refactor(ws6): execute the 13 WS6 renames and close the remaining Wave 4 rows

.claude/commands/add-sse-event.md

@@ -19,7 +19,7 @@ model: opus
 > **This command needs rewriting onto the `ironclaw_webui` streaming path** —
 > the Reborn projection/SSE frame served by `crates/ironclaw_webui`, with the
 > client side in `crates/ironclaw_webui/frontend/`, over the event-stream
-> substrate (`ironclaw_events` → `ironclaw_event_projections` →
+> substrate (`ironclaw_event_log` → `ironclaw_event_projections` →
 > `ironclaw_event_streams`). That rewrite has not been done: the correct
 > Reborn procedure is **not** written down here, and this banner deliberately
 > does not guess at it.

.claude/commands/deslop-reborn.md

@@ -31,7 +31,7 @@ a legitimate Reborn target. Otherwise pick one per §1.
   may be queued for deletion rather than for de-slopping (`grep -rl "<crate>" crates/*/Cargo.toml
   Cargo.toml`). Verify each candidate's status with the orientation recipe (§1) before picking it.
 - **Local gate reality.** You can prove `cargo fmt`, `cargo clippy`, per-crate `cargo test -p <crate>`,
-  the workspace unit-test tier, and the architecture-boundary test (`cargo test -p ironclaw_architecture`)
+  the workspace unit-test tier, and the architecture-boundary test (`cargo test -p ironclaw_architecture_tests`)
   locally. The **integration tier** (`cargo test --features integration`) needs a running PostgreSQL;
   the **live tier** (`-- --ignored`) needs Postgres + LLM API keys; **Reborn e2e**
   (`scripts/reborn-e2e-rust.sh`) may need Docker. If a fix touches those paths, implement it fully and
@@ -57,7 +57,7 @@ List the crates (`ls crates/`). A crate is a **candidate** when ALL hold:
 **Selection bias:** prefer **smaller / leaf crates first** — they fit entirely in context, gate
 cleanly, and merge independently. A crate whose `src` is **under ~2k lines** can and SHOULD be read in
 full (§3). Clear the small, high-leverage crates before taking on the giants (e.g.
-`ironclaw_reborn_composition`, `ironclaw_product`, `ironclaw_extension_host`-scale surfaces need
+`ironclaw_composition`, `ironclaw_assistant`, `ironclaw_extension_host`-scale surfaces need
 targeted reading, not a full load, and may warrant splitting the de-slop across iterations
 module-by-module). When unsure, prefer a crate that is **load-bearing for invariants** (turns,
 dispatcher, authorization, approvals, secrets, run_state, event store) over a purely mechanical one —
@@ -76,7 +76,7 @@ If **every** Reborn crate is ledger-recorded or PR-held, this is a **no-de-slop
   crate, a dependency edge, or a re-export, apply the `ironclaw-reborn-architecture-review` skill first.
 - **Respect the Reborn layering.** Product/runtime composition flows **downward** through typed
   contracts (`crates/AGENTS.md` → "Dependency Mental Model"). Never introduce an upstream dependency in
-  a lower-level crate to make a fix convenient — `cargo test -p ironclaw_architecture` enforces the
+  a lower-level crate to make a fix convenient — `cargo test -p ironclaw_architecture_tests` enforces the
   boundaries and will fail. A de-slop that needs a new upward edge is out of scope; record it (§9).
 - **Scope = ONE coherent, single-crate PR.** If the crate is huge and the findings sprawl, do the
   **smallest self-contained slice** (one module / one invariant / one test gap) and record the rest in
@@ -222,7 +222,7 @@ the PR body. The bar is "every finding *resolved*" — fixed, or explicitly just
 seal/delete whose fallout is confined to this crate (+ its own tests) is in-scope — just do it. But when
 tightening a `pub` item would force edits to **other crates'** production code (routing their reads
