@mycadet/gateway 0.12.7 → 0.12.9

package/src/index.ts

@@ -104,6 +104,7 @@ import {
   handleListDevices,
   handleRevokeDevice,
 } from "./http/routes/devices.js";
+import { handleSaveIngressDomain } from "./http/routes/ingress-domains.js";
 import { handlePair } from "./http/routes/pair.js";
 import { handleCredentialEntryPage } from "./http/routes/credential-entry-page.js";
 import {
@@ -123,7 +124,7 @@ import { createSlackControlPlaneProxyHandler } from "./http/routes/slack-control
 import { createOAuthAppsProxyHandler } from "./http/routes/oauth-apps-proxy.js";
 import { createOAuthProvidersProxyHandler } from "./http/routes/oauth-providers-proxy.js";
 import { createChannelReadinessProxyHandler } from "./http/routes/channel-readiness-proxy.js";
-import { createPlatformPushProxyHandler } from "./http/routes/platform-push-proxy.js";
+import { createCloudPushProxyHandler } from "./http/routes/cloud-push-proxy.js";
 import { createPsHandler } from "./http/routes/ps.js";
 import { createTunnelStatusHandler } from "./http/routes/tunnel-status.js";
 import { createRuntimeHealthProxyHandler } from "./http/routes/runtime-health-proxy.js";
@@ -191,11 +192,11 @@ import {
 } from "./http/routes/channel-permission-overrides.js";
 import { getLogger, initLogger } from "./logger.js";
 import {
-  bindPlatformIdentityCredentialCache,
-  ensurePlatformIdentityIds,
-  resolvePlatformAssistantIdOrUndefined,
-} from "./platform-identity.js";
-import { getPlatformBaseUrl } from "./platform-url.js";
+  bindCloudIdentityCredentialCache,
+  ensureCloudIdentityIds,
+  resolveCloudAssistantIdOrUndefined,
+} from "./cloud-identity.js";
+import { getCloudBaseUrl } from "./cloud-url.js";
 import { CircuitBreakerOpenError, uploadAttachment } from "./runtime/client.js";
 import {
   appendFailedAttachmentNotice,
@@ -233,7 +234,7 @@ import { SleepWakeDetector } from "./sleep-wake-detector.js";
 import { callTelegramApi } from "./telegram/api.js";
 import { fetchImpl } from "./fetch.js";
 import {
-  arePlatformFeaturesEnabled,
+  areCloudFeaturesEnabled,
   isFeatureFlagEnabled,
 } from "./feature-flag-resolver.js";
 import { isNewCommand, handleNewCommand } from "./webhook-pipeline.js";
@@ -444,8 +445,8 @@ async function main() {
   // Handlers read dynamic credentials and config.json values from these
   // caches at call time, with automatic TTL refresh.
   const credentialCache = new CredentialCache();
-  bindPlatformIdentityCredentialCache(credentialCache);
-  void ensurePlatformIdentityIds();
+  bindCloudIdentityCredentialCache(credentialCache);
+  void ensureCloudIdentityIds();
   const configFileCache = new ConfigFileCache();
   const tunnelClient = createTunnelClient(config, {
     credentials: credentialCache,
@@ -471,7 +472,7 @@ async function main() {
   let cadetReady = false;
   let tunnelStartRequested = false;
 
-  function maybeStartTunnelTunnelForTwilio(
+  function maybeStartTunnelForTwilio(
     reason: string,
     twilioCredentials?: Record<string, string> | null,
   ): boolean {
@@ -493,14 +494,14 @@ async function main() {
    *
    * Tunnel is the browser's ingress for the live-voice WebSocket, but the tunnel
    * was historically only started for Twilio (see
-   * {@link maybeStartTunnelTunnelForTwilio}). Without this, an assistant with no
+   * {@link maybeStartTunnelForTwilio}). Without this, an assistant with no
    * Twilio setup never registers a Tunnel, so the browser's
    * `/v1/live-voice` upgrade fails with "assistant tunnel is not connected".
    * Live voice is available to every assistant, so this runs unconditionally at
    * startup. Shares the `tunnelStartRequested` latch with the Twilio path — one
    * tunnel serves both — and `tunnelClient.start()` is idempotent.
    */
-  function startTunnelTunnelForLiveVoice(reason: string): boolean {
+  function startTunnelForLiveVoice(reason: string): boolean {
     if (tunnelStartRequested || !tunnelClient) {
       return tunnelStartRequested;
     }
@@ -519,7 +520,7 @@ async function main() {
    * `tunnelStartRequested` latch — one tunnel serves every ingress consumer —
    * and `tunnelClient.start()` is idempotent.
    */
-  function maybeStartTunnelTunnelForCredentialLink(reason: string): boolean {
+  function maybeStartTunnelForCredentialLink(reason: string): boolean {
     if (tunnelStartRequested || !tunnelClient) {
       return tunnelStartRequested;
     }
@@ -543,7 +544,7 @@ async function main() {
       await enablePublicIngress(configFileCache);
       log.info("Auto-enabled public ingress for credential link creation");
     }
-    maybeStartTunnelTunnelForCredentialLink("credential link minted");
+    maybeStartTunnelForCredentialLink("credential link minted");
   }
 
