.
-export const INVARIANT_PROFILE_NAMES = new Set<string>([
-  ...DEFAULT_PROFILE_KEYS,
-  ...BACKUP_PROFILE_KEYS,
-  JEV_MANAGED_PROFILE_KEY,
-  AUTO_PROFILE_KEY,
-  OS_BETA_PROFILE_KEY,
-]);
-
-// Membership here marks a name as managed. The route layer applies managed
-// restrictions (blocking model/provider edits and deletion) only to entries
-// whose on-disk `source` is `managed`; `INVARIANT_PROFILE_NAMES` marks the
-// names whose managed-source entries are additionally frozen at the
-// `commitConfigWrite` choke point. `OS_BETA_PROFILE_KEY` is flag-gated: it is
-// materialized by the flag-gated profile reconcile, which refuses to touch a
-// same-named user profile.
+// Names reserved for code-defined default profiles. Users cannot create or
+// edit profiles under these names — a workspace entry on a non-`cadet`
+// provider under one would be a shadow, which the route layer refuses.
 export const MANAGED_PROFILE_NAMES = new Set<string>([
   ...DEFAULT_PROFILE_KEYS,
   ...BACKUP_PROFILE_KEYS,
   JEV_MANAGED_PROFILE_KEY,
-  AUTO_PROFILE_KEY,
   OS_BETA_PROFILE_KEY,
 ]);
 
@@ -691,10 +633,6 @@ function buildDefaultProfileEntries(): Record<string, ProfileEntry> {
     JEV_MANAGED_PROFILE_TEMPLATE,
     JEV_MANAGED_PROFILE_TEMPLATE.provider,
   );
-  entries[AUTO_PROFILE_KEY] = materializeProfile(
-    AUTO_PROFILE_TEMPLATE,
-    AUTO_PROFILE_TEMPLATE.provider,
-  );
   entries[OS_BETA_PROFILE_KEY] = materializeProfile(
     OS_BETA_PROFILE_TEMPLATE,
     OS_BETA_PROFILE_TEMPLATE.provider,
@@ -734,9 +672,9 @@ const WORKSPACE_OWNED_DEFAULT_FIELDS = ["label", "status", "topP"] as const;
  * Precedence:
  * - A name with no code default resolves to the workspace entry (custom
  *   profiles pass through untouched).
- * - A workspace entry whose `source` is not `managed` wins over the code
+ * - A workspace entry on a non-`cadet` provider wins over the code
  *   default — a user-owned profile sharing a default name shadows it.
- * - A managed-source workspace entry contributes only its
+ * - A `cadet`-provider workspace entry contributes only its
  *   `WORKSPACE_OWNED_DEFAULT_FIELDS`; all other content comes from the code
  *   default body.
  * - A default absent from the workspace resolves to the catalog body as-is —
@@ -777,7 +715,7 @@ function resolveAgainstBody(
     // to the stub would list a profile with no provider or model and let a
     // reference to it look valid, which is precisely what `LLMSchema` rejects
     // on those columns.
-    if (isCloudOnlyProfileKey(name) && workspace?.source === "managed") {
+    if (isCloudOnlyProfileKey(name) && workspace?.provider === "cadet") {
       return undefined;
     }
     return workspace;
@@ -788,7 +726,7 @@ function resolveAgainstBody(
   if (workspace == null) {
     return isFlagGatedProfileKey(name) ? undefined : { ...body };
   }
-  if (workspace.source !== "managed") {
+  if (workspace.provider !== "cadet") {
     return workspace;
   }
   const merged: ProfileEntry = { ...body };
@@ -816,11 +754,7 @@ function resolveAgainstBody(
  * - A default provider without a named matrix column materializes from the
  *   shared `BYOK_PROFILE_IMPLS` templates, with `resolveModelIntent`
  *   falling back to the provider's catalog `defaultModel`.
- * - The resolved body carries `source: "managed"` regardless of provider:
- *   default profile content is code-owned whichever provider implements it.
- *   The BYOK templates' `source: "user"` exists for the conversion pass's
- *   frozen `custom-*` reference bodies (`USER_PROFILE_TEMPLATES`), not as
- *   an ownership claim on the body.
+ * Default profile content is code-owned whichever provider implements it.
  */
 export function resolveDefaultProfileForProvider(
   workspaceProfiles: Record<string, ProfileEntry> | undefined,
@@ -892,7 +826,6 @@ function defaultProfileBodyForProvider(
       impl.provider,
       resolveDefaultConnectionName(defaultBlob) ?? undefined,
     ),
-    source: "managed",
   });
 }
 

