@mycadet/gateway 0.12.7 → 0.12.8

package/src/__tests__/guardian-init-lockfile.test.ts

@@ -34,13 +34,12 @@ mock.module("../fetch.js", () => ({
 let testAssistantDb: Database | null = null;
 
 mock.module("../db/assistant-db-proxy.js", () => ({
-   
   async assistantDbQuery(sql: string, bind?: any[]) {
     if (!testAssistantDb) throw new Error("test assistant DB not initialized");
     const stmt = testAssistantDb.prepare(sql);
     return bind ? stmt.all(...bind) : stmt.all();
   },
-   
+
   async assistantDbRun(sql: string, bind?: any[]) {
     if (!testAssistantDb) throw new Error("test assistant DB not initialized");
     const stmt = testAssistantDb.prepare(sql);
@@ -159,7 +158,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,
@@ -738,7 +736,7 @@ describe("guardian/reset-bootstrap", () => {
 describe("guardian/init bare-metal loopback gating", () => {
   test("rejects non-loopback clients in bare-metal mode", async () => {
     delete process.env.GUARDIAN_BOOTSTRAP_SECRET;
-    delete process.env.IS_PLATFORM;
+    delete process.env.IS_CLOUD;
     const handler = createChannelVerificationSessionProxyHandler(makeConfig());
     const res = await handler.handleGuardianInit(
       new Request("http://localhost:7830/v1/guardian/init", {
@@ -756,7 +754,7 @@ describe("guardian/init bare-metal loopback gating", () => {
 
   test("allows loopback clients in bare-metal mode", async () => {
     delete process.env.GUARDIAN_BOOTSTRAP_SECRET;
-    delete process.env.IS_PLATFORM;
+    delete process.env.IS_CLOUD;
     const handler = createChannelVerificationSessionProxyHandler(makeConfig());
     const res = await handler.handleGuardianInit(
       new Request("http://localhost:7830/v1/guardian/init", {
@@ -792,9 +790,9 @@ describe("guardian/init bare-metal loopback gating", () => {
     expect(body.accessToken).toBeTruthy();
   });
 
-  test("skips loopback check in platform-managed mode (IS_PLATFORM=true)", async () => {
+  test("skips loopback check in cloud-managed mode (IS_CLOUD=true)", async () => {
     delete process.env.GUARDIAN_BOOTSTRAP_SECRET;
-    process.env.IS_PLATFORM = "true";
+    process.env.IS_CLOUD = "true";
     try {
       const handler =
         createChannelVerificationSessionProxyHandler(makeConfig());
@@ -814,7 +812,7 @@ describe("guardian/init bare-metal loopback gating", () => {
       const body = await res.json();
       expect(body.accessToken).toBeTruthy();
     } finally {
-      delete process.env.IS_PLATFORM;
+      delete process.env.IS_CLOUD;
     }
   });
 });

package/src/__tests__/guardian-pin.test.ts

@@ -23,8 +23,8 @@ mock.module("../auth/guardian-bootstrap.js", () => ({
 let mockReadCredential = mock(
   async (_key: string): Promise<string | undefined> => TUNNEL_USER_ID,
 );
-mock.module("../platform-user-id.js", () => ({
-  readStoredPlatformUserId: async () => ({
+mock.module("../cloud-user-id.js", () => ({
+  readStoredCloudUserId: async () => ({
     userId: await mockReadCredential("cadet:platform_user_id"),
     unreachable: false,
   }),
@@ -44,7 +44,7 @@ beforeEach(() => {
 });
 
 afterEach(() => {
-  delete process.env.IS_PLATFORM;
+  delete process.env.IS_CLOUD;
 });
 
 /**
@@ -130,7 +130,7 @@ describe("authorizeGuardianStream: the actor token path", () => {
 });
 