   async function readTwilioCredentialsForTunnelStartup(): Promise<Record<
@@ -668,7 +669,7 @@ async function main() {
   const oauthAppsProxy = createOAuthAppsProxyHandler(config);
   const oauthProvidersProxy = createOAuthProvidersProxyHandler(config);
   const channelReadinessProxy = createChannelReadinessProxyHandler(config);
-  const platformPushProxy = createPlatformPushProxyHandler(credentialCache);
+  const cloudPushProxy = createCloudPushProxyHandler(credentialCache);
   const psHandler = createPsHandler(config);
   const tunnelStatusHandler = createTunnelStatusHandler(tunnelClient);
   const runtimeHealthProxy = createRuntimeHealthProxyHandler(config);
@@ -888,6 +889,15 @@ async function main() {
       handler: () => psHandler.handlePs(),
     },
 
+    // ── Ingress domain recording (localhost CLI only, bearer-authed) ──
+    {
+      path: "/v1/ingress/domains",
+      method: "POST",
+      auth: "edge",
+      handler: (req, _params, getClientIp) =>
+        handleSaveIngressDomain(req, getClientIp(), configFileCache),
+    },
+
     // ── Tunnel status ──
     {
       path: "/v1/tunnel/status",
@@ -1336,7 +1346,7 @@ async function main() {
       //
       // Trailing slash is optional to preserve compatibility with existing
       // pollers. PlatformMigrationClient.pollImportStatus (macOS) and
-      // cli/src/lib/platform-client.ts both hit `.../status/` against the
+      // cli/src/lib/cloud-client.ts both hit `.../status/` against the
       // platform API today; other callers may follow the bare-path
       // convention (`.../status`). Regex routes in the gateway router are
       // NOT trailing-slash-normalized, so the optionality is encoded here.
@@ -1447,7 +1457,7 @@ async function main() {
       method: "POST",
       auth: "edge-scoped",
       scope: "settings.write",
-      handler: (req) => platformPushProxy.handleUpsertPushToken(req),
+      handler: (req) => cloudPushProxy.handleUpsertPushToken(req),
     },
     {
       path: /^\/v1\/assistants\/[^/]+\/push-tokens\/([^/]+)\/?$/,
@@ -1455,14 +1465,14 @@ async function main() {
       auth: "edge-scoped",
       scope: "settings.write",
       handler: (req, params) =>
-        platformPushProxy.handleDeletePushToken(req, params[0]),
+        cloudPushProxy.handleDeletePushToken(req, params[0]),
     },
     {
       path: /^\/v1\/assistants\/[^/]+\/live-activity\/tokens\/?$/,
       method: "POST",
       auth: "edge-scoped",
       scope: "settings.write",
-      handler: (req) => platformPushProxy.handleUpsertLiveActivityToken(req),
+      handler: (req) => cloudPushProxy.handleUpsertLiveActivityToken(req),
     },
     {
       path: /^\/v1\/assistants\/[^/]+\/live-activity\/tokens\/([^/]+)\/?$/,
@@ -1470,7 +1480,7 @@ async function main() {
       auth: "edge-scoped",
       scope: "settings.write",
       handler: (req, params) =>
-        platformPushProxy.handleDeleteLiveActivityToken(req, params[0]),
+        cloudPushProxy.handleDeleteLiveActivityToken(req, params[0]),
     },
 
     // ── Channel readiness ──
@@ -1791,7 +1801,7 @@ async function main() {
     // auth is edge-guardian rather than edge-scoped, because approving ingress
     // is the decision the assistant must not make for itself; and there are no
     // assistant-scoped variants, because the guardian reaches these directly
-    // rather than through the platform proxy. Deliberately absent from the IPC
+    // rather than through the cloud proxy. Deliberately absent from the IPC
     // surface for the same reason as the auth choice. Approve and revoke are
     // POST verb paths because a grant has no id of its own until a guardian
     // creates one. The listing is guardian-only for a different reason: it says
@@ -1817,7 +1827,7 @@ async function main() {
 