package/src/config/default-profile-names.ts

@@ -77,24 +77,6 @@ export function isBackupProfileKey(value: string): value is BackupProfileKey {
  */
 export const JEV_MANAGED_PROFILE_KEY = "jev-managed";
 
-/**
- * Cloud profile that picks one of the default profiles per message: the
- * agent loop asks Jev which default fits the user's latest message and runs
- * the turn on that profile (`daemon/auto-profile-router.ts`). Its own body
- * is the cloud Balanced body, so any path that dispatches the name
- * directly, or a turn on which the router is unavailable, runs Balanced.
- * Managed column only, because the router depends on the cloud Jev route,
- * and flag-gated: it exists only while the `auto-profile` feature flag has
- * reconciled it into the workspace (see `sync-gated-profiles.ts`).
- * Deliberately NOT part of `DEFAULT_PROFILE_KEYS`: it is a selection over
- * those keys, not a fifth intent.
- */
-export const AUTO_PROFILE_KEY = "auto";
-export const AUTO_PROFILE_FEATURE_FLAG_KEY = "auto-profile";
-
-/** The call site the automatic profile router asks Jev through. */
-export const AUTO_PROFILE_ROUTER_CALL_SITE = "autoProfileRouter";
-
 /**
  * The call sites that consume a structured verdict and so may be pinned to
  * the Jev profile. Every other site expects chat text or a tool call, which
@@ -104,18 +86,16 @@ export const JEV_MANAGED_PROFILE_CALL_SITES = [
   "voiceEscalationJudge",
   "voiceContinuationJudge",
   "memoryV3SelectL2",
-  AUTO_PROFILE_ROUTER_CALL_SITE,
 ] as const;
 
 /**
  * Keys whose profile exists on the cloud (`cadet`) column only: the
- * backups, the Jev profile, and the Auto profile. Under a BYOK or ChatGPT
+ * backups and the Jev profile. Under a BYOK or ChatGPT
  * default provider these names have no body to resolve to.
  */
 export const MANAGED_ONLY_PROFILE_KEYS = [
   ...BACKUP_PROFILE_KEYS,
   JEV_MANAGED_PROFILE_KEY,
-  AUTO_PROFILE_KEY,
 ] as const;
 
 export function isCloudOnlyProfileKey(value: string): boolean {
@@ -136,10 +116,7 @@ export const OS_BETA_PROFILE_KEY = "os-beta";
  * a feature flag reconciles that entry in and out. Never always-valid
  * reference targets: a reference to one is valid only with the entry present.
  */
-export const FLAG_GATED_PROFILE_KEYS = [
-  OS_BETA_PROFILE_KEY,
-  AUTO_PROFILE_KEY,
-] as const;
+export const FLAG_GATED_PROFILE_KEYS = [OS_BETA_PROFILE_KEY] as const;
 
 export function isFlagGatedProfileKey(value: string): boolean {
   return (FLAG_GATED_PROFILE_KEYS as readonly string[]).includes(value);

package/src/config/env-registry.ts

@@ -6,7 +6,7 @@
  *
  * IMPORTANT: This module has NO internal imports (no logger, no platform
  * utilities) so it can be safely imported from bootstrap-level code like
- * util/platform.ts and util/logger.ts without circular dependencies.
+ * util/layout.ts and util/logger.ts without circular dependencies.
  *
  * Higher-level env vars that depend on the logger or config system live in
  * config/env.ts, which re-exports selected accessors from this module.
@@ -68,18 +68,6 @@ export function getIsCloud(): boolean {
   return flag("IS_CLOUD");
 }
 