 through a new accessor), or would require a new dependency edge / re-export (which
-`cargo test -p ironclaw_architecture` guards), that's a cross-crate change masquerading as de-slop:
+`cargo test -p ironclaw_architecture_tests` guards), that's a cross-crate change masquerading as de-slop:
 **defer it** rather than drag this PR into three crates. Likewise defer anything that **changes the
 crate's observable contract or adds a dependency**. Fix the clean, contained findings now; hand off the
 ripple-y ones per "Deferred findings" below.
@@ -262,7 +262,7 @@ detectors. A new test must actually pin behavior; a sealed `pub` must still comp
 cargo fmt --all --check
 cargo clippy -p <crate> --all-targets --all-features -- -D warnings
 cargo test  -p <crate>
-cargo test  -p ironclaw_architecture          # dependency-boundary enforcement for crates/
+cargo test  -p ironclaw_architecture_tests          # dependency-boundary enforcement for crates/
 cargo build --workspace --all-targets         # sealing a pub can break OTHER crates — this catches it
 cargo clippy --all --benches --tests --examples --all-features
 ```

.claude/commands/trace.md

@@ -19,11 +19,11 @@ Everything is **Reborn** (`crates/`) — the v1 `src/` monolith and its crates (
 |---|---|---|
 | Browser JS | `crates/ironclaw_webui/frontend/src` API client and page modules | `rg -n "apiFetch\(" crates/ironclaw_webui/frontend/src` |
 | Route + policy | `crates/ironclaw_webui/src/webui_v2/descriptors.rs`, `router.rs`, `handlers.rs` | `grep -n "WEBUI_V2_PATTERN_\|_descriptor" crates/ironclaw_webui/src/webui_v2/descriptors.rs` |
-| Product surface | `ProductSurface` in `ironclaw_host_api`, descriptors in `crates/ironclaw_product/src/reborn_services.rs` | `rg -n "ProductSurface|ProductView|ProductSurfaceCommandDescriptor" crates/ironclaw_host_api crates/ironclaw_product` |
-| Composition | `crates/ironclaw_reborn_composition/src` | `rg -n "build_.*service|impl .*Service" crates/ironclaw_reborn_composition/src` |
+| Product surface | `ProductSurface` in `ironclaw_host_api`, descriptors in `crates/ironclaw_assistant/src/reborn_services.rs` | `rg -n "ProductSurface|ProductView|ProductSurfaceCommandDescriptor" crates/ironclaw_host_api crates/ironclaw_assistant` |
+| Composition | `crates/ironclaw_composition/src` | `rg -n "build_.*service|impl .*Service" crates/ironclaw_composition/src` |
 | Turn accept | `SessionThreadService::accept_inbound_message` (`crates/ironclaw_threads`) → `TurnCoordinator::submit_turn` (`crates/ironclaw_turns/src/coordinator.rs`) | `grep -rn --include='*.rs' "submit_turn(" crates/` |
-| Claim + execute | `TurnRunScheduler` → `RebornTurnRunExecutor` (`crates/ironclaw_runner/src/`) | `grep -n "claim_next_run\|invoke_driver" crates/ironclaw_runner/src/turn_scheduler.rs crates/ironclaw_runner/src/turn_run_executor.rs` |
-| Loop | `PlannedDriver` (`crates/ironclaw_runner/src/planned_driver.rs`) → `CanonicalAgentLoopExecutor` (`crates/ironclaw_agent_loop/src/executor.rs`) → host ports (`crates/ironclaw_loop_host`) | `grep -rn "invoke_capability\|stream_model" crates/ironclaw_agent_loop/src/executor` |
+| Claim + execute | `TurnRunScheduler` → `RebornTurnRunExecutor` (`crates/ironclaw_turn_runner/src/`) | `grep -n "claim_next_run\|invoke_driver" crates/ironclaw_turn_runner/src/turn_scheduler.rs crates/ironclaw_turn_runner/src/turn_run_executor.rs` |
+| Loop | `PlannedDriver` (`crates/ironclaw_turn_runner/src/planned_driver.rs`) → `CanonicalAgentLoopExecutor` (`crates/ironclaw_agent_loop/src/executor.rs`) → host ports (`crates/ironclaw_loop_host`) | `grep -rn "invoke_capability\|stream_model" crates/ironclaw_agent_loop/src/executor` |