     // ── Channel ingress: assistant-scoped variants ──
     // Same handlers, same guardian auth, reached through the prefix a client
-    // built on the platform's addressing produces. Approvals are
+    // built on the cloud's addressing produces. Approvals are
     // gateway-global, so the assistant id is matched and discarded, the same
     // precedent as channel-permission-overrides below. These exist because the
     // web client's generated gateway SDK only speaks the prefixed form; the
@@ -1845,7 +1855,7 @@ async function main() {
     // ── Channel permission overrides (matrix cells) — flat routes ──
     // HTTP mirror of the channel-permission IPC surface so configuration
     // clients can read/write cascade cells. Gateway-owned storage; same
-    // platform-proxy path shape as channel-admission-policy above. The
+    // cloud-proxy path shape as channel-admission-policy above. The
     // delete is a POST verb path because cells are keyed by a composite
     // (selector × contact-type), not a row id.
     {
@@ -2320,7 +2330,7 @@ async function main() {
     }
 
     // Reachable both ways: directly on a self-hosted ingress with an actor
-    // edge JWT, and through the tunnel on a managed assistant, which is
+    // edge JWT, and through the tunnel on a cloud assistant, which is
     // why it is in `TUNNEL_ALLOWED_PATHS`. The handler authorizes each shape on
     // its own terms and admits only the guardian either way. A paired
     // assistant has no transport at all and never reaches here.
@@ -2494,12 +2504,12 @@ async function main() {
   // loop, cleanup timer) with no reference to stop it.
   let slackStartGeneration = 0;
 
-  /** Fire-and-forget: notify the platform of inbound Slack activity so the
+  /** Fire-and-forget: notify the cloud of inbound Slack activity so the
    *  idle-sleep timer is reset for this assistant.
    *  Throttled to at most one outbound POST per 30 seconds. */
   let lastRecordActivityTs = 0;
   async function notifyRecordActivity(): Promise<void> {
-    if (!arePlatformFeaturesEnabled()) {
+    if (!areCloudFeaturesEnabled()) {
       log.debug("Platform features disabled — skipping record-activity");
       return;
     }
@@ -2509,18 +2519,16 @@ async function main() {
     lastRecordActivityTs = now;
 
     try {
-      const [platformBaseUrl, assistantApiKey, assistantId] = await Promise.all(
-        [
-          getPlatformBaseUrl(credentialCache),
-          credentialCache.get(credentialKey("cadet", "assistant_api_key")),
-          resolvePlatformAssistantIdOrUndefined(),
-        ],
-      );
+      const [assistantApiKey, assistantId] = await Promise.all([
+        credentialCache.get(credentialKey("cadet", "assistant_api_key")),
+        resolveCloudAssistantIdOrUndefined(),
+      ]);
+      const cloudBaseUrl = getCloudBaseUrl();
 
-      if (!platformBaseUrl || !assistantApiKey || !assistantId) return;
+      if (!cloudBaseUrl || !assistantApiKey || !assistantId) return;
 
       const res = await fetchImpl(
-        `${platformBaseUrl}/v1/assistants/${assistantId}/record-activity/`,
+        `${cloudBaseUrl}/v1/assistants/${assistantId}/record-activity/`,
         {
           method: "POST",
           headers: { Authorization: `Api-Key ${assistantApiKey.trim()}` },
@@ -2572,7 +2580,7 @@ async function main() {
     slackSocketClient = createSlackSocketModeClient(
       { appToken, botToken, gatewayConfig: config, threadMode },
       (normalized) => {
-        // Notify the platform of inbound activity so the idle-sleep timer
+        // Notify the cloud of inbound activity so the idle-sleep timer
         // is reset for this assistant (fire-and-forget).
         notifyRecordActivity();
 
@@ -2877,13 +2885,11 @@ async function main() {
     );
 
     const cadetCreds = event.credentials.get("cadet");
-    cadetReady = !!(
-      cadetCreds?.platform_base_url && cadetCreds?.assistant_api_key
-    );
+    cadetReady = !!cadetCreds?.assistant_api_key;
     if (cadetReady) {
       // Re-run validate when the API key / base URL change so a warm-pool
       // claim does not keep the previous assistant's bound owner ids.
-      void ensurePlatformIdentityIds();
+      void ensureCloudIdentityIds();
     }
     const twilioCreds = event.credentials.get("twilio");
 