-/**
- * CADET_DISABLE_CLOUD — boolean, default: false
- * When true, all outbound cloud API calls in local mode are suppressed.
- * The daemon, gateway, and web UI each no-op cloud requests with a
- * debug log. Has no effect when IS_CLOUD is true (cloud-managed
- * instances always connect to the cloud). Reads the legacy
- * CADET_DISABLE_CLOUD name as a fallback for older deployments.
- */
-export function getDisableCloud(): boolean {
-  return flag("CADET_DISABLE_CLOUD") || flag("CADET_DISABLE_CLOUD");
-}
-
 /**
  * CADET_DEVICE_ID — string, default: undefined
  * Host-stable device id injected by the CLI into containerized deployments,
@@ -182,7 +170,6 @@ const KNOWN_CADET_VARS = new Set([
   "CADET_DESKTOP_APP",
   "CADET_DEV",
   "CADET_DEVICE_ID",
-  "CADET_DISABLE_CLOUD",
   "CADET_DOCS_BASE_URL",
   "CADET_ENVIRONMENT",
   "CADET_HATCHED_BY",

package/src/config/env.ts

@@ -232,11 +232,12 @@ export function setCloudOrganizationId(value: string | undefined): void {
 }
 
 /**
- * CLOUD_ORGANIZATION_ID — UUID of the organization this assistant belongs to.
- * Used for platform tagging and API calls.
+ * Organization ID — UUID of the organization this assistant belongs to.
+ * Resolved from the in-memory override (populated by cloud identity
+ * validation); the API key resolves the credentials.
  */
 export function getCloudOrganizationId(): string {
-  return str("CLOUD_ORGANIZATION_ID") ?? _cloudOrganizationIdOverride ?? "";
+  return _cloudOrganizationIdOverride ?? "";
 }
 
 let _platformUserIdOverride: string | undefined;
@@ -246,11 +247,12 @@ export function setCloudUserId(value: string | undefined): void {
 }
 
 /**
- * CLOUD_USER_ID — UUID of the user who owns this assistant.
- * Used for telemetry and platform API calls.
+ * User ID — UUID of the user who owns this assistant.
+ * Resolved from the in-memory override (populated by cloud identity
+ * validation); the API key resolves the credentials.
  */
 export function getCloudUserId(): string {
-  return str("CLOUD_USER_ID") ?? _platformUserIdOverride ?? "";
+  return _platformUserIdOverride ?? "";
 }
 
 // ── Startup validation ──────────────────────────────────────────────────────

package/src/config/llm-resolver.ts

@@ -278,7 +278,7 @@ function providerAwareEntry(
     return entry;
   }
   const workspace = llm.profiles?.[name];
-  if (workspace != null && workspace.source !== "managed") {
+  if (workspace != null && workspace.provider !== "cadet") {
     return entry;
   }
   return resolveDefaultProfileForProvider(undefined, name, llm.default);
@@ -477,7 +477,6 @@ function resolveOverrideOrDefault(
  * kept — with a single winner there is no cross-profile leakage to guard. */
 function winnerConfigFragment(entry: ProfileEntry): Mergeable {
   const {
-    source: _source,
     label: _label,
     description: _description,
     status: _status,

package/src/config/loader.ts

@@ -10,13 +10,13 @@ import {
 import { basename, dirname, join } from "node:path";
 
