@mycadet/assistant 0.12.9 → 0.12.10

package/src/config/schemas/llm.ts

@@ -14,7 +14,6 @@ import {
 } from "../../providers/model-catalog.js";
 import { isCodexSubscriptionModel } from "../../providers/openai/codex-models.js";
 import {
-  AUTO_PROFILE_KEY,
   DEFAULT_PROFILE_KEYS,
   DEFAULT_PROFILE_PROVIDERS,
   FALLBACK_PROFILE_BY_KEY,
@@ -29,9 +28,9 @@ import { InputModalitiesSchema } from "../input-modalities.js";
 
 /**
  * Managed-only keys that are valid reference targets on the cloud column
- * whether or not a workspace stub exists. The flag-gated ones (`os-beta`,
- * `auto`) are excluded: they resolve only while their reconciled stub is
- * present, so they enter the reference set through `llm.profiles` alone.
+ * whether or not a workspace stub exists. The flag-gated one (`os-beta`)
+ * is excluded: it resolves only while its reconciled stub is
+ * present, so it enters the reference set through `llm.profiles` alone.
  */
 const ALWAYS_RESOLVING_MANAGED_ONLY_PROFILE_KEYS =
   MANAGED_ONLY_PROFILE_KEYS.filter((key) => !isFlagGatedProfileKey(key));
@@ -241,7 +240,6 @@ export const LLMCallSiteEnum = z.enum([
   "voiceEscalationJudge",
   "voiceContinuationJudge",
   "voiceContinuationLabel",
-  "autoProfileRouter",
   "trustRuleSuggestion",
   "homeGreeting",
   "homeSuggestedPrompts",
@@ -505,13 +503,6 @@ const OpenRouterDeepPartialSchema = z.object({
 // Profile metadata
 // ---------------------------------------------------------------------------
 
-/**
- * Distinguishes daemon-cloud profiles (overwritten on every startup) from
- * user-created ones (never touched by the daemon).
- */
-const ProfileSource = z.enum(["managed", "user"]);
-type ProfileSource = z.infer<typeof ProfileSource>;
-
 // ---------------------------------------------------------------------------
 // Pricing overrides
 // ---------------------------------------------------------------------------
@@ -673,7 +664,6 @@ const MixSchema = z.array(MixArmSchema).min(2);
  * resolver's deep-merge output.
  */
 export const ProfileEntry = LLMConfigFragment.extend({
-  source: ProfileSource.optional(),
   /**
    * `.nullable()` is intentional: the PUT `/v1/config/llm/profiles/:name`
    * route uses `null` as the "clear this field" sentinel (edit mode sends
@@ -812,9 +802,6 @@ function unresolvableProfileReason(
   if (name === JEV_MANAGED_PROFILE_KEY) {
     return "is the cloud Jev profile, which resolves only while llm.default is the cloud provider";
   }
-  if (name === AUTO_PROFILE_KEY) {
-    return "is the cloud Auto profile, which resolves only while llm.default is the cloud provider";
-  }
   return "is a cloud backup profile, which resolves only while llm.default is the cloud provider";
 }
 
@@ -824,10 +811,10 @@ function unresolvableProfileReason(
  * `llm.default`.
  *
  * Every on-disk key qualifies but one: a reserved backup name whose entry is
- * a thin `source: "managed"` stub. The stub is not a profile, it is the
+ * a thin model-less `provider: "cadet"` stub. The stub is not a profile, it is the
  * workspace's slot for a code-owned one, and it can reach disk on a cloud
  * install through nothing more than a `config get` -> `config set` round-trip
- * of the effective profile list (`normalizeCloudProfileWrites` reduces the
+ * of the effective profile list (a write round-trip reduces the
  * echoed body to exactly that stub). Counting it as an ordinary raw key would
  * let it launder a backup reference past the provider gate: after a switch to
  * a BYOK or ChatGPT default provider the reference would keep validating
@@ -837,7 +824,7 @@ function unresolvableProfileReason(
  * A genuinely user-owned entry under a backup name is the opposite case: it
  * carries its own body, and with no code-owned body to lose on a non-managed
  * column `resolveAgainstBody` resolves the workspace entry itself. So it
- * stays a valid target on every column. The `source` test is the same one
+ * stays a valid target on every column. The provider test is the same one
  * the resolver uses, which is what keeps the two in step.
  */
 function referenceableProfileKeys(
@@ -853,7 +840,7 @@ function referenceableProfileKeys(
         value != null && typeof value === "object" && !Array.isArray(value)
           ? (value as Record<string, unknown>)
           : null;
-      return entry != null && entry.source !== "managed";
+      return entry != null && entry.provider !== "cadet";
     })
     .map(([name]) => name);
 }
@@ -891,9 +878,9 @@ export function collectFallbackProfileIssues(
   // (`default-profile-catalog.ts`) and resolve whether or not they are
   // materialized in `llm.profiles`, so their names are always valid
   // fallback targets (same rule as call-site `profile` references). The
-  // managed backups resolve the same way, but on the cloud column only,
+  // cloud backups resolve the same way, but on the cloud column only,
   // so they are valid targets only under a cloud `llm.default`.
-  // A persisted managed stub for a backup name does not change that, see
+  // A persisted cloud stub for a backup name does not change that, see
   // `referenceableProfileKeys`.
   const backupsResolve = backupProfilesResolveUnderDefaultProvider(
     RawDefaultSelectionSchema.parse(llmDefault),
@@ -927,7 +914,7 @@ export function collectFallbackProfileIssues(
     const expectedFallback = isDefaultProfileKey(name)
       ? FALLBACK_PROFILE_BY_KEY[name]
       : undefined;
-    if (entry?.source !== "managed" || fallback !== expectedFallback) {
+    if (entry?.provider !== "cadet" || fallback !== expectedFallback) {
       issues.push({
         profileName: name,
         message: `Profile "${name}" cannot configure fallbackProfile. Automatic fallbacks are code-owned for Cadet Cloud default profiles.`,
@@ -1019,9 +1006,17 @@ export const LLMSchema = z
   })
   .superRefine((config, ctx) => {
     for (const [name, entry] of Object.entries(config.profiles ?? {})) {
-      const issue = entry?.provider
-        ? routingIdentityModelIssue(entry.provider, entry.model ?? undefined)
-        : null;
+      // A model-less entry under a code-defined default name is the thin
+      // cloud stub — its content is code-owned, so the routing-identity
+      // model check applies only to entries carrying their own body.
+      const isCodeOwnedName =
+        isDefaultProfileKey(name) ||
+        isCloudOnlyProfileKey(name) ||
+        isFlagGatedProfileKey(name);
+      const issue =
+        entry?.provider && (entry.model != null || !isCodeOwnedName)
+          ? routingIdentityModelIssue(entry.provider, entry.model ?? undefined)
+          : null;
       if (issue) {
         ctx.addIssue({
           code: z.ZodIssueCode.custom,
@@ -1062,7 +1057,7 @@ export const LLMSchema = z
     // The flag-gated `os-beta` is excluded: it resolves only while a
     // workspace entry exists, so a reference to it is valid only when that
     // entry is present in `config.profiles`. A backup name materialized as a
-    // thin managed stub does not re-enter the set on a non-cloud column
+    // thin cloud stub does not re-enter the set on a non-cloud column
     // either, see `referenceableProfileKeys`.
     const backupsResolve = backupProfilesResolveUnderDefaultProvider(
       config.default,

package/src/config/seed-inference-profiles.ts

@@ -15,7 +15,7 @@ import {
   MANAGED_PROFILE_TEMPLATES,
 } from "./default-profile-catalog.js";
 import { getIsCloud } from "./env-registry.js";
-import { loadConfig, loadRawConfig, saveRawConfig } from "./loader.js";
+import { getConfig, loadRawConfig, saveRawConfig } from "./loader.js";
 import { isDispatchableProfile } from "./profile-dispatchability.js";
 import {
   isDefaultProviderChoice,
@@ -64,7 +64,7 @@ export type SeedInferenceProfilesOptions = {
 export function seedInferenceProfiles(
   options: SeedInferenceProfilesOptions = {},
 ): void {
-  const config = loadConfig();
+  const config = getConfig();
   const llm = config.llm;
   const profiles = llm.profiles;
 
@@ -173,20 +173,27 @@ export function seedInferenceProfiles(
     }
   }
 
-  // Advisor profile: defaults to the strongest active managed default.
+  // Advisor profile: defaults to the strongest active managed default. A
+  // default name the user shadowed (a non-cadet workspace entry) is user
+  // intent and is left alone; a disabled code-owned default is repaired.
   const requestedAdvisorProfile = llm.advisorProfile;
   const requestedAdvisorEntry =
     requestedAdvisorProfile !== undefined
       ? effectiveProfiles[requestedAdvisorProfile]
       : undefined;
+  const requestedAdvisorWorkspace =
+    requestedAdvisorProfile !== undefined
+      ? (llm.profiles[requestedAdvisorProfile] ?? null)
+      : null;
   const requestedAdvisorIsDisabledManaged =
-    requestedAdvisorEntry?.source === "managed" &&
-    requestedAdvisorEntry.status === "disabled";
+    requestedAdvisorEntry?.status === "disabled" &&
+    (requestedAdvisorWorkspace === null ||
+      requestedAdvisorWorkspace.provider === "cadet");
   if (
     requestedAdvisorProfile === undefined ||
     requestedAdvisorIsDisabledManaged
   ) {
-    const defaultAdvisorProfile = firstActiveCloudProfile(effectiveProfiles, [
+    const defaultAdvisorProfile = firstActiveDefaultProfile(effectiveProfiles, [
       "quality-optimized",
       "balanced",
       "cost-optimized",
@@ -223,14 +230,6 @@ export function seedInferenceProfiles(
   }
   llm.profileOrder = profileOrder;
 
-  // Tag any remaining profiles without a source as user-created.
-  for (const [name, profile] of Object.entries(profiles)) {
-    if (MANAGED_PROFILE_NAMES.has(name)) {
-      continue;
-    }
-    profile.source ??= "user";
-  }
-
   // Persist: the seed only ever rewrites the `llm` section, so the typed
   // view's `llm` lands on the raw base verbatim and every other section the
   // user has on disk survives untouched.
@@ -274,7 +273,7 @@ function pruneNonDispatchableProfiles(
     // Thin managed stubs carry no model/mix by design — their content is
     // code-owned, so dispatchability is judged on the catalog body, never
     // the stub. Only workspace-owned profiles are pruned.
-    if (MANAGED_PROFILE_NAMES.has(name) && profile.source === "managed") {
+    if (MANAGED_PROFILE_NAMES.has(name)) {
       continue;
     }
     if (!isDispatchableProfile(profile)) {
@@ -331,13 +330,13 @@ function pruneRemovedProfileReferences(
   }
 }
 
-function firstActiveCloudProfile(
+function firstActiveDefaultProfile(
   profiles: Record<string, ProfileEntry>,
   names: string[],
 ): string | undefined {
   for (const name of names) {
     const profile = profiles[name];
-    if (profile?.source === "managed" && profile.status !== "disabled") {
+    if (profile && profile.status !== "disabled") {
       return name;
     }
   }

package/src/config/skills.ts

@@ -33,12 +33,12 @@ import { parseToolManifestFile } from "../skills/tool-manifest.js";
 import { computeSkillVersionHash } from "../skills/version-hash.js";
 import type { OwnerInfo } from "../tools/types.js";
 import { isBunVirtualPath } from "../util/bundled-asset.js";
-import { getLogger } from "../util/logger.js";
 import {
   getWorkspaceDirDisplay,
   getWorkspacePluginsDir,
   getWorkspaceSkillsDir,
-} from "../util/platform.js";
+} from "../util/layout.js";
+import { getLogger } from "../util/logger.js";
 import {
   hasPluginManifest,
   readPluginManifest,

package/src/config/sync-gated-profiles.ts

@@ -3,15 +3,10 @@ import { isDeepStrictEqual } from "node:util";
 import { getLogger } from "../util/logger.js";
 import { isAssistantFeatureFlagEnabled } from "./assistant-feature-flags.js";
 import {
-  AUTO_PROFILE_TEMPLATE,
   type DefaultProfileTemplate,
   OS_BETA_PROFILE_TEMPLATE,
 } from "./default-profile-catalog.js";
-import {
-  AUTO_PROFILE_FEATURE_FLAG_KEY,
-  AUTO_PROFILE_KEY,
-  OS_BETA_PROFILE_KEY,
-} from "./default-profile-names.js";
+import { OS_BETA_PROFILE_KEY } from "./default-profile-names.js";
 import { getIsCloud } from "./env-registry.js";
 import {
   getConfigReadOnly,
@@ -57,14 +52,6 @@ const GATED_PROFILES: readonly GatedProfile[] = [
     },
     byokStartsDisabled: true,
   },
-  {
-    key: AUTO_PROFILE_KEY,
-    flag: AUTO_PROFILE_FEATURE_FLAG_KEY,
-    template: AUTO_PROFILE_TEMPLATE,
-    // Auto leads the picker.
-    place: (profileOrder) => profileOrder.unshift(AUTO_PROFILE_KEY),
-    byokStartsDisabled: false,
-  },
 ];
 
 /**
@@ -112,13 +99,8 @@ export function reconcileFlagGatedProfiles(): boolean {
 
     const previous = readObject(profiles[gated.key]);
 
-    // Never clobber a user-owned profile that happens to share the name. The
-    // entry is ours to manage only when it is absent or already managed; a
-    // user-sourced entry of the same name is left untouched on every path.
-    const isOursToManage = previous == null || previous.source === "managed";
-    if (!isOursToManage) {
-      continue;
-    }
+    // The gated names are code-owned and reserved, so every entry under one
+    // is ours to manage; a user-owned shadow cannot exist.
 
     const order = llm.profileOrder as string[];
     const profileChanged = enabled
@@ -149,9 +131,9 @@ function enableProfile(
 ): boolean {
   // The profile's content is code-owned (`default-profile-catalog.ts`) and
   // resolves through the effective view once this stub exists; the workspace
-  // entry carries only the overlay fields (`source`, `label`, `status`,
-  // `topP`).
-  const next: Record<string, unknown> = { source: "managed" };
+  // entry carries the cadet-provider marker (its cloud identity) plus the
+  // overlay fields (`label`, `status`, `topP`).
+  const next: Record<string, unknown> = { provider: "cadet" };
 
   // BYOK installs create the stub disabled: the cloud inference connection
   // backing this profile isn't usable until the user enables it, so a fresh

package/src/credential-health/credential-health-service.ts

@@ -25,6 +25,7 @@
 
 import { isTokenExpired } from "@mycadet/credential-storage";
 
+import { getCloudAssistantId } from "../config/env.js";
 import type { Services } from "../config/schemas/services.js";
 import { getConnectionAccessTokenResult } from "../oauth/credential-token-resolver.js";
 import {
@@ -633,12 +634,13 @@ const ASSISTANT_API_KEY_CONNECTION_ID = "cadet:assistant_api_key";
  * observed here and acted on by a client.
  *
  * Statuses map onto the shared vocabulary:
+ *   - `missing_token`: no key is stored, so managed inference cannot run.
  *   - `revoked`: the cloud settled that the stored key is not accepted.
  *   - `unreachable`: the credential store or the cloud did not answer, so
  *     health is unknown. The heartbeat drops these before notifying, which is
  *     what keeps a transient outage from raising a credential alert.
  *
- * `canAutoRecover` is true for the revoked status: recovery needs no
+ * `canAutoRecover` is true for both failure statuses: recovery needs no
  * re-authorization from the user, only a signed-in client to rotate the key.
  */
 export async function checkAssistantApiKey(): Promise<CredentialHealthResult | null> {
@@ -667,8 +669,13 @@ export async function checkAssistantApiKey(): Promise<CredentialHealthResult | n
   }
 
   if (stored.value == null) {
-    // A workspace that was never connected to the cloud has no managed
-    // credential yet — missing, not unhealthy.
+    // A workspace that was never connected to the cloud has no bound cloud
+    // identity and is not unhealthy. Only an install that already carries a
+    // cloud identity is missing something — identity resolves from the API
+    // key via the cloud validation API, never from a stored credential.
+    if (!getCloudAssistantId()) {
+      return null;
+    }
     return {
       ...base,
       status: "missing_token",

package/src/daemon/approval-generators.ts

@@ -1,4 +1,4 @@
-import { loadConfig } from "../config/loader.js";
+import { getConfig } from "../config/loader.js";
 import { wrapWithCallSiteRouting } from "../providers/call-site-routing.js";
 import {
   mainAgentResolutionError,
@@ -82,7 +82,7 @@ const VALID_DISPOSITIONS: ReadonlySet<string> = new Set([
  */
 export function createApprovalCopyGenerator(): ApprovalCopyGenerator {
   return async (context, options = {}) => {
-    const config = loadConfig();
+    const config = getConfig();
     // Connection-aware default-provider resolution. Throws
     // `ConnectionResolutionError` on hard config errors (missing /
     // unknown / mismatched connection). Returns null on soft credential
@@ -150,7 +150,7 @@ export function createApprovalCopyGenerator(): ApprovalCopyGenerator {
  */
 export function createApprovalConversationGenerator(): ApprovalConversationGenerator {
   return async (context) => {
-    const config = loadConfig();
+    const config = getConfig();
     // Connection-aware default + per-call routing. `resolveDefaultProvider`
     // throws `ConnectionResolutionError` on hard config errors (missing /
     // unknown / mismatched connection) and returns null on soft credential

package/src/daemon/config-watcher.ts

@@ -37,7 +37,6 @@ import { handleEmitEventSignal } from "../signals/emit-event.js";
 import { handleUserMessageSignal } from "../signals/user-message.js";
 import { WORKSPACE_THEME_RELATIVE_PATH } from "../theme/workspace-theme.js";
 import { DebouncerMap } from "../util/debounce.js";
-import { getLogger } from "../util/logger.js";
 import {
   getAvatarDir,
   getSignalsDir,
@@ -45,7 +44,8 @@ import {
   getWorkspaceDir,
   getWorkspacePromptPath,
   WORKSPACE_MCP_FILENAME,
-} from "../util/platform.js";
+} from "../util/layout.js";
+import { getLogger } from "../util/logger.js";
 import { evictConversationsForReload } from "./conversation-store.js";
 import { parseIdentityFields } from "./handlers/identity.js";
 import { reloadMcpServers } from "./mcp-reload-service.js";

package/src/daemon/conversation-agent-loop-handlers.ts

@@ -53,7 +53,6 @@ import {
   updateMessageContent,
 } from "../persistence/conversation-crud.js";
 import { syncMessageToDisk } from "../persistence/conversation-disk-view.js";
-import { AUTO_ROUTED_PROFILE_METADATA_KEY } from "../persistence/conversation-types.js";
 import { enqueueLexicalIndexForMessage } from "../persistence/job-handlers/message-lexical.js";
 import {
   backfillMessageIdOnLogs,
@@ -277,12 +276,6 @@ export interface EventHandlerState {
    * the model ever having seen it.
    */
   pendingNotifiedInferenceProfile: string | null;
-  /**
-   * The default profile the Auto profile routed this turn to, stamped on the
-   * turn's assistant rows and carried on `message_complete` so clients can
-   * show which profile answered. `undefined` on every turn not run on Auto.
-   */
-  autoRoutedProfile: string | undefined;
   pendingDirectiveDisplayBuffer: string;
   firstAssistantText: string;
   /** Most recent resolved provider for the current exchange's usage accounting. */
@@ -708,7 +701,6 @@ export interface EventHandlerDeps {
 export function createEventHandlerState(): EventHandlerState {
   return {
     pendingNotifiedInferenceProfile: null,
-    autoRoutedProfile: undefined,
     pendingDirectiveDisplayBuffer: "",
     firstAssistantText: "",
     exchangeProviderName: undefined,
@@ -2997,13 +2989,6 @@ function annotatePersistedAssistantMessage(
         display: surface.display,
         ...(surface.persistent ? { persistent: true } : {}),
         ...(surface.toolCallId ? { toolCallId: surface.toolCallId } : {}),
-        // Daemon-only commit-timing activation tag, persisted so
-        // restoreSurfaceStateFromHistory can rehydrate it after a reload. This
-        // block lives only in server-side conversation history, never in the
-        // client `ui_surface_show` message.
-        ...(surface.activationMoment
-          ? { activationMoment: surface.activationMoment }
-          : {}),
         // A surface answered before this write lands owns no persisted block for
         // `markSurfaceCompleted` to patch, so its completion rides the snapshot.
         ...(surface.completed ? { completed: true } : {}),
@@ -3329,9 +3314,6 @@ export async function handleMessageComplete(
     ...(event.assistantTextVisibility
       ? { [ASSISTANT_TEXT_VISIBILITY_KEY]: event.assistantTextVisibility }
       : {}),
-    ...(state.autoRoutedProfile
-      ? { [AUTO_ROUTED_PROFILE_METADATA_KEY]: state.autoRoutedProfile }
-      : {}),
   };
   state.lastAssistantTextVisibility = event.assistantTextVisibility;
   const persisted = await finalizeInflightContent(

package/src/daemon/conversation-agent-loop.ts

@@ -25,8 +25,6 @@ import type {
   TurnChannelContext,
   TurnInterfaceContext,
 } from "../channels/types.js";
-import { getConversationProfilesForProvider } from "../config/default-profile-catalog.js";
-import { AUTO_PROFILE_KEY } from "../config/default-profile-names.js";
 import {
   contextWindowConfigFromEffective,
   type EffectiveContextWindow,
@@ -66,6 +64,7 @@ import {
   backfillMessageIdOnLogs,
   recordSyntheticAgentErrorMessageLog,
 } from "../persistence/llm-request-log-store.js";
+import { stampTurnOutcome } from "../persistence/turn-outcome.js";
 import { HOOKS } from "../plugin-api/constants.js";
 import type { ConversationGraphMemory } from "../plugins/defaults/memory/graph/conversation-graph-memory.js";
 import { enqueueMemoryRetrospectiveOnCompaction } from "../plugins/defaults/memory/memory-retrospective-enqueue.js";
@@ -86,7 +85,6 @@ import { resolveTurnReplyMessageId } from "../runtime/channel-reply-delivery.js"
 import { isNoResponseOnlyText } from "../runtime/no-response.js";
 import { getByConversation as getPendingInteractionsByConversation } from "../runtime/pending-interactions.js";
 import { publishConversationMessagesChanged } from "../runtime/sync/resource-sync-events.js";
-import { stampTurnOutcome } from "../telemetry/turn-outcome.js";
 import {
   emitToolProfilingSummary,
   startToolProfilingRequest,
@@ -102,12 +100,6 @@ import {
   DEFAULT_TURN_COMMIT_MAX_WAIT_MS,
 } from "./abort-watchdog.js";
 import { cleanAssistantContent } from "./assistant-attachments.js";
-import {
-  type AutoProfileRoute,
-  plainTextOf,
-  routeAutoProfile,
-  takeAutoProfilePreview,
-} from "./auto-profile-router.js";
 import { conversationSupportsDynamicUi } from "./channel-ui-capability.js";
 import type { Conversation } from "./conversation.js";
 import {
@@ -670,89 +662,16 @@ export async function runAgentLoopImpl(
   // the row.
   const config = getConfig();
 
-  // With no explicit override, the resolver's own chain (the active profile
-  // for the main agent, then the call site's pin) may still select the Auto
-  // profile. That winner is named here so the router below covers every path
-  // that would otherwise dispatch the Auto body.
-  const readRequestedOverrideProfile = (): string | undefined => {
-    const explicit = options?.overrideProfile ?? resolveOverrideProfile(ctx);
-    if (explicit !== undefined) {
-      return explicit;
-    }
-    const winner = selectWinningProfile(inferenceCallSite, config.llm, {
-      selectionSeed: ctx.conversationId,
-    }).profileName;
-    return winner === AUTO_PROFILE_KEY ? AUTO_PROFILE_KEY : undefined;
-  };
+  const readRequestedOverrideProfile = (): string | undefined =>
+    options?.overrideProfile ?? resolveOverrideProfile(ctx);
 
-  // The Auto profile is a selection over the default profiles, made once per
-  // turn: the routed profile stands in for the Auto name on every read, so
-  // the whole turn (and any subagent inheriting the override) runs on one
-  // profile. A user profile that shadows the cloud name is a profile of
-  // its own and is not routed. Nothing here may throw: the turn's processing
-  // state is already held and its release lives in the loop's `finally`
-  // further down, so a routing failure degrades to the Auto body instead.
-  const routeAutoProfileForTurn =
-    async (): Promise<AutoProfileRoute | null> => {
-      try {
-        const profiles = getConversationProfilesForProvider(config.llm);
-        if (profiles[AUTO_PROFILE_KEY]?.source !== "managed") {
-          return null;
-        }
-        const userMessage = plainTextOf(
-          getMessageById(userMessageId)?.content ?? [],
-        );
-        // A draft the composer already previewed carries its pick over, so
-        // the reply lands on the profile the pill showed with no second call.
-        const previewed = takeAutoProfilePreview({
-          conversationId: ctx.conversationId,
-          text: userMessage,
-          history: ctx.messages,
-          profiles,
-        });
-        const route =
-          previewed ??
-          (await routeAutoProfile({
-            conversationId: ctx.conversationId,
-            history: ctx.messages,
-            userMessage,
-            profiles,
-            signal: abortController.signal,
-          }));
-        rlog.info(
-          {
-            outcome: route.outcome,
-            profile: route.profile,
-            confidence: route.confidence ?? null,
-            latencyMs: route.latencyMs,
-            reusedPreview: previewed !== undefined,
-          },
-          "Auto profile routed the turn",
-        );
-        return route;
-      } catch (err) {
-        rlog.warn(
-          { err },
-          "Auto profile routing failed; running the Auto body",
-        );
-        return null;
-      }
-    };
   const requestedOverrideProfile = readRequestedOverrideProfile();
-  const autoRoute =
-    requestedOverrideProfile === AUTO_PROFILE_KEY
-      ? await routeAutoProfileForTurn()
-      : null;
-  const withAutoRoute = (profile: string | undefined): string | undefined =>
-    profile === AUTO_PROFILE_KEY && autoRoute ? autoRoute.profile : profile;
-
-  const userExplicitOverride = withAutoRoute(requestedOverrideProfile);
 
-  const turnOverrideProfile = userExplicitOverride;
+  const turnOverrideProfile = requestedOverrideProfile;
   const forceOverrideProfile = options?.forceOverrideProfile === true;
 
   const readCurrentOverrideProfile = (): string | undefined =>
-    withAutoRoute(readRequestedOverrideProfile());
+    readRequestedOverrideProfile();
 
   // Best-effort attribution for error classification: names the resolved
   // connection and profile so credential/connection errors point at the
@@ -981,7 +900,6 @@ export async function runAgentLoopImpl(
   startToolProfilingRequest(ctx.conversationId);
   let turnStarted = false;
   const state = createEventHandlerState();
-  state.autoRoutedProfile = autoRoute?.profile;
   // Publish this turn's flushed-content watermark so the worker → daemon
   // persist hand-off can cap a snapshot anchor at flushed content rather than
   // the live seq counter, which runs ahead while the turn streams. Cleared in
@@ -1723,7 +1641,6 @@ export async function runAgentLoopImpl(
           supportsDynamicUi: conversationSupportsDynamicUi(ctx),
           trust: loopTrust,
           overrideProfile: turnOverrideProfile,
-          ...(autoRoute ? { overrideProfileOrigin: "auto" as const } : {}),
           ...(forceOverrideProfile ? { forceOverrideProfile: true } : {}),
           resolveOverrideProfile: refreshCurrentProfileState,
           ...(onModelCallPrepared !== undefined ? { onModelCallPrepared } : {}),
@@ -2183,9 +2100,7 @@ export async function runAgentLoopImpl(
         overrideProfile: mainRowOverrideProfile,
         ...(state.exchangeInferenceProfile !== undefined
           ? { forceOverrideProfile: true }
-          : autoRoute && mainRowOverrideProfile === autoRoute.profile
-            ? { overrideProfileOrigin: "auto" as const }
-            : {}),
+          : {}),
       },
       turnCronRunId,
     );
@@ -2292,9 +2207,6 @@ export async function runAgentLoopImpl(
           ...(state.lastAssistantMessageId
             ? { messageId: state.lastAssistantMessageId }
             : {}),
-          ...(state.autoRoutedProfile
-            ? { autoRoutedProfile: state.autoRoutedProfile }
-            : {}),
           modeSession: ctx.modeSessions.getTurnOwner(reqId),
         });
         publishLoopMessagesChanged();
@@ -2323,9 +2235,6 @@ export async function runAgentLoopImpl(
           ...(state.lastAssistantTextVisibility
             ? { assistantTextVisibility: state.lastAssistantTextVisibility }
             : {}),
-          ...(state.autoRoutedProfile
-            ? { autoRoutedProfile: state.autoRoutedProfile }
-            : {}),
         });
         if (shouldEmitQueuedConversationNotices) {
           for (const notice of drainConversationNotices(ctx.conversationId)) {

package/src/daemon/conversation-process.ts

@@ -35,6 +35,7 @@ import {
   setConversationOriginInterfaceIfUnset,
 } from "../persistence/conversation-crud.js";
 import { isReplyPushIneligibleUserMessage } from "../persistence/conversation-types.js";
+import { stampTurnOutcome } from "../persistence/turn-outcome.js";
 import type { ContextWindowResult } from "../plugins/defaults/compaction/window-manager.js";
 import { getCurrentSeq } from "../runtime/assistant-stream-state.js";
 import {
@@ -42,7 +43,6 @@ import {
   routeGuardianReply,
 } from "../runtime/guardian-reply-router.js";
 import { publishConversationMessagesChanged } from "../runtime/sync/resource-sync-events.js";
-import { stampTurnOutcome } from "../telemetry/turn-outcome.js";
 import { getLogger } from "../util/logger.js";
 import type { CleanResult, Conversation } from "./conversation.js";
 import { repairInterruptedToolUseBlocks } from "./conversation-interrupt-repair.js";