@@ -2935,10 +2941,7 @@ async function main() {
     }
 
     if (changed.has("twilio")) {
-      maybeStartTunnelTunnelForTwilio(
-        "twilio credentials changed",
-        twilioCreds,
-      );
+      maybeStartTunnelForTwilio("twilio credentials changed", twilioCreds);
       syncConfiguredTwilioPhoneNumberWebhooks({
         credentials: credentialCache,
         configFile: configFileCache,
@@ -2947,7 +2950,7 @@ async function main() {
       });
     }
 
-    // Register email callback route with the platform so inbound email
+    // Register email callback route with the cloud so inbound email
     // webhooks are forwarded to this gateway (same pattern as Telegram).
     // Fires on initial credential load and whenever cadet credentials change
     // (key rotation, late provisioning).
@@ -2964,8 +2967,8 @@ async function main() {
       });
 
       // Cadet credentials are load-bearing for the Telegram webhook URL when
-      // the managed callback fallback applies: a cloud connection arriving
-      // or rotating after Telegram setup must repoint Telegram at the managed
+      // the cloud callback fallback applies: a cloud connection arriving
+      // or rotating after Telegram setup must repoint Telegram at the cloud
       // callback route without waiting for an unrelated Telegram or ingress
       // change, or a system wake. Skipped when telegram credentials changed in
       // the same event, since that branch already reconciled above.
@@ -2980,7 +2983,7 @@ async function main() {
 
       // Force an immediate per-assistant feature-flag re-sync. A `cadet`
       // credential change means a warm-pool claim / key rotation / late
-      // provisioning — the assistant identity the platform evaluates flags
+      // provisioning — the assistant identity the cloud evaluates flags
       // for just changed. Without this, flags stay at their previous (often
       // registry-default) values until the next ~5-min poll, which the
       // onboarding auto-greet beats, so first-message flags read stale
@@ -3002,10 +3005,10 @@ async function main() {
       log.error({ err }, "Failed to clear stale Tunnel public URL");
     });
   }
-  maybeStartTunnelTunnelForTwilio("startup", twilioStartupCredentials);
+  maybeStartTunnelForTwilio("startup", twilioStartupCredentials);
   // Tunnel is also the browser's ingress for web live voice, so bring the tunnel
   // up at startup for every assistant (not just for Twilio).
-  startTunnelTunnelForLiveVoice("startup");
+  startTunnelForLiveVoice("startup");
 
   // The credential watcher callback handles credential-backed startup side
   // effects during the initial poll. Stale Tunnel-owned ingress is already
@@ -3050,7 +3053,7 @@ async function main() {
     }
 
     if (event.changedKeys.has("twilio")) {
-      maybeStartTunnelTunnelForTwilio("twilio config changed");
+      maybeStartTunnelForTwilio("twilio config changed");
     }
 
     if (event.changedKeys.has("slack")) {
@@ -3063,7 +3066,7 @@ async function main() {
     }
 
     // Side effect: re-register email callback when ingress URL changes so
-    // the platform callback route points at the new self-hosted URL.
+    // the cloud callback route points at the new self-hosted URL.
     if (
       event.changedKeys.has("ingress") &&
       !onlyTunnelPublicBaseUrlChanged &&
@@ -3178,7 +3181,7 @@ async function main() {
     // Force-reconnect Slack WebSocket (may be half-open after sleep)
     slackSocketClient?.forceReconnect();
 
-    // Invalidate caches so next read picks up any config changes (e.g. new ngrok URL)
+    // Invalidate caches so next read picks up any config changes (e.g. a new tunnel URL)
     configFileCache.invalidate();
     credentialCache.invalidate();
 
@@ -3197,8 +3200,6 @@ async function main() {
   });
   sleepWakeDetector.start();
 
-  const drainMs = config.shutdownDrainMs;
-
   process.on("SIGTERM", () => {
     log.info("SIGTERM received, starting graceful shutdown");
     draining = true;
@@ -3232,7 +3233,7 @@ async function main() {
         server.stop(true);
         process.exit(0);
       });
-    }, drainMs);
+    }, 5_000);
   });
 }
 

package/src/ipc/credential-request-handlers.ts

@@ -20,7 +20,7 @@ import {
   MAX_ACTIVE_CREDENTIAL_REQUESTS,
 } from "../db/credential-request-store.js";
 import { getLogger } from "../logger.js";
-import { resolvePlatformAssistantIdOrUndefined } from "../platform-identity.js";
+import { resolveCloudAssistantIdOrUndefined } from "../cloud-identity.js";
 import { resolvePublicHttpBaseUrl } from "../runtime/client.js";
 import type { IpcRoute } from "./server.js";
 