 import { safeStatSync } from "../util/fs.js";
-import { getLogger } from "../util/logger.js";
 import {
   ensureDataDir,
   getConfigQuarantineNoticePath,
   getConfigValidationResetNoticePath,
   getWorkspaceConfigPath,
-} from "../util/platform.js";
+} from "../util/layout.js";
+import { getLogger } from "../util/logger.js";
 import { validateChatSettingsWrite } from "./chat-settings.js";
 import { pruneSeededCallsiteDefaultsFromConfig } from "./prune-seeded-callsite-defaults.js";
 import { AssistantConfigSchema } from "./schema.js";
@@ -32,7 +32,7 @@ let suppressConfigDiskWritesDepth = 0;
 /**
  * The most recent effective config in this process. Captured inside
  * {@link validateWithSchema} on every validation-success path, then overwritten
- * by {@link loadConfig} with the deployment-context-filled config whenever
+ * by {@link getConfig} with the deployment-context-filled config whenever
  * context defaults apply — so it reflects the config as consumers actually see
  * it (cloud service modes and all), not just the pre-fill schema-defaulted
  * view. It is a safety net for the recovery ladder — when config.json later
@@ -126,7 +126,7 @@ function cloneDefaultConfig(): AssistantConfig {
 
 /**
  * Returns deployment-context-aware config defaults that override schema
- * defaults for cloud assistants. Applied to every `loadConfig()`
+ * defaults for cloud assistants. Applied to every `getConfig()`
  * call as a fill-only pass — they only fill keys that are absent from the
  * raw config on disk, so an explicit user choice (e.g. saving "your-own"
  * via the macOS Models & Services UI) always wins.
@@ -473,7 +473,7 @@ function clearConfigValidationResetNotice(): void {
  *   3. full schema defaults as the true last resort.
  *
  * Every success path records a `structuredClone` of the returned config as the
- * last-known-good safety net. Cloning is required because `loadConfig` mutates
+ * last-known-good safety net. Cloning is required because `getConfig` mutates
  * the returned object in place via `fillContextDefaultsForMissingKeys`.
  */
 function validateWithSchema(raw: Record<string, unknown>): AssistantConfig {
@@ -939,10 +939,10 @@ function emptyDefaultWorkspaceConfigMergeResult(): DefaultWorkspaceConfigMergeRe
  * Merge default workspace config from the file referenced by
  * CADET_DEFAULT_WORKSPACE_CONFIG_PATH into the workspace config on disk.
  *
- * Called once at daemon startup (before the first loadConfig()) so platform
+ * Called once at daemon startup (before the first getConfig()) so platform
  * overrides are persisted to disk before the daemon's first config read.
  * Schema defaults are no longer materialized into the file on load — the
- * in-memory `loadConfig()` cache applies them at access time instead.
+ * in-memory `getConfig()` cache applies them at access time instead.
  */
 /**
  * Whether an unconsumed onboarding overlay is waiting to be merged this boot.
@@ -1048,14 +1048,14 @@ export function mergeDefaultWorkspaceConfig(): DefaultWorkspaceConfigMergeResult
   return mergeResult;
 }
 
-export function loadConfig(): AssistantConfig {
+export function getConfig(): AssistantConfig {
   const freshCached = getCachedConfigIfFresh();
   if (freshCached) {
     return freshCached;
   }
 
   // Re-entrancy guard: log calls during loading (e.g. file-mode warning)
-  // can trigger loadConfig again. Return defaults to break the cycle
+  // can trigger getConfig again. Return defaults to break the cycle
   // instead of recursing to stack overflow.
   if (loading) {
     return cloneDefaultConfig();
@@ -1123,7 +1123,7 @@ export function loadConfig(): AssistantConfig {
     // explicitly set in `fileConfig`. This runs on every load — not just the
     // first — because the workspace config file is written by upstream
     // lifecycle steps (`mergeDefaultWorkspaceConfig`, `seedInferenceProfiles`)
-    // before `loadConfig()` is reached. Gating on `!configFileExisted` would
+    // before `getConfig()` is reached. Gating on `!configFileExisted` would
     // make the context defaults dead code on cloud-managed daemons whose
     // config.json was created by those earlier steps without service-mode
     // entries. Explicit user choices on disk are preserved because the helper
@@ -1234,14 +1234,10 @@ export function loadConfig(): AssistantConfig {
   }
 }
 