 /**
- * The managed path, where tunnel validated the browser's token and injected the
+ * The cloud path, where tunnel validated the browser's token and injected the
  * caller. The attestation proves the caller is *a* platform user who traversed
  * tunnel, not that they are this assistant's guardian, so it is cross-checked
  * against the stored `platform_user_id`.
@@ -158,9 +158,9 @@ describe("authorizeGuardianStream: the tunnel-attested managed path", () => {
     tunnelBaseUrl?: string;
   }) => {
     if (managed) {
-      process.env.IS_PLATFORM = "true";
+      process.env.IS_CLOUD = "true";
     } else {
-      delete process.env.IS_PLATFORM;
+      delete process.env.IS_CLOUD;
     }
     const headers = new Headers({
       "x-tunnel-user-id": userId,
@@ -205,7 +205,7 @@ describe("authorizeGuardianStream: the tunnel-attested managed path", () => {
     expect(res!.status).toBe(403);
   });
 
-  test("answers 503 when the platform user lookup fails", async () => {
+  test("answers 503 when the cloud user lookup fails", async () => {
     mockReadCredential = mock(async () => {
       throw new Error("credential store down");
     });
@@ -280,7 +280,7 @@ describe("authorizeGuardianStream: the tunnel-attested managed path", () => {
   });
 
   /**
-   * The managed path skips the shared gate, so the upgrade header is checked
+   * The cloud path skips the shared gate, so the upgrade header is checked
    * before it: a plain managed request must get 426, not a failed upgrade.
    */
   test("answers 426 for a plain request even when tunnel attests the guardian", async () => {

package/src/__tests__/handle-inbound-admission.test.ts

@@ -90,7 +90,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     runtimeMaxRetries: 2,
     runtimeProxyRequireAuth: false,
     runtimeTimeoutMs: 30000,
-    shutdownDrainMs: 5000,
     trustProxy: false,
     ...overrides,
   } as GatewayConfig;

package/src/__tests__/handle-inbound-app-context.test.ts

@@ -86,7 +86,6 @@ function makeConfig(): GatewayConfig {
     runtimeMaxRetries: 2,
     runtimeProxyRequireAuth: false,
     runtimeTimeoutMs: 30000,
-    shutdownDrainMs: 5000,
     trustProxy: false,
   } as unknown as GatewayConfig;
 }

package/src/__tests__/handle-inbound-invite-intercept.test.ts

@@ -180,7 +180,6 @@ function makeConfig(): GatewayConfig {
     runtimeMaxRetries: 2,
     runtimeProxyRequireAuth: false,
     runtimeTimeoutMs: 30000,
-    shutdownDrainMs: 5000,
     trustProxy: false,
   } as unknown as GatewayConfig;
 }

package/src/__tests__/handle-inbound-trust-verdict.test.ts

@@ -155,7 +155,6 @@ function makeConfig(): GatewayConfig {
     runtimeMaxRetries: 2,
     runtimeProxyRequireAuth: false,
     runtimeTimeoutMs: 30000,
-    shutdownDrainMs: 5000,
     trustProxy: false,
   } as unknown as GatewayConfig;
 }

package/src/__tests__/inbound-contact-seed.test.ts

@@ -237,7 +237,7 @@ describe("re-seen identity", () => {
       status: "unverified",
     });
 
-    // The platform profile says "Alice Example", a DM supplies the chat id.
+    // The cloud profile says "Alice Example", a DM supplies the chat id.
     await upsertContactChannel({
       sourceChannel: "slack",
       externalUserId: SLACK_USER,

package/src/__tests__/live-voice-websocket.test.ts

@@ -36,7 +36,7 @@ mock.module("../auth/guardian-bootstrap.js", () => ({
   findCadetGuardian: () => mockFindCadetGuardian(),
 }));
 