@@ -76,7 +76,7 @@ export interface CreateCredentialRequestDeps {
    * Tunnel fallback, so a config-resolved (self-hosted/manual) URL never
    * loads identity.
    */
-  getPlatformAssistantId?: () => Promise<string | undefined>;
+  getCloudAssistantId?: () => Promise<string | undefined>;
   /**
    * Enable public ingress (if disabled) and start the Tunnel so the
    * minted link is actually reachable. Wired by the gateway entrypoint, which
@@ -97,7 +97,7 @@ export function createCredentialRequestIpcRoutes(
       handler: async (params?: Record<string, unknown>) => {
         const parsed = CreateCredentialRequestSchema.parse(params ?? {});
         return createCredentialRequest(config, configFile, parsed, {
-          getPlatformAssistantId: () => resolvePlatformAssistantIdOrUndefined(),
+          getCloudAssistantId: () => resolveCloudAssistantIdOrUndefined(),
           ensurePublicIngressLive,
         });
       },
@@ -114,7 +114,7 @@ export async function createCredentialRequest(
   const publicBaseUrl = await resolvePublicHttpBaseUrl(
     config,
     configFile,
-    deps.getPlatformAssistantId,
+    deps.getCloudAssistantId,
   );
   if (!publicBaseUrl) {
     return { ok: false, error: "no_public_base_url" };

package/src/ipc/debug-export-handlers.test.ts

@@ -40,7 +40,6 @@ function makeConfig(logDir: string | undefined): GatewayConfig {
     runtimeMaxRetries: 0,
     runtimeProxyRequireAuth: true,
     runtimeTimeoutMs: 1000,
-    shutdownDrainMs: 1,
     trustProxy: false,
   } as GatewayConfig;
 }

package/src/ipc/log-tail-handlers.test.ts

@@ -43,7 +43,6 @@ function makeConfig(): GatewayConfig {
     runtimeMaxRetries: 2,
     runtimeProxyRequireAuth: true,
     runtimeTimeoutMs: 30000,
-    shutdownDrainMs: 5000,
     trustProxy: false,
   } as GatewayConfig;
 }

package/src/ipc/risk-classification-handlers.test.ts

@@ -492,17 +492,17 @@ describe("skill classification", () => {
     expect(result.risk).toBe("low");
   });
 
-  test("scaffold_managed_skill is high risk", async () => {
+  test("scaffold_cloud_skill is high risk", async () => {
     const result = await classify({
-      tool: "scaffold_managed_skill",
+      tool: "scaffold_cloud_skill",
       skill: "new-skill",
     });
     expect(result.risk).toBe("high");
   });
 
-  test("delete_managed_skill is high risk", async () => {
+  test("delete_cloud_skill is high risk", async () => {
     const result = await classify({
-      tool: "delete_managed_skill",
+      tool: "delete_cloud_skill",
       skill: "old-skill",
     });
     expect(result.risk).toBe("high");

package/src/ipc/risk-classification-handlers.ts

@@ -471,8 +471,8 @@ export async function handleClassifyRisk(
 
     // ── Skill tools ───────────────────────────────────────────────────────
     case "skill_load":
-    case "scaffold_managed_skill":
-    case "delete_managed_skill": {
+    case "scaffold_cloud_skill":
+    case "delete_cloud_skill": {
       const assessment = await skillLoadRiskClassifier.classify({
         toolName: tool,
         skillSelector: params.skill,

package/src/remote-feature-flag-sync.ts

@@ -4,7 +4,7 @@ import { getDeviceId } from "./device-id.js";
 import { fetchImpl } from "./fetch.js";
 import { loadFeatureFlagDefaults } from "./feature-flag-defaults.js";
 import { writeRemoteFeatureFlags } from "./feature-flag-remote-store.js";
-import { arePlatformFeaturesEnabled } from "./feature-flag-resolver.js";
+import { areCloudFeaturesEnabled } from "./feature-flag-resolver.js";
 import { getLogger } from "./logger.js";
 
 const log = getLogger("remote-feature-flag-sync");
@@ -49,7 +49,7 @@ export type RemoteFeatureFlagSyncConfig = {
 };
 