-export function getConfig(): AssistantConfig {
-  return loadConfig();
-}
-
 /**
  * Read-only config accessor: returns the current config without creating
  * directories or writing files. Reads config.json if it exists on disk;
- * returns schema defaults otherwise. Unlike `getConfig()` / `loadConfig()`,
+ * returns schema defaults otherwise. Unlike `getConfig()`,
  * this never calls `ensureDataDir()` or writes a default config to disk,
  * making it safe to call during CLI program construction before the
  * workspace-existence check runs.
@@ -1315,7 +1311,7 @@ export function loadRawConfig(): Record<string, unknown> {
   try {
     parsed = JSON.parse(readFileSync(configPath, "utf-8"));
   } catch (err) {
-    // Mirror loadConfig(): quarantine the corrupt file and return an empty
+    // Mirror getConfig(): quarantine the corrupt file and return an empty
     // object rather than throwing. This prevents /v1/config from surfacing
     // a 500 when the user's config.json is malformed.
     quarantineCorruptConfig(configPath, err);
@@ -1440,7 +1436,7 @@ export const _writeQuarantineNotice = writeQuarantineNotice;
  * Test-only alias for `recoverFromInvalidConfig`. The strip-and-reparse
  * cleanup (including sparse-array compaction) repairs every known real-world
  * config shape, so no config.json fixture reliably reaches the recovery
- * ladder through `loadConfig` — the ladder is defense-in-depth for schema
+ * ladder through `getConfig` — the ladder is defense-in-depth for schema
  * shapes the cleanup does not anticipate. Tests exercise its rungs (last
  * known good, per-section salvage, full defaults) by calling it directly.
  * Not for production use.

package/src/config/profile-materialization.ts

@@ -41,7 +41,7 @@ export function completeCustomProfile(
   dflt: LLMConfigBase,
   profile: ProfileEntry,
 ): ProfileEntry {
-  if (profile.mix != null || profile.source === "managed") {
+  if (profile.mix != null || profile.provider === "cadet") {
     return profile;
   }
 

package/src/config/schema.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
 
-import { getDataDir } from "../util/platform.js";
+import { getDataDir } from "../util/layout.js";
 
 // Re-export domain schemas that have external consumers
 export { VALID_CALLER_IDENTITY_MODES } from "./schemas/calls.js";
@@ -146,12 +146,6 @@ export const AssistantConfigSchema = z.object({
   pluginUpdates: PluginUpdatesConfigSchema.default(
     PluginUpdatesConfigSchema.parse({}),
   ),
-  legacyTelemetryOptOut: z
-    .boolean()
-    .optional()
-    .describe(
-      "Fail-closed telemetry marker: set for a workspace that had an explicit local usage-data opt-out before telemetry moved to platform share_analytics consent. While set, usage telemetry stays disabled regardless of platform consent.",
-    ),
   legacyDiagnosticsOptOut: z
     .boolean()
     .optional()

package/src/config/schemas/call-site-catalog.ts

@@ -317,13 +317,6 @@ const CATALOG_RECORD: CatalogRecord = {
       "Decides from the caller's interruption whether a barged-in request should keep running in the background. Runs only when pinned to a TypeSafe profile.",
     domain: "agentLoop",
   },
-  autoProfileRouter: {
-    id: "autoProfileRouter",
-    displayName: "Auto Profile Router",
-    description:
-      "Picks which default profile answers a message when the conversation runs on the Auto profile. Asks managed Jev one choice question over the latest message; when unavailable the turn runs on Balanced.",
-    domain: "agentLoop",
-  },
   voiceContinuationLabel: {
     id: "voiceContinuationLabel",
     displayName: "Voice Continuation Label",