@askdkc/dsh-cli 0.13.4 → 0.14.0

package/lib/types/dsh-adapter/message-observer.js

@@ -1,7 +1,7 @@
 /**
  * messages.observe contract surface (C-042,
  * `messages.dsh/v1alpha1#MessageObserver`): the host event broker, mounted
- * by the dsh-tui-plugin-host row as `ctx.tuiMessageObserver`.
+ * by the dsh-cli-plugin-host row as `ctx.tuiMessageObserver`.
  *
  * Mapping (deliberately narrow):
  *
@@ -174,7 +174,7 @@ export class TuiMessageObserverRuntime extends Service {
                     runtime.#publishGuarded(session, event);
                 }
                 catch (error) {
-                    runtime.ctx.logger.warn('dsh-tui: messages.observe publish failed (event dropped)');
+                    runtime.ctx.logger.warn('dsh-cli: messages.observe publish failed (event dropped)');
                 }
             },
         });
@@ -242,22 +242,22 @@ export class TuiMessageObserverRuntime extends Service {
         const state = observerStateFor(this);
         const before = state.subscriptions.size;
         const identity = {
-            componentId: '__dsh_tui_live_probe__',
-            activationId: '__dsh_tui_live_probe__',
+            componentId: '__dsh_cli_live_probe__',
+            activationId: '__dsh_cli_live_probe__',
             version: '0.0.0',
             facet: 'host',
-            manifest: { id: '__dsh_tui_live_probe__' },
-            projection: { id: '__dsh_tui_live_probe__' },
+            manifest: { id: '__dsh_cli_live_probe__' },
+            projection: { id: '__dsh_cli_live_probe__' },
         };
         const self = concreteService(this);
         const received = [];
-        const release = self.#registerSubscription(state.hostContext, identity, '__dsh_tui_live_probe__', 'session:__dsh_tui_live_probe__', envelope => { received.push(envelope); }, { enforceGrants: false, recordLedger: false, bindLifecycle: false });
+        const release = self.#registerSubscription(state.hostContext, identity, '__dsh_cli_live_probe__', 'session:__dsh_cli_live_probe__', envelope => { received.push(envelope); }, { enforceGrants: false, recordLedger: false, bindLifecycle: false });
         try {
             const during = state.subscriptions.size;
             if (during !== before + 1) {
                 throw new Error(`temporary subscription did not enter the broker (${before} -> ${during})`);
             }
-            self.#publishGuarded({ id: '__dsh_tui_live_probe__' }, {
+            self.#publishGuarded({ id: '__dsh_cli_live_probe__' }, {
                 type: 'user/message',
                 seq: 1,
                 data: {
@@ -315,18 +315,18 @@ export class TuiMessageObserverRuntime extends Service {
         assertCapabilityShadowPolicy('host.messages.subscribe', observerStateFor(this).runtime.mode, observerStateFor(this).runtime.slices);
         const caller = activationContext(pluginCtx);
         if (caller === undefined)
-            throw new Error('dsh-tui: messages.observe.subscribe requires a live activation context');
+            throw new Error('dsh-cli: messages.observe.subscribe requires a live activation context');
         assertCallerContext(this.ctx, caller, 'messages.observe.subscribe', this);
         const identity = requireComponentIdentity(caller);
         const plugin = identity.componentId;
         if (!requiresContract(identity, 'messages.dsh/v1alpha1', 'MessageObserver')) {
-            observerStateFor(this).hostContext.logger.warn(`dsh-tui: messages.observe subscription from Component "${plugin}" denied — ` +
+            observerStateFor(this).hostContext.logger.warn(`dsh-cli: messages.observe subscription from Component "${plugin}" denied — ` +
                 'the messages.dsh/v1alpha1#MessageObserver contract was not required');
             return () => false;
         }
         const scope = typeof options?.scope === 'string' ? options.scope : '';
         if (scope === '' || scope.length > OBSERVE_SCOPE_MAX_CHARS) {
-            observerStateFor(this).hostContext.logger.warn(`dsh-tui: messages.observe subscription from plugin "${plugin}" refused — options.scope must be a ` +
+            observerStateFor(this).hostContext.logger.warn(`dsh-cli: messages.observe subscription from plugin "${plugin}" refused — options.scope must be a ` +
                 `non-empty string of at most ${OBSERVE_SCOPE_MAX_CHARS} characters (e.g. "session:<id>")`);
             return () => false;
         }
@@ -347,7 +347,7 @@ export class TuiMessageObserverRuntime extends Service {
                 && (!declaresObserverScope(identity, scope)
                     || !declaresPermission(identity, 'messages.observe.read', scope)
                     || !this.grants().allows({ componentId: identity.componentId, activationId: identity.activationId }, 'messages.observe.read', scope)))) {
-            observerStateFor(this).hostContext.logger.warn(`dsh-tui: messages.observe subscription from Component "${plugin}" denied — ` +
+            observerStateFor(this).hostContext.logger.warn(`dsh-cli: messages.observe subscription from Component "${plugin}" denied — ` +
                 'the scope is not statically declared or the current grant does not cover it; the listener was NOT registered');
             if (options.recordLedger) {
                 this.ledger()?.record({
@@ -406,7 +406,7 @@ export class TuiMessageObserverRuntime extends Service {
             return;
         const sessionId = session?.id;
         if (typeof sessionId !== 'string' || sessionId === '') {
-            observerStateFor(this).hostContext.logger.warn('dsh-tui: messages.observe publish skipped — the session carries no string id');
+            observerStateFor(this).hostContext.logger.warn('dsh-cli: messages.observe publish skipped — the session carries no string id');
             return;
         }
         const data = (record.data ?? {});
@@ -415,7 +415,7 @@ export class TuiMessageObserverRuntime extends Service {
         // Never truncate a session identity into the schema's scope bound: two
         // distinct long ids can otherwise collapse into one subscription scope.
         if (scope.length > OBSERVE_SCOPE_MAX_CHARS) {
-            observerStateFor(this).hostContext.logger.warn(`dsh-tui: messages.observe publish skipped — the session scope exceeds ${OBSERVE_SCOPE_MAX_CHARS} characters`);
+            observerStateFor(this).hostContext.logger.warn(`dsh-cli: messages.observe publish skipped — the session scope exceeds ${OBSERVE_SCOPE_MAX_CHARS} characters`);
             return;
         }
         // C-042 isolation: match subscriptions BEFORE building anything — a
@@ -462,7 +462,7 @@ export class TuiMessageObserverRuntime extends Service {
             if (state.validatorUnavailable) {
                 if (!state.validatorWarned) {
                     state.validatorWarned = true;
-                    observerStateFor(this).hostContext.logger.warn('dsh-tui: standard message envelope validator unavailable — delivery is fail-closed');
+                    observerStateFor(this).hostContext.logger.warn('dsh-cli: standard message envelope validator unavailable — delivery is fail-closed');
                 }
                 return;
             }
@@ -470,7 +470,7 @@ export class TuiMessageObserverRuntime extends Service {
                 state.validateEnvelope(envelope);
             }
             catch (error) {
-                observerStateFor(this).hostContext.logger.warn('dsh-tui: messages.observe envelope failed the standard validator and was dropped');
+                observerStateFor(this).hostContext.logger.warn('dsh-cli: messages.observe envelope failed the standard validator and was dropped');
                 return;
             }
             for (const subscription of matched) {
@@ -481,12 +481,12 @@ export class TuiMessageObserverRuntime extends Service {
                 // probe subscriptions bypass this re-check because they are synthetic
                 // and never represent a real caller grant.
                 if (!subscription.probe && !this.grants().allows({ componentId: subscription.identity.componentId, activationId: subscription.identity.activationId }, 'messages.observe.read', scope)) {
-                    observerStateFor(this).hostContext.logger.warn(`dsh-tui: messages.observe subscription of plugin "${subscription.plugin}" released — the grant was revoked`);
+                    observerStateFor(this).hostContext.logger.warn(`dsh-cli: messages.observe subscription of plugin "${subscription.plugin}" released — the grant was revoked`);
                     this.drop(subscription);
                     continue;
                 }
                 if (subscription.pendingCallbacks >= OBSERVE_CALLBACK_QUEUE_LIMIT) {
-                    observerStateFor(this).hostContext.logger.warn(`dsh-tui: messages.observe listener of Component "${subscription.plugin}" reached its ` +
+                    observerStateFor(this).hostContext.logger.warn(`dsh-cli: messages.observe listener of Component "${subscription.plugin}" reached its ` +
                         `${OBSERVE_CALLBACK_QUEUE_LIMIT}-callback queue limit; this envelope was skipped`);
                     continue;
                 }
@@ -499,28 +499,28 @@ export class TuiMessageObserverRuntime extends Service {
                     // running; queued envelopes must then be skipped rather than
                     // delivered from the stale pre-revocation snapshot.
                     if (!subscription.probe && !this.grants().allows({ componentId: subscription.identity.componentId, activationId: subscription.identity.activationId }, 'messages.observe.read', scope)) {
-                        observerStateFor(this).hostContext.logger.warn(`dsh-tui: messages.observe subscription of plugin "${subscription.plugin}" released — the grant was revoked`);
+                        observerStateFor(this).hostContext.logger.warn(`dsh-cli: messages.observe subscription of plugin "${subscription.plugin}" released — the grant was revoked`);
                         this.drop(subscription);
                         return;
                     }
                     const isolated = freezeEnvelope(envelope);
                     const result = await runWithBudget(() => subscription.listener(isolated), OBSERVE_CALLBACK_TIMEOUT_MS);
                     if (result.kind === 'timeout') {
-                        observerStateFor(this).hostContext.logger.warn(`dsh-tui: messages.observe listener of Component "${subscription.plugin}" exceeded ` +
+                        observerStateFor(this).hostContext.logger.warn(`dsh-cli: messages.observe listener of Component "${subscription.plugin}" exceeded ` +
                             `${OBSERVE_CALLBACK_TIMEOUT_MS}ms and the subscription was closed`);
                         this.drop(subscription);
                     }
                     else if (result.kind === 'rejected') {
-                        observerStateFor(this).hostContext.logger.warn(`dsh-tui: messages.observe listener of Component "${subscription.plugin}" failed; delivery continues`);
+                        observerStateFor(this).hostContext.logger.warn(`dsh-cli: messages.observe listener of Component "${subscription.plugin}" failed; delivery continues`);
                     }
                 });
                 subscription.chain = run.catch(error => {
-                    observerStateFor(this).hostContext.logger.warn('dsh-tui: messages.observe delivery failed');
+                    observerStateFor(this).hostContext.logger.warn('dsh-cli: messages.observe delivery failed');
                 }).finally(() => { subscription.pendingCallbacks -= 1; });
             }
         }
         catch (error) {
-            observerStateFor(this).hostContext.logger.warn('dsh-tui: messages.observe publish failed (event dropped)');
+            observerStateFor(this).hostContext.logger.warn('dsh-cli: messages.observe publish failed (event dropped)');
         }
     }
     /** Release a subscription exactly once (disposer, ctx unload, revoke). */

package/lib/types/dsh-adapter/migrate/adapters/scan.js

@@ -1,7 +1,7 @@
 /**
  * Shared lightweight counting for the migration adapters.
  *
- * Bare `dsh-tui migrate` (and the TUI's `/migrate`) only prints a per-agent
+ * Bare `dsh-cli migrate` (and the TUI's `/migrate`) only prints a per-agent
  * count, but discover() parses EVERY file into memory (real-world scale:
  * ~9600 files / 5.5GB → 49s and ~880MB just to print five numbers —
  * deep-review M3). countSessions() walks the same trees matching only

package/lib/types/dsh-adapter/migrate/bin-path.d.ts

@@ -1,5 +1,5 @@
 /**
- * Resolve `bin/dsh-tui.js` for the package that contains `fromDir`, or
+ * Resolve `bin/dsh-cli.js` for the package that contains `fromDir`, or
  * undefined when no ancestor within the probe bound carries it.
  */
 export declare function resolveOwnBin(fromDir: string): string | undefined;

package/lib/types/dsh-adapter/migrate/bin-path.js

@@ -1,5 +1,5 @@
 /**
- * Locate this package's `bin/dsh-tui.js` from a module directory inside it.
+ * Locate this package's `bin/dsh-cli.js` from a module directory inside it.
  *
  * The TUI's `/migrate` spawns the CLI through the package bin so the import
  * runs in a child process. Callers live at DIFFERENT depths per layout:
@@ -7,7 +7,7 @@
  * installed (four levels) — a fixed dirname count lands inside the tree and
  * the spawn fails on every real install (the regression the probe-up walk
  * below replaces; found by the independent test session on a real profile).
- * Probing upward for `bin/dsh-tui.js` matches both layouts without knowing
+ * Probing upward for `bin/dsh-cli.js` matches both layouts without knowing
  * which one we are in — the same spirit as src/update.ts's manifest walk.
  *
  * @module dsh-cli/migrate/bin-path
@@ -17,12 +17,12 @@ import { join } from 'node:path';
 /** Upward probe bounds: covers src/screens and lib/types/screens layouts. */
 const PROBE_UP = ['..', '../..', '../../..', '../../../..'];
 /**
- * Resolve `bin/dsh-tui.js` for the package that contains `fromDir`, or
+ * Resolve `bin/dsh-cli.js` for the package that contains `fromDir`, or
  * undefined when no ancestor within the probe bound carries it.
  */
 export function resolveOwnBin(fromDir) {
     for (const up of PROBE_UP) {
-        const candidate = join(fromDir, up, 'bin', 'dsh-tui.js');
+        const candidate = join(fromDir, up, 'bin', 'dsh-cli.js');
         if (existsSync(candidate))
             return candidate;
     }

package/lib/types/dsh-adapter/migrate/picker.d.ts

@@ -36,7 +36,7 @@ export declare function parseImportSummary(stdout: string): ImportSummary[];
  * command is valid must never depend on the picker having been opened first
  * (`migrateRows` is empty on a fresh mount, which used to make every
  * `/migrate <agent>` report an unknown source), and the CLI keeps the same
- * one-source rule (`dsh-tui migrate a b` is a usage error there too).
+ * one-source rule (`dsh-cli migrate a b` is a usage error there too).
  *
  * @param rawInput - arguments after `/migrate`, e.g. `" claude-code --dry-run"`.
  * @param knownAgentIds - the adapter registry's ids (see MIGRATION_ADAPTERS).

package/lib/types/dsh-adapter/migrate/picker.js

@@ -64,7 +64,7 @@ export function parseImportSummary(stdout) {
  * command is valid must never depend on the picker having been opened first
  * (`migrateRows` is empty on a fresh mount, which used to make every
  * `/migrate <agent>` report an unknown source), and the CLI keeps the same
- * one-source rule (`dsh-tui migrate a b` is a usage error there too).
+ * one-source rule (`dsh-cli migrate a b` is a usage error there too).
  *
  * @param rawInput - arguments after `/migrate`, e.g. `" claude-code --dry-run"`.
  * @param knownAgentIds - the adapter registry's ids (see MIGRATION_ADAPTERS).

package/lib/types/dsh-adapter/migrate/uuid.js

@@ -9,7 +9,7 @@
  * @module dsh-cli/migrate/uuid
  */
 import { createHash } from 'node:crypto';
-/** This project's migration namespace: dsh-tui-migrate as 16 fixed bytes. */
+/** This project's migration namespace: dsh-cli-migrate as 16 fixed bytes. */
 const NAMESPACE = Buffer.from([0x9f, 0x1d, 0x3a, 0x72, 0x6c, 0x55, 0x4c, 0x8e, 0xb0, 0x2f, 0x6d, 0x69, 0x67, 0x72, 0x61, 0x74]);
 /**
  * RFC 4122 UUIDv5 over the migration namespace.

package/lib/types/dsh-adapter/packaged-presets.js

@@ -7,7 +7,7 @@ export function packagedPresetRoot(moduleUrl = import.meta.url) {
     const candidates = [join(directory, '../../presets'), join(directory, '../../../presets')];
     const found = candidates.find(candidate => existsSync(candidate));
     if (found === undefined) {
-        throw new Error(`dsh-tui: packaged preset root is missing (checked ${candidates.join(', ')})`);
+        throw new Error(`dsh-cli: packaged preset root is missing (checked ${candidates.join(', ')})`);
     }
     return found;
 }

package/lib/types/dsh-adapter/plugin-host.d.ts

@@ -1,5 +1,5 @@
 /**
- * The dsh-tui-plugin-host row: the plugin-interop anchor every later
+ * The dsh-cli-plugin-host row: the plugin-interop anchor every later
  * contract surface hangs off (storage.local, messages.observe, effect
  * ledger — each lands as a sibling service mounted by THIS row's apply, so
  * the patch surface changed exactly once for the whole v0.15 alignment).
@@ -200,6 +200,6 @@ export declare function getHostAdmission(runtime: TuiPluginHost | TuiPluginHostR
  * describe() wrapper. It remains read-only and shadow-guarded.
  */
 export declare function getHostFacade(runtime: TuiPluginHost | TuiPluginHostRuntime | undefined): import("../adapter/index.js").HostFacade | undefined;
-export declare const name = "dsh-tui-plugin-host";
+export declare const name = "dsh-cli-plugin-host";
 export declare function apply(ctx: Context): void;
 //# sourceMappingURL=plugin-host.d.ts.map

package/lib/types/dsh-adapter/plugin-host.js

@@ -1,5 +1,5 @@
 /**
- * The dsh-tui-plugin-host row: the plugin-interop anchor every later
+ * The dsh-cli-plugin-host row: the plugin-interop anchor every later
  * contract surface hangs off (storage.local, messages.observe, effect
  * ledger — each lands as a sibling service mounted by THIS row's apply, so
  * the patch surface changed exactly once for the whole v0.15 alignment).
@@ -147,7 +147,7 @@ export class TuiPluginHostRuntime extends Service {
         installDecisionGuard(ctx, rawGrants);
         const violations = this.selfCheck();
         if (violations.length > 0) {
-            ctx.logger.warn(`dsh-tui: vendored adapter registry failed self-check (${violations.length} violation(s)); ` +
+            ctx.logger.warn(`dsh-cli: vendored adapter registry failed self-check (${violations.length} violation(s)); ` +
                 `affected contracts are dropped from the Host Descriptor fail-closed: ${violations.join(' | ')}`);
         }
     }
@@ -187,7 +187,7 @@ export class TuiPluginHostRuntime extends Service {
                     const message = error instanceof Error ? error.message : String(error);
                     const result = Object.freeze({ status: kernelRuntime.refreshStatus(), error: message });
                     state.initialKernelRefreshResult = result;
-                    this.ctx.logger.warn(`dsh-tui: kernel live refresh failed: ${message}`);
+                    this.ctx.logger.warn(`dsh-cli: kernel live refresh failed: ${message}`);
                     state.descriptorBuild = undefined;
                     state.descriptorTopology = undefined;
                     return result;
@@ -209,7 +209,7 @@ export class TuiPluginHostRuntime extends Service {
             // Production mount/dispose closure: mount the kernel drivers now and
             // dispose them when the plugin-host service's owning fiber unloads.
             void kernelRuntime.mount().catch((error) => {
-                this.ctx.logger.warn(`dsh-tui: kernel driver mount failed: ${error instanceof Error ? error.message : String(error)}`);
+                this.ctx.logger.warn(`dsh-cli: kernel driver mount failed: ${error instanceof Error ? error.message : String(error)}`);
             });
             this.ctx.effect(() => () => {
                 kernelRuntime.dispose();
@@ -263,16 +263,16 @@ export class TuiPluginHostRuntime extends Service {
             kernel.detect();
             const build = kernel.descriptorBuild();
             if (host.get('commands') === undefined) {
-                host.logger.warn('dsh-tui: host descriptor: commands.dsh/v1alpha1#Command excluded — the commands service is not mounted on this context');
+                host.logger.warn('dsh-cli: host descriptor: commands.dsh/v1alpha1#Command excluded — the commands service is not mounted on this context');
             }
             if (host.get('tuiPluginStorage') === undefined) {
-                host.logger.warn('dsh-tui: host descriptor: storage.dsh/v1alpha1#LocalStorage excluded — the tuiPluginStorage service is not mounted on this context');
+                host.logger.warn('dsh-cli: host descriptor: storage.dsh/v1alpha1#LocalStorage excluded — the tuiPluginStorage service is not mounted on this context');
             }
             if (host.get('tuiMessageObserver') === undefined) {
-                host.logger.warn('dsh-tui: host descriptor: messages.dsh/v1alpha1#MessageObserver excluded — the tuiMessageObserver service is not mounted on this context');
+                host.logger.warn('dsh-cli: host descriptor: messages.dsh/v1alpha1#MessageObserver excluded — the tuiMessageObserver service is not mounted on this context');
             }
             for (const warning of build.warnings) {
-                host.logger.warn(`dsh-tui: host descriptor: ${warning}`);
+                host.logger.warn(`dsh-cli: host descriptor: ${warning}`);
             }
             return build;
         }
@@ -311,17 +311,17 @@ export class TuiPluginHostRuntime extends Service {
             });
             state.descriptorTopology = topology;
             for (const warning of state.descriptorBuild.warnings) {
-                host.logger.warn(`dsh-tui: host descriptor: ${warning}`);
+                host.logger.warn(`dsh-cli: host descriptor: ${warning}`);
             }
         }
         if (host.get('commands') === undefined) {
-            host.logger.warn('dsh-tui: host descriptor: commands.dsh/v1alpha1#Command excluded — the commands service is not mounted on this context');
+            host.logger.warn('dsh-cli: host descriptor: commands.dsh/v1alpha1#Command excluded — the commands service is not mounted on this context');
         }
         if (host.get('tuiPluginStorage') === undefined) {
-            host.logger.warn('dsh-tui: host descriptor: storage.dsh/v1alpha1#LocalStorage excluded — the tuiPluginStorage service is not mounted on this context');
+            host.logger.warn('dsh-cli: host descriptor: storage.dsh/v1alpha1#LocalStorage excluded — the tuiPluginStorage service is not mounted on this context');
         }
         if (host.get('tuiMessageObserver') === undefined) {
-            host.logger.warn('dsh-tui: host descriptor: messages.dsh/v1alpha1#MessageObserver excluded — the tuiMessageObserver service is not mounted on this context');
+            host.logger.warn('dsh-cli: host descriptor: messages.dsh/v1alpha1#MessageObserver excluded — the tuiMessageObserver service is not mounted on this context');
         }
         return state.descriptorBuild;
     }
@@ -337,21 +337,21 @@ export class TuiPluginHostRuntime extends Service {
         void pluginCtx;
         void source;
         void options;
-        throw new Error('dsh-tui: admission is host-owned; the loader must use its admission capability');
+        throw new Error('dsh-cli: admission is host-owned; the loader must use its admission capability');
     }
     /** @internal Host loader entry; the unexported production token prevents
      * proxy calls. The test token is only reachable from the test-only adapter
      * helper, never from the package's production admission accessor. */
     admitInternal(pluginCtx, source, options = {}, token) {
         if (token !== HOST_ADMISSION_TOKEN && token !== HOST_ADMISSION_TEST_TOKEN) {
-            throw new Error('dsh-tui: admission capability is host-owned');
+            throw new Error('dsh-cli: admission capability is host-owned');
         }
         this.assertEffect('host.admission');
         const host = hostContextFor(this);
         const caller = assertActivationContext(host, pluginCtx);
         const callerFiber = activationFiber(caller);
         if (callerFiber === undefined) {
-            throw new Error('dsh-tui: admission requires an owning Cordis activation fiber');
+            throw new Error('dsh-cli: admission requires an owning Cordis activation fiber');
         }
         const manifest = parseManifest(source, { source: options.source });
         // The host (not the caller) owns the activation instance identity.
@@ -365,10 +365,10 @@ export class TuiPluginHostRuntime extends Service {
             : issueActivationId(callerFiber);
         const data = loadSpecData();
         if (data === undefined)
-            throw new Error('dsh-tui: admission profile is unavailable');
+            throw new Error('dsh-cli: admission profile is unavailable');
         const specViolations = [...verifyRegistry(data), ...verifyContractProfiles(data)];
         if (specViolations.length > 0) {
-            throw new Error(`dsh-tui: admission profile self-check failed: ${specViolations.join(' | ')}`);
+            throw new Error(`dsh-cli: admission profile self-check failed: ${specViolations.join(' | ')}`);
         }
         const index = createContractIndex(data.registry, data.permissions);
         validatePlugin(index, manifest);
@@ -392,7 +392,7 @@ export class TuiPluginHostRuntime extends Service {
             const missing = 'missingRequired' in decision && decision.missingRequired !== undefined
                 ? ` (${decision.missingRequired.join(', ')})`
                 : '';
-            throw new Error(`dsh-tui: Component ${manifest.id} admission ${decision.decision}: ${'reasonCode' in decision ? decision.reasonCode : 'incompatible'}${missing}`);
+            throw new Error(`dsh-cli: Component ${manifest.id} admission ${decision.decision}: ${'reasonCode' in decision ? decision.reasonCode : 'incompatible'}${missing}`);
         }
         return bindComponentIdentity(caller, manifest, projection, activationId);
     }
@@ -410,7 +410,7 @@ export class TuiPluginHostRuntime extends Service {
         assertCallerContext(this.ctx, caller, 'DecisionEvents.subscribe', this);
         const identity = requireComponentIdentity(caller);
         if (!requiresDecisionEvents(identity)) {
-            throw new Error(`dsh-tui: Component "${identity.componentId}" must require tui.dsh/v1alpha1#DecisionEvents before subscribing`);
+            throw new Error(`dsh-cli: Component "${identity.componentId}" must require tui.dsh/v1alpha1#DecisionEvents before subscribing`);
         }
         const previousMetadata = decisionHandlerMetadataOf(listener);
         const release = withDecisionRegistration(caller, () => registerDecisionHandler(caller, identity, event, listener, options, () => {
@@ -446,22 +446,22 @@ export class TuiPluginHostRuntime extends Service {
         // layer. Its traceable service proxy carries this context into register().
         const commands = caller.get('commands');
         if (commands === undefined) {
-            throw new Error('dsh-tui: registerCommand unavailable — the commands service is not mounted on this context');
+            throw new Error('dsh-cli: registerCommand unavailable — the commands service is not mounted on this context');
         }
         const identity = requireComponentIdentity(caller);
         if (!requiresContract(identity, 'commands.dsh/v1alpha1', 'Command')) {
-            throw new Error(`dsh-tui: Component "${identity.componentId}" must require commands.dsh/v1alpha1#Command before registering commands`);
+            throw new Error(`dsh-cli: Component "${identity.componentId}" must require commands.dsh/v1alpha1#Command before registering commands`);
         }
         const definition = typeof contributionOrDefinition === 'