@mycadet/cli 0.12.6-dev.202610080102.d7d1bec → 0.12.6-dev.202610081023.3a27b77

package/README.md

@@ -57,7 +57,7 @@ cadet hatch [options]
 
 - **`local`** -- Starts the local assistant and local gateway. Gateway source resolution order is: repo source tree, then installed `@mycadet/gateway` package.
 - **`docker`** -- Starts the assistant, gateway, and credential service in Docker containers.
-- **`cadet`** -- Hatches an assistant on the Cadet Cloud.
+- **`cadet`** -- Hatches an assistant on Cadet Cloud.
 - **`custom`** -- Recognized but not yet implemented.
 
 #### Environment Variables

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mycadet/cli",
-  "version": "0.12.6-dev.202610080102.d7d1bec",
+  "version": "0.12.6-dev.202610081023.3a27b77",
   "description": "CLI tools for mycadet",
   "type": "module",
   "exports": {

package/src/commands/login.ts

@@ -303,7 +303,7 @@ export async function login(): Promise<void> {
   if (args.includes("--help") || args.includes("-h")) {
     console.log("Usage: cadet login [--token <session-token>] [--force]");
     console.log("");
-    console.log("Log in to the Cadet Cloud.");
+    console.log("Log in to Cadet Cloud.");
     console.log("");
     console.log("By default, opens a browser window for authentication.");
     console.log("Alternatively, pass a session token directly with --token.");
@@ -312,7 +312,7 @@ export async function login(): Promise<void> {
     console.log("lockfile so they appear in `cadet ps`.");
     console.log("");
     console.log("Options:");
-    console.log("  --token <token>    Session token from the Cadet Cloud");
+    console.log("  --token <token>    Session token from Cadet Cloud");
     console.log(
       "  --force, -f        Re-authenticate even if already logged in",
     );
@@ -435,7 +435,7 @@ export async function login(): Promise<void> {
           webhookSecret: registration.webhook_secret,
         });
         if (allInjected) {
-          console.log("Injected platform credentials into assistant.");
+          console.log("Injected cloud credentials into assistant.");
         } else {
           console.warn(
             "Some credentials could not be injected into the assistant.",
@@ -484,7 +484,7 @@ export async function logout(): Promise<void> {
   if (args.includes("--help") || args.includes("-h")) {
     console.log("Usage: cadet logout");
     console.log("");
-    console.log("Log out of the Cadet Cloud, remove the stored session token,");
+    console.log("Log out of Cadet Cloud, remove the stored session token,");
     console.log("and remove cloud-managed assistants from the local lockfile.");
     process.exit(0);
   }

package/src/commands/ps.ts

@@ -580,7 +580,7 @@ export async function listAllAssistants(verbose: boolean): Promise<void> {
     ? (msg) => console.log(`  [verbose] ${msg}`)
     : undefined;
 
-  // Decide platform login status FIRST, before touching the network. With no
+  // Decide cloud login status FIRST, before touching the network. With no
   // local token we never enter the platform fetch path — so unreachable-host
   // errors from the org-ID/user lookups can't leak onto stderr ahead of the
   // "Platform: not logged in" line.

package/src/commands/teleport.ts

@@ -1203,7 +1203,7 @@ function printImportSummary(result: ImportResponse): void {
 
 /**
  * After teleporting to a local/docker target, register the assistant with
- * the platform and inject fresh platform credentials — mirroring the
+ * the platform and inject fresh cloud credentials — mirroring the
  * login flow. Non-fatal: failures are logged as warnings.
  */
 async function tryInjectPlatformCredentials(
@@ -1211,7 +1211,7 @@ async function tryInjectPlatformCredentials(
 ): Promise<void> {
   const token = readPlatformToken();
   if (!token) {
-    console.log("  Skipped platform credential injection (not logged in).");
+    console.log("  Skipped cloud credential injection (not logged in).");
     return;
   }
 
@@ -1269,7 +1269,7 @@ async function tryInjectPlatformCredentials(
     if (allInjected) {
       console.log("  Platform credentials injected.");
     } else {
-      console.warn("  Some platform credentials could not be injected.");
+      console.warn("  Some cloud credentials could not be injected.");
     }
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -1647,7 +1647,7 @@ export async function teleport(): Promise<void> {
     bundlePlatformUrl,
   );
 
-  // After successful import, inject fresh platform credentials if the
+  // After successful import, inject fresh cloud credentials if the
   // user is logged in — replaces the source's stale cadet:* credentials
   // that were filtered during import.
   if (fromCloud === "cadet") {

package/src/commands/voice.ts

@@ -54,7 +54,7 @@ DESCRIPTION:
     is being spoken, ends the session.
 
     Works with local, self-hosted, and Cadet cloud assistants. A cloud
-    assistant needs a platform login ('cadet login'); the session is
+    assistant needs a cloud login ('cadet login'); the session is
     authorized per-connection from it.
 
 EXAMPLES:

package/src/index.ts

@@ -108,8 +108,8 @@ function printHelp(): void {
   console.log("  gateway  Gateway management commands");
   console.log("  hatch    Create a new assistant instance");
   console.log("  logs     View logs from an assistant instance");
-  console.log("  login    Log in to the Cadet Cloud");
-  console.log("  logout   Log out of the Cadet Cloud");
+  console.log("  login    Log in to Cadet Cloud");
+  console.log("  logout   Log out of Cadet Cloud");
   console.log("  message  Send a message to a running assistant");
   console.log(
     "  pair     Print a pairing link and QR code for another device [beta]",

package/src/lib/assistant-api-key-resolution.ts

@@ -2,7 +2,7 @@
  * Resolve which assistant API key to inject into a running assistant.
  *
  * The one place that decides, for every flow that hands a local assistant its
- * platform credentials (`login`, `teleport`). Keeping the decision here means a
+ * cloud credentials (`login`, `teleport`). Keeping the decision here means a
  * rule about which stored key is usable holds in all of them at once.
  */
 import {

package/src/lib/assistant-client.ts

@@ -14,7 +14,7 @@
  * The auth scheme follows the assistant's topology, so callers never pick it.
  * Platform-managed entries in particular have no local guardian token: they
  * authenticate against the wildcard runtime proxy at
- * `{platformUrl}/v1/assistants/<id>/<rest>` with the stored platform credential.
+ * `{platformUrl}/v1/assistants/<id>/<rest>` with the stored cloud credential.
  */
 
 import { isManagedCloud } from "./managed-cloud.js";
@@ -106,7 +106,7 @@ export class AssistantClient {
     const platformManaged = !opts?.sessionToken && isManagedCloud(entry.cloud);
     const platformHost = stripTrailingSlashes(entry.runtimeUrl);
 
-    // SECURITY: a platform credential is account-scoped, far broader than the
+    // SECURITY: a cloud credential is account-scoped, far broader than the
     // per-assistant guardian JWT, so its origin is pinned to the host recorded in
     // the lockfile. Honoring a URL override here would hand the caller's session
     // token or `vak_` key to whatever host they named.
@@ -116,7 +116,7 @@ export class AssistantClient {
       stripTrailingSlashes(opts.runtimeUrl) !== platformHost
     ) {
       throw new Error(
-        `Refusing to send platform credentials to '${opts.runtimeUrl}': ` +
+        `Refusing to send cloud credentials to '${opts.runtimeUrl}': ` +
           `assistant '${entry.assistantId}' is hosted at ${platformHost}.`,
       );
     }
@@ -137,7 +137,7 @@ export class AssistantClient {
       this.orgId = opts.orgId;
     } else if (platformManaged) {
       // Platform-managed: no guardian token exists locally, so authenticate with
-      // the stored platform credential. Resolved on first use because the org id
+      // the stored cloud credential. Resolved on first use because the org id
       // behind it needs a network lookup.
       this.token = undefined;
       this.authMode = "platform";
@@ -166,7 +166,7 @@ export class AssistantClient {
 
   /**
    * Auth headers for the current mode. `authHeaders` picks the right scheme for
-   * the platform credential (`Authorization: Bearer` for `vak_` API keys,
+   * the cloud credential (`Authorization: Bearer` for `vak_` API keys,
    * `X-Session-Token` + `Cadet-Organization-Id` for session tokens) and caches
    * the org-id lookup, so the result is memoized per client and a failure is
    * never cached.
@@ -343,8 +343,8 @@ export class AssistantClient {
 
     // Reactive auto-refresh on a 401 for the guardian path only. Ephemeral
     // (`--token`) and access-only sessions have no stored refresh credential and
-    // just see the original 401; session and platform credentials are managed by
-    // the Cadet Cloud and are never refreshed here.
+    // just see the original 401; session and cloud credentials are managed by
+    // Cadet Cloud and are never refreshed here.
     if (response.status === 401 && this.authMode === "guardian") {
       const stored = loadGuardianToken(this._assistantId);
 

package/src/lib/live-voice/connection.ts

@@ -128,7 +128,7 @@ export async function resolveLiveVoiceConnection(
 /**
  * Resolve a live-voice connection to a platform-hosted assistant.
  *
- * The session token is the CLI's own platform login, not anything specific to
+ * The session token is the CLI's own cloud login, not anything specific to
  * this assistant, so a missing one is a `cadet login` problem rather than an
  * assistant problem and says so.
  *
@@ -143,7 +143,7 @@ async function resolveCloudConnection(
   if (!sessionToken) {
     throw new LiveVoiceConnectionError(
       `${formatAssistantReference(entry)} is a Cadet cloud assistant, which ` +
-        "needs a platform login. Run 'cadet login' and try again.",
+        "needs a cloud login. Run 'cadet login' and try again.",
     );
   }
 

package/src/lib/live-voice/tunnel.ts

@@ -159,7 +159,7 @@ export async function mintTunnelWsToken(args: {
   } catch (err) {
     throw new TunnelWsTokenError(
       0,
-      `Could not reach the Cadet Cloud to authorize the voice session: ${
+      `Could not reach Cadet Cloud to authorize the voice session: ${
         err instanceof Error ? err.message : String(err)
       }`,
     );
@@ -179,7 +179,7 @@ export async function mintTunnelWsToken(args: {
   if (!token) {
     throw new TunnelWsTokenError(
       response.status,
-      "The Cadet Cloud returned no voice session token.",
+      "Cadet Cloud returned no voice session token.",
     );
   }
   return token;
@@ -188,13 +188,13 @@ export async function mintTunnelWsToken(args: {
 /** Turn a mint rejection into something the user can act on. */
 function describeMintFailure(status: number): string {
   if (status === 401) {
-    return "Not signed in to the Cadet Cloud. Run 'cadet login' and try again.";
+    return "Not signed in to Cadet Cloud. Run 'cadet login' and try again.";
   }
   if (status === 403) {
     return "This account cannot open a voice session on that assistant. Check that it belongs to the organization you are signed in to.";
   }
   if (status === 404) {
-    return "The Cadet Cloud does not offer voice session tokens. It may be running an older release.";
+    return "Cadet Cloud does not offer voice session tokens. It may be running an older release.";
   }
-  return `The Cadet Cloud refused to authorize the voice session (HTTP ${status}).`;
+  return `Cadet Cloud refused to authorize the voice session (HTTP ${status}).`;
 }

package/src/lib/platform-client.ts

@@ -508,7 +508,7 @@ export interface CredentialInjectionParams {
 }
 
 /**
- * Inject platform credentials into a running assistant via the gateway,
+ * Inject cloud credentials into a running assistant via the gateway,
  * mirroring `LocalAssistantBootstrapService.injectKeyIntoAssistant` et al.
  *
  * Each credential is posted individually. Failures are collected but do