 | Model call | `crates/ironclaw_loop_host/src/model_gateway.rs` → `ironclaw_llm` provider chain | `grep -n "complete_model_request\|CompletionRequest" crates/ironclaw_loop_host/src/model_gateway.rs` |
 | Effects | `CapabilityHost::invoke_json` (`crates/ironclaw_capabilities/src/host.rs`) → dispatcher → wasm/scripts/mcp/first-party lanes | `grep -n "invoke_json" crates/ironclaw_capabilities/src/host.rs` |
 | Reply to browser | SSE projection drain: `stream_events` (`crates/ironclaw_webui/src/webui_v2/handlers.rs`) over `ProjectionStream` | `grep -n "stream_events" crates/ironclaw_webui/src/webui_v2/handlers.rs` |

.claude/commands/triage-prs.md

@@ -31,17 +31,17 @@ For each open PR, determine the primary module it touches by examining the `file
 
 | Category | Directories |
 |----------|------------|
-| **Reborn stack (most current work)** | `crates/ironclaw_runner/`, `crates/ironclaw_reborn_cli/`, `crates/ironclaw_reborn_composition/`, `crates/ironclaw_reborn_event_store/`, `crates/ironclaw_reborn_identity/`, `crates/ironclaw_reborn_openai_compat*/`, `crates/ironclaw_reborn_traces/`, `crates/ironclaw_webui/`, `crates/ironclaw_product/`, `crates/ironclaw_turns/`, `crates/ironclaw_threads/`, `crates/ironclaw_agent_loop/`, `crates/ironclaw_host_runtime/`, `crates/ironclaw_loop_host/`, `crates/ironclaw_capabilities/` |
+| **Reborn stack (most current work)** | `crates/ironclaw_turn_runner/`, `crates/ironclaw_cli/`, `crates/ironclaw_composition/`, `crates/ironclaw_event_store/`, `crates/ironclaw_identity/`, `crates/ironclaw_openai_compat*/`, `crates/ironclaw_trace_commons/`, `crates/ironclaw_webui/`, `crates/ironclaw_assistant/`, `crates/ironclaw_turns/`, `crates/ironclaw_threads/`, `crates/ironclaw_agent_loop/`, `crates/ironclaw_host_runtime/`, `crates/ironclaw_loop_host/`, `crates/ironclaw_capabilities/` |
 | **LLM & Inference** | `crates/ironclaw_llm/` |
 | **Agent Core** | `crates/ironclaw_skills/` |
-| **Tools & Extensions** | `crates/extensions/ironclaw_extension_support/`, `crates/ironclaw_extension_host/`, `crates/ironclaw_extensions/` |
+| **Tools & Extensions** | `crates/extensions/ironclaw_extension_support/`, `crates/ironclaw_extension_host/`, `crates/ironclaw_extension_registry/` |
 | **Channels** | `crates/extensions/packages/slack/`, `crates/extensions/packages/telegram/` |
 | **Storage & Memory** | `crates/ironclaw_filesystem/`, `crates/ironclaw_memory*/`, `crates/ironclaw_libsql_runtime/`, `migrations/` |
 | **Security** | `crates/ironclaw_safety/`, `crates/ironclaw_secrets/`, `crates/ironclaw_trust/`, `crates/ironclaw_authorization/`, `crates/ironclaw_approvals/` |
-| **Config & Setup** | `crates/ironclaw_reborn_config/` |
+| **Config & Setup** | `crates/ironclaw_config/` |
 | **Sandbox & Processes** | `crates/ironclaw_sandbox/`, `crates/ironclaw_processes/`, `crates/ironclaw_wasm*/` |
 | **Hooks** | `crates/ironclaw_hooks/` |
-| **Events & Projections** | `crates/ironclaw_events/`, `crates/ironclaw_event_projections/`, `crates/ironclaw_event_streams/` |
+| **Events & Projections** | `crates/ironclaw_event_log/`, `crates/ironclaw_event_projections/`, `crates/ironclaw_event_streams/` |
 | **CI/CD & Docs** | `.github/`, `README.md`, `CLAUDE.md`, `*.md` (no src) |
 | **Other** | Anything else |
 

.claude/rules/gateway-events.md

@@ -1,10 +1,10 @@
 ---
 paths:
-  - "crates/ironclaw_events/**"
+  - "crates/ironclaw_event_log/**"
   - "crates/ironclaw_event_projections/**"
   - "crates/ironclaw_event_streams/**"
-  - "crates/ironclaw_reborn_event_store/**"
-  - "crates/ironclaw_product/**"
+  - "crates/ironclaw_event_store/**"
+  - "crates/ironclaw_assistant/**"
   - "crates/ironclaw_webui/**"
 ---
 # Reborn events and transport projections
@@ -20,8 +20,8 @@ Re-derive the current ownership before changing the path:
 
 ```bash
 rg -n "RuntimeEvent|EventLogEntry|Projection|StreamManager|subscribe|replay" \
-  crates/ironclaw_events crates/ironclaw_event_projections \
-  crates/ironclaw_event_streams crates/ironclaw_reborn_event_store
+  crates/ironclaw_event_log crates/ironclaw_event_projections \
+  crates/ironclaw_event_streams crates/ironclaw_event_store
 ```
 
 ## Rules
@@ -72,7 +72,7 @@ There is no annotation that makes a direct broadcast safe. Review the whole
 producer-to-consumer path. Re-derive it with:
 
 ```bash
-rg -n "append|EventSink|EventLog" crates/ironclaw_events crates/ironclaw_reborn_event_store
+rg -n "append|EventSink|EventLog" crates/ironclaw_event_log crates/ironclaw_event_store
 rg -n "ProjectionRequest|ProjectionCursor|snapshot|updates" crates/ironclaw_event_projections
 rg -n "EventStreamManager|subscribe|rebase|lag|redaction" crates/ironclaw_event_streams
 rg -n "Sse|WebSocket|stream" crates/ironclaw_webui

.claude/rules/lifecycle.md

@@ -1,8 +1,8 @@
 ---
 paths:
-  - "crates/ironclaw_extensions/**"
+  - "crates/ironclaw_extension_registry/**"
   - "crates/extensions/ironclaw_extension_support/**"
-  - "crates/ironclaw_reborn_composition/**"
+  - "crates/ironclaw_composition/**"
   - "crates/ironclaw_mcp/**"
   - "crates/ironclaw_wasm/**"
 ---
@@ -63,6 +63,6 @@ succeeds, and shutdown paths that drop a handle without awaiting owned work.
 
 ```bash
 rg -n "discover|install|activate|deactivate|remove" \
-  crates/ironclaw_extensions crates/extensions/ironclaw_extension_support \
-  crates/ironclaw_reborn_composition crates/ironclaw_extension_host
+  crates/ironclaw_extension_registry crates/extensions/ironclaw_extension_support \
+  crates/ironclaw_composition crates/ironclaw_extension_host
 ```

.claude/rules/review-discipline.md

@@ -60,7 +60,7 @@ regression-check exemption rather than silently omitting coverage.
 Run the narrowest crate tests and clippy first. Add:
 
 ```bash
-cargo test -p ironclaw_architecture
+cargo test -p ironclaw_architecture_tests
 cargo clippy -p OWNING_CRATE --all-targets --all-features -- -D warnings
 scripts/pre-commit-safety.sh
 ```

.claude/rules/safety-and-sandbox.md

@@ -55,7 +55,7 @@ sensitive by default. Apply the owning Reborn redaction obligation before
 logging, durable event append, projection, SSE/WebSocket delivery, model-visible
 results, or user-visible errors. Never add an unredacted observability path in
 parallel with the mediated host result. Re-verify the active redaction boundary
-with `rg -n "redact_output|redaction|sanitize" crates/ironclaw_host_runtime crates/ironclaw_events crates/ironclaw_event_streams`.
+with `rg -n "redact_output|redaction|sanitize" crates/ironclaw_host_runtime crates/ironclaw_event_log crates/ironclaw_event_streams`.
 
 Ingress review checklist:
 
@@ -132,4 +132,4 @@ Any change touching process ports, the planner's process/filesystem backend rule
 or the composition-profile → `(DeploymentMode, RuntimeProfile)` mapping requires a
 **two-user cross-tenant escape test** driven through the caller: user B runs a shell
 command and the test asserts it cannot read user A's files. Re-verify the current
-wiring with `rg -n "HostProcessPort|TenantSandboxProcessPort|ProcessBackendKind::LocalHost|DeploymentMode::LocalSingleUser" crates/ironclaw_host_runtime crates/ironclaw_reborn_composition crates/ironclaw_runtime_policy`.
+wiring with `rg -n "HostProcessPort|TenantSandboxProcessPort|ProcessBackendKind::LocalHost|DeploymentMode::LocalSingleUser" crates/ironclaw_host_runtime crates/ironclaw_composition crates/ironclaw_runtime_policy`.

.claude/rules/skills.md

@@ -1,7 +1,7 @@
 ---
 paths:
   - "crates/ironclaw_skills/**"
-  - "crates/ironclaw_reborn_composition/src/extension_host/bundled_skills.rs"
+  - "crates/ironclaw_composition/src/extension_host/bundled_skills.rs"
   - "skills/**"
 ---
 # Skills System

.claude/rules/testing.md

@@ -29,7 +29,7 @@ Read `.claude/skills/ironclaw-reborn-testing/SKILL.md` and
    product orchestration, runner, loop, decorator chain, and in-memory filesystem —
    `cargo test --test reborn_integration_SCENARIO`.
 3. **Architecture:** dependency and composition boundaries —
-   `cargo test -p ironclaw_architecture`.
+   `cargo test -p ironclaw_architecture_tests`.
 4. **Backend/runtime integration:** DB-, Docker-, or runtime-shaped behavior —
    use the owning feature-gated suite and `cargo test --features integration`
    when required by its guide.
@@ -88,4 +88,4 @@ workflow, or capability dispatch. Re-derive exact commands from
 `crates/AGENTS.md` and the owning crate guide rather than copying stale commands.
 
 Reborn dependency/composition boundary enforcement is
-`cargo test -p ironclaw_architecture`.
+`cargo test -p ironclaw_architecture_tests`.

.claude/rules/type-placement.md

@@ -20,10 +20,10 @@ Placement decision, in order:
 2. **Domain type** (thread/turn/run/resource/capability/... shapes shared
    across crates) → the **domain vocabulary crate** that already owns that
    concept: `ironclaw_turns`, `ironclaw_threads`, `ironclaw_resources`,
-   `ironclaw_events`, `ironclaw_processes`, `ironclaw_host_api`, ...
+   `ironclaw_event_log`, `ironclaw_processes`, `ironclaw_host_api`, ...
 3. **API contract type** (request/response/config for a trait or HTTP surface)
    → the crate that **defines the contract**. ProductSurface DTOs and
-   descriptors live in `ironclaw_product`; host caller/error vocabulary lives
+   descriptors live in `ironclaw_assistant`; host caller/error vocabulary lives
    in `ironclaw_host_api`; route-only wire types live in `ironclaw_webui`.
    Consumers import from the contract owner.
 4. **Cross-domain primitive** (identity newtypes, paths, hashing, attachment
@@ -104,7 +104,7 @@ path-preservation re-export §-item-1 and item-4 above forbid. A plain private
 import, not a re-export); a crate-root `pub use` that keeps the old public path
 alive is not. Worked example: the LLM cost table moved
 `ironclaw_llm::costs` → `ironclaw_common::llm_costs`, and each consumer
-(`ironclaw_llm` providers, `ironclaw_runner`, `ironclaw_reborn_composition`,
+(`ironclaw_llm` providers, `ironclaw_turn_runner`, `ironclaw_composition`,
 the root crate) had its import repointed — no shim was left behind.
 
 ## Duplicate detection — signatures, not names