 /**
- * Manages the lifecycle of syncing remote feature flags from the platform.
+ * Manages the lifecycle of syncing remote feature flags from the cloud.
  *
  * On start, fetches the current flag state and persists it to disk via the
  * remote feature flag store, then polls with adaptive back-off: starts at
@@ -328,7 +328,7 @@ export class RemoteFeatureFlagSync {
   }
 
   private async fetchRemoteFeatureFlags(): Promise<RemoteFetchResult> {
-    if (!arePlatformFeaturesEnabled()) {
+    if (!areCloudFeaturesEnabled()) {
       log.debug("Remote feature flag sync skipped: platform features disabled");
       return { status: "missing_credentials" };
     }
@@ -336,31 +336,29 @@ export class RemoteFeatureFlagSync {
     // Wrap credential reads so transient failures (CES unreachable, keychain
     // errors) are treated as retriable errors with backoff, not as "missing
     // credentials" which would pause polling indefinitely.
-    let platformUrlRaw: string | undefined;
     let assistantApiKeyRaw: string | undefined;
     try {
-      [platformUrlRaw, assistantApiKeyRaw] = await Promise.all([
-        this.credentials.get(credentialKey("cadet", "platform_base_url")),
-        this.credentials.get(credentialKey("cadet", "assistant_api_key")),
-      ]);
+      assistantApiKeyRaw = await this.credentials.get(
+        credentialKey("cadet", "assistant_api_key"),
+      );
     } catch (err) {
       log.warn({ err }, "Failed to read credentials — will retry on next poll");
       return { status: "error" };
     }
 
-    // Fall back to env vars when managed pod credentials are not yet cached.
-    const platformUrl = (
-      platformUrlRaw?.trim() ||
-      process.env.CADET_PLATFORM_URL?.trim() ||
-      ""
-    ).replace(/\/+$/, "");
+    // The base URL resolves from the environment only — the credential store
+    // never carries it.
+    const cloudUrl = (process.env.CADET_CLOUD_URL?.trim() || "").replace(
+      /\/+$/,
+      "",
+    );
 
     const assistantCredential =
       assistantApiKeyRaw?.trim() ||
       process.env.ASSISTANT_API_KEY?.trim() ||
       undefined;
 
-    if (!platformUrl) {
+    if (!cloudUrl) {
       log.debug("Remote feature flag sync skipped: no platform URL configured");
       return { status: "missing_credentials" };
     }
@@ -376,7 +374,7 @@ export class RemoteFeatureFlagSync {
       return { status: "error" };
     }
 
-    const url = `${platformUrl}/v1/feature-flags/assistant-flag-values/`;
+    const url = `${cloudUrl}/v1/feature-flags/assistant-flag-values/`;
     const headers: Record<string, string> = { Accept: "application/json" };
     if (assistantCredential) {
       headers["Authorization"] = `Api-Key ${assistantCredential}`;
@@ -412,9 +410,9 @@ export class RemoteFeatureFlagSync {
       return { status: "error" };
     }
 
-    // Accept boolean and string values from the platform. Prevent the
+    // Accept boolean and string values from the cloud. Prevent the
     // platform from disabling boolean flags that are already GA
-    // (defaultEnabled: true in the registry). The platform uses a
+    // (defaultEnabled: true in the registry). The cloud uses a
     // blanket-deny posture, sending false for every flag it knows about.
     // GA normalization only applies to boolean false values; string flag
     // values pass through unchanged.
@@ -425,7 +423,7 @@ export class RemoteFeatureFlagSync {
       if (value === false && registry[key]?.defaultEnabled === true) {
         log.debug(
           { key },
-          "Normalizing remote false for GA flag to true (defaultEnabled: true)",
+          "Normalizing remote false for GA flag to true — defaultEnabled is true",
         );
         values[key] = true;
         continue;

package/src/risk/command-registry/commands/assistant.ts

@@ -574,13 +574,13 @@ const riskOverrides: AssistantRiskOverride[] = [
     path: "inference profiles update",
     risk: "medium",
     reason:
-      "Mutates a custom profile in llm.profiles; daemon rejects managed profiles",
+      "Mutates a custom profile in llm.profiles; daemon rejects cloud profiles",
   },
   {
     path: "inference profiles delete",
     risk: "medium",
     reason:
-      "Deletes a custom profile from llm.profiles; daemon rejects managed profiles",
+      "Deletes a custom profile from llm.profiles; daemon rejects cloud profiles",
   },
   {
     path: "inference profiles active",