-// The managed/tunnel path cross-checks the attested caller against the stored
+// The cloud/tunnel path cross-checks the attested caller against the stored
 // `platform_user_id`. Default the credential to `TUNNEL_USER_ID` so the tunnel
 // success cases match; negative cases override this mock.
 let mockReadCredential = mock(
@@ -45,8 +45,8 @@ let mockReadCredential = mock(
 mock.module("../credential-reader.js", () => ({
   readCredential: (key: string) => mockReadCredential(key),
 }));
-mock.module("../platform-user-id.js", () => ({
-  readStoredPlatformUserId: async () => {
+mock.module("../cloud-user-id.js", () => ({
+  readStoredCloudUserId: async () => {
     const userId = await mockReadCredential("cadet:platform_user_id");
     return { userId, unreachable: false };
   },
@@ -273,13 +273,13 @@ describe("createLiveVoiceWebsocketHandler — tunnel-attested managed auth", ()
   const TEST_TOKEN = mintEdgeToken();
   // TUNNEL_USER_ID is declared at module scope (shared with the credential mock).
   const TUNNEL_ORG_ID = "22222222-2222-2222-2222-222222222222";
-  const originalIsPlatform = process.env.IS_PLATFORM;
+  const originalIsPlatform = process.env.IS_CLOUD;
 
   function setPlatform(on: boolean) {
     if (on) {
-      process.env.IS_PLATFORM = "true";
+      process.env.IS_CLOUD = "true";
     } else {
-      delete process.env.IS_PLATFORM;
+      delete process.env.IS_CLOUD;
     }
   }
 
@@ -302,9 +302,9 @@ describe("createLiveVoiceWebsocketHandler — tunnel-attested managed auth", ()
 
   afterEach(() => {
     if (originalIsPlatform === undefined) {
-      delete process.env.IS_PLATFORM;
+      delete process.env.IS_CLOUD;
     } else {
-      process.env.IS_PLATFORM = originalIsPlatform;
+      process.env.IS_CLOUD = originalIsPlatform;
     }
   });
 
@@ -319,9 +319,9 @@ describe("createLiveVoiceWebsocketHandler — tunnel-attested managed auth", ()
   });
 
   /**
-   * Tunnel attests a platform user, not an actor principal, so this path has
+   * Tunnel attests a cloud user, not an actor principal, so this path has
    * no principal in the request at all. The binding supplies it, which is
-   * what lets the managed deployment carry an identity downstream rather than
+   * what lets the cloud deployment carry an identity downstream rather than
    * leaving the daemon to resolve one of its own.
    */
   test("managed mode carries the bound guardian's principal on the socket", async () => {
@@ -455,8 +455,8 @@ describe("createLiveVoiceWebsocketHandler — tunnel-attested managed auth", ()
 
   /**
    * A locally hosted assistant reaches the mobile app through a tunnel
-   * with IS_PLATFORM unset. The attestation arrives through the same bridge
-   * as on a managed pod, so the tunnel, not the env var, is what admits it.
+   * with IS_CLOUD unset. The attestation arrives through the same bridge
+   * as on a cloud pod, so the tunnel, not the env var, is what admits it.
    */
   test("a locally hosted gateway with a tunnel trusts an attested caller with bridge proof", async () => {
     setPlatform(false);

package/src/__tests__/load-guards.test.ts

@@ -21,7 +21,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,

package/src/__tests__/migration-teleport-gcs-proxy.test.ts

@@ -29,7 +29,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,

package/src/__tests__/oauth-callback.test.ts

@@ -33,7 +33,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,

package/src/__tests__/remote-feature-flag-sync.test.ts

@@ -35,9 +35,8 @@ const { readRemoteFeatureFlags, clearRemoteFeatureFlagStoreCache } =
   await import("../feature-flag-remote-store.js");
 const { resetFeatureFlagDefaultsCache, _setRegistryCandidateOverrides } =
   await import("../feature-flag-defaults.js");
-const { resetEnvOverridesCache } = await import(
-  "../feature-flag-env-overrides.js"
-);
+const { resetEnvOverridesCache } =
+  await import("../feature-flag-env-overrides.js");
 
 // ---------------------------------------------------------------------------
 // Test-local registry with a GA flag (defaultEnabled: true) for the
@@ -110,7 +109,6 @@ function fakeCredentialCache(
 
 function defaultCredentials(): Record<string, string> {
   return {
-    "credential/cadet/platform_base_url": "https://cloud.mycadet.ai",
     "credential/cadet/assistant_api_key": "test-api-key",
   };
 }
@@ -118,16 +116,16 @@ function defaultCredentials(): Record<string, string> {
 // ---------------------------------------------------------------------------
 // Setup / teardown
 // ---------------------------------------------------------------------------
-const savedCadetPlatformUrl = process.env.CADET_PLATFORM_URL;
+const savedCadetCloudUrl = process.env.CADET_CLOUD_URL;
 const savedAssistantCredential = process.env.ASSISTANT_API_KEY;
-const savedDisablePlatform = process.env.CADET_DISABLE_PLATFORM;
+const savedDisablePlatform = process.env.CADET_DISABLE_CLOUD;
 
 beforeEach(() => {
   // Clear env vars that the production code falls back to, so tests remain
   // deterministic unless they explicitly set them.
-  delete process.env.CADET_PLATFORM_URL;
+  process.env.CADET_CLOUD_URL = "https://test-cloud.mycadet.ai";
   delete process.env.ASSISTANT_API_KEY;
-  delete process.env.CADET_DISABLE_PLATFORM;
+  delete process.env.CADET_DISABLE_CLOUD;
   mkdirSync(protectedDir, { recursive: true });
   // Write the test registry and point resolution at it
   writeFileSync(testRegistryPath, JSON.stringify(TEST_REGISTRY, null, 2));
@@ -147,9 +145,9 @@ afterEach(() => {
       process.env[key] = saved;
     }
   };
-  restoreEnv("CADET_PLATFORM_URL", savedCadetPlatformUrl);
+  restoreEnv("CADET_CLOUD_URL", savedCadetCloudUrl);
   restoreEnv("ASSISTANT_API_KEY", savedAssistantCredential);
-  restoreEnv("CADET_DISABLE_PLATFORM", savedDisablePlatform);
+  restoreEnv("CADET_DISABLE_CLOUD", savedDisablePlatform);
   try {
     rmSync(protectedDir, { recursive: true, force: true });
     mkdirSync(protectedDir, { recursive: true });
@@ -168,7 +166,7 @@ afterEach(() => {
 describe("RemoteFeatureFlagSync", () => {
   test("skips sync when platform features are disabled", async () => {
     fetchMock = mock(async () => Response.json({ flags: { ff1: true } }));
-    process.env.CADET_DISABLE_PLATFORM = "true";
+    process.env.CADET_DISABLE_CLOUD = "true";
 
     const sync = new RemoteFeatureFlagSync({
       credentials: fakeCredentialCache(defaultCredentials()),
@@ -179,12 +177,11 @@ describe("RemoteFeatureFlagSync", () => {
     expect(fetchMock).not.toHaveBeenCalled();
   });
 
-  test("skips sync when no platform URL is available from cache or env", async () => {
+  test("skips sync when no platform URL is available from env", async () => {
     fetchMock = mock(async () => Response.json({ flags: { ff1: true } }));
 
     const creds = defaultCredentials();
-    delete creds["credential/cadet/platform_base_url"];
-    delete process.env.CADET_PLATFORM_URL;
+    delete process.env.CADET_CLOUD_URL;
 
     const sync = new RemoteFeatureFlagSync({
       credentials: fakeCredentialCache(creds),
@@ -196,12 +193,11 @@ describe("RemoteFeatureFlagSync", () => {
     expect(fetchMock).not.toHaveBeenCalled();
   });
 
-  test("falls back to CADET_PLATFORM_URL env var when platform_base_url is missing", async () => {
+  test("uses the CADET_CLOUD_URL env var", async () => {
     fetchMock = mock(async () => Response.json({ flags: {} }));
-    process.env.CADET_PLATFORM_URL = "https://env-platform.example.com";
+    process.env.CADET_CLOUD_URL = "https://env-platform.example.com";
 
     const creds = defaultCredentials();
-    delete creds["credential/cadet/platform_base_url"];
 
     const sync = new RemoteFeatureFlagSync({
       credentials: fakeCredentialCache(creds),
@@ -235,11 +231,11 @@ describe("RemoteFeatureFlagSync", () => {
     expect(headers.Accept).toBe("application/json");
   });
 
-  test("syncs when only platformUrl and assistantApiKey are present", async () => {
+  test("syncs when only cloudUrl and assistantApiKey are present", async () => {
     fetchMock = mock(async () => Response.json({ flags: { ff1: true } }));
 
+    process.env.CADET_CLOUD_URL = "https://test-cloud.mycadet.ai";
     const creds = {
-      "credential/cadet/platform_base_url": "https://platform.example.com",
       "credential/cadet/assistant_api_key": "test-api-key",
     };
 
@@ -256,9 +252,8 @@ describe("RemoteFeatureFlagSync", () => {
     fetchMock = mock(async () => Response.json({ flags: { ff1: true } }));
     process.env.ASSISTANT_API_KEY = "env-key";
 
-    const creds = {
-      "credential/cadet/platform_base_url": "https://platform.example.com",
-    };
+    process.env.CADET_CLOUD_URL = "https://test-cloud.mycadet.ai";
+    const creds = {};
 
     const sync = new RemoteFeatureFlagSync({
       credentials: fakeCredentialCache(creds),
@@ -299,8 +294,8 @@ describe("RemoteFeatureFlagSync", () => {
     // with the NEW api key and overwrite the cached per-assistant flag values
     // immediately, rather than serving the previous identity's (or registry
     // default) values until the next ~5-min poll.
+    process.env.CADET_CLOUD_URL = "https://test-cloud.mycadet.ai";
     const cache = fakeCredentialCache({
-      "credential/cadet/platform_base_url": "https://platform.example.com",
       "credential/cadet/assistant_api_key": "old-assistant-key",
     });
 
@@ -317,8 +312,8 @@ describe("RemoteFeatureFlagSync", () => {
 
     // Warm-pool claim: credentials now belong to the newly-assigned assistant,
     // whose flag evaluation returns self-intro-greeting ON.
+    process.env.CADET_CLOUD_URL = "https://test-cloud.mycadet.ai";
     cache._setValues({
-      "credential/cadet/platform_base_url": "https://platform.example.com",
       "credential/cadet/assistant_api_key": "new-assistant-key",
     });
     fetchMock = mock(async () =>
@@ -346,8 +341,8 @@ describe("RemoteFeatureFlagSync", () => {
     // second syncNow() arriving while it is in flight must NOT be dropped by
     // the re-entrancy guard — it must trigger one more fetch so the final
     // identity's flags are cached, not the stale ones.
+    process.env.CADET_CLOUD_URL = "https://test-cloud.mycadet.ai";
     const cache = fakeCredentialCache({
-      "credential/cadet/platform_base_url": "https://platform.example.com",
       "credential/cadet/assistant_api_key": "old-assistant-key",
     });
 
@@ -375,8 +370,8 @@ describe("RemoteFeatureFlagSync", () => {
 
     // Warm-pool claim: identity changes, then a second syncNow arrives while
     // the first fetch is still in flight.
+    process.env.CADET_CLOUD_URL = "https://test-cloud.mycadet.ai";
     cache._setValues({
-      "credential/cadet/platform_base_url": "https://platform.example.com",
       "credential/cadet/assistant_api_key": "new-assistant-key",
     });
     await sync.syncNow(); // returns immediately, records pendingResync
@@ -491,10 +486,8 @@ describe("RemoteFeatureFlagSync", () => {
   test("constructs correct URL from platform base URL", async () => {
     fetchMock = mock(async () => Response.json({ flags: {} }));
 
-    const creds = {
-      ...defaultCredentials(),
-      "credential/cadet/platform_base_url": "https://platform.example.com",
-    };
+    process.env.CADET_CLOUD_URL = "https://test-cloud.mycadet.ai";
+    const creds = { ...defaultCredentials() };
     const sync = new RemoteFeatureFlagSync({
       credentials: fakeCredentialCache(creds),
     });
@@ -504,7 +497,7 @@ describe("RemoteFeatureFlagSync", () => {
     expect(fetchMock).toHaveBeenCalledTimes(1);
     const [url] = fetchMock.mock.calls[0];
     expect(url).toBe(
-      "https://platform.example.com/v1/feature-flags/assistant-flag-values/",
+      "https://test-cloud.mycadet.ai/v1/feature-flags/assistant-flag-values/",
     );
   });
 
@@ -572,10 +565,8 @@ describe("RemoteFeatureFlagSync", () => {
   test("strips trailing slashes from platform URL", async () => {
     fetchMock = mock(async () => Response.json({ flags: {} }));
 
-    const creds = {
-      ...defaultCredentials(),
-      "credential/cadet/platform_base_url": "https://platform.example.com///",
-    };
+    process.env.CADET_CLOUD_URL = "https://test-cloud.mycadet.ai///";
+    const creds = { ...defaultCredentials() };
     const sync = new RemoteFeatureFlagSync({
       credentials: fakeCredentialCache(creds),
     });
@@ -585,12 +576,12 @@ describe("RemoteFeatureFlagSync", () => {
     expect(fetchMock).toHaveBeenCalledTimes(1);
     const [url] = fetchMock.mock.calls[0];
     expect(url).toBe(
-      "https://platform.example.com/v1/feature-flags/assistant-flag-values/",
+      "https://test-cloud.mycadet.ai/v1/feature-flags/assistant-flag-values/",
     );
   });
 
   test("normalizes remote false for GA flags (defaultEnabled: true in registry)", async () => {
-    // The platform sends false for all flags it knows about (blanket-deny).
+    // The cloud sends false for all flags it knows about (blanket-deny).
     // GA flags (defaultEnabled: true in the registry) should not be disabled
     // by remote overrides — only local persisted overrides can do that.
     // Uses the test-local registry which defines test-ga-flag as GA
@@ -725,8 +716,8 @@ describe("RemoteFeatureFlagSync", () => {
   test("trims whitespace from credential values", async () => {
     fetchMock = mock(async () => Response.json({ flags: {} }));
 
+    process.env.CADET_CLOUD_URL = "  https://test-cloud.mycadet.ai  ";
     const creds = {
-      "credential/cadet/platform_base_url": "  https://platform.example.com  ",
       "credential/cadet/assistant_api_key": "  trimmed-key  ",
     };
     const sync = new RemoteFeatureFlagSync({
@@ -738,7 +729,7 @@ describe("RemoteFeatureFlagSync", () => {
     expect(fetchMock).toHaveBeenCalledTimes(1);
     const [url, init] = fetchMock.mock.calls[0];
     expect(url).toBe(
-      "https://platform.example.com/v1/feature-flags/assistant-flag-values/",
+      "https://test-cloud.mycadet.ai/v1/feature-flags/assistant-flag-values/",
     );
     const headers = init?.headers as Record<string, string>;
     expect(headers.Authorization).toBe("Api-Key trimmed-key");
@@ -905,17 +896,18 @@ describe("RemoteFeatureFlagSync", () => {
       credentials: creds,
       initialPollIntervalMs: 50,
     });
+    // Missing platform URL from the start — polling should pause
+    delete process.env.CADET_CLOUD_URL;
     await sync.start();
 
-    // No fetch calls — missing platform URL, polling should be paused
     expect(fetchMock).not.toHaveBeenCalled();
 
     // Wait well past the initial poll interval — should still not poll
     await new Promise((r) => setTimeout(r, 200));
     expect(fetchMock).not.toHaveBeenCalled();
 
-    // Simulate platform URL becoming available
-    creds._setValues(defaultCredentials());
+    // Simulate the cloud URL becoming available
+    process.env.CADET_CLOUD_URL = "https://test-cloud.mycadet.ai";
     creds._invalidate();
 
     // Wait for syncNow to complete (async, fire-and-forget from callback)
@@ -949,9 +941,7 @@ describe("RemoteFeatureFlagSync", () => {
     expect(readRemoteFeatureFlags()).toEqual({ "per-assistant-flag": true });
 
     // Simulate transient API key loss (CES hiccup) — platform URL still present
-    cache._setValues({
-      "credential/cadet/platform_base_url": "https://cloud.mycadet.ai",
-    });
+    cache._setValues({});
     fetchMock = mock(async () =>
       Response.json({ flags: { "per-assistant-flag": false } }),
     );

package/src/__tests__/resolve-assistant.test.ts

@@ -9,7 +9,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,

package/src/__tests__/route-schema-guard.test.ts

@@ -210,7 +210,7 @@ const EXCLUDED_FROM_SCHEMA = new Set([
   "/v1/remote-web/pairing-requests",
   "/v1/remote-web/pairing-requests/approve",
   "/v1/remote-web/pairing-requests/deny",
-  // Shared-invite redemption, called by the platform on an invitee's behalf;
+  // Shared-invite redemption, called by the cloud on an invitee's behalf;
   // not part of the public gateway API
   "/v1/shared/invites/redeem",
   // Loopback-only device management — not part of the public gateway API
@@ -227,6 +227,9 @@ const EXCLUDED_FROM_SCHEMA = new Set([
   "/v1/speech/stt/stream",
   "/v2/speech/stt/stream",
   "/v1/speech/tts/stream",
+  // Loopback-only ingress domain recording — the local CLI reports its
+  // tunnel's public URL (bearer-authed); not part of the public gateway API
+  "/v1/ingress/domains",
   // Plugin-declared webhooks — which paths exist is decided at runtime by the
   // installed plugins and the guardian's approvals, so there is no fixed set
   // to document. The declaration schema is the contract, not this path.

package/src/__tests__/runtime-client.test.ts

@@ -42,7 +42,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,
@@ -340,7 +339,7 @@ describe("resolvePublicHttpBaseUrl", () => {
     expect(result).toBe("https://assistant.example.com");
   });
 
-  test("does not read the platform assistant id when the config URL resolves", async () => {
+  test("does not read the cloud assistant id when the config URL resolves", async () => {
     const platformIdGetter = getId("assistant-123");
     await resolvePublicHttpBaseUrl(
       makeConfig({ tunnelBaseUrl: "https://tunnel-dev.mycadet.ai" }),

package/src/__tests__/runtime-health-proxy.test.ts

@@ -26,7 +26,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,

package/src/__tests__/runtime-proxy-auth.test.ts

@@ -45,7 +45,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,
@@ -412,7 +411,9 @@ describe("runtime proxy OAuth grant path rewrite", () => {
       },
     );
 
-    expect(url).toBe("http://localhost:7821/v1/oauth/proxy/stripe_link/v1/charges");
+    expect(url).toBe(
+      "http://localhost:7821/v1/oauth/proxy/stripe_link/v1/charges",
+    );
   });
 
   test("does not rewrite a host-absolute path without a proxy grant", async () => {

package/src/__tests__/runtime-proxy-device-stamp.test.ts

@@ -161,7 +161,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,

package/src/__tests__/runtime-proxy-error-body.test.ts

@@ -75,7 +75,6 @@ function makeConfig(): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,

package/src/__tests__/runtime-proxy.test.ts

@@ -26,7 +26,6 @@ function makeConfig(overrides: Partial<GatewayConfig> = {}): GatewayConfig {
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: false,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,

package/src/__tests__/runtime-stream-test-utils.ts

@@ -50,7 +50,6 @@ export function makeConfig(
     routingEntries: [],
     port: 7830,
     runtimeProxyRequireAuth: true,
-    shutdownDrainMs: 5000,
     runtimeTimeoutMs: 30000,
     runtimeMaxRetries: 2,
     runtimeInitialBackoffMs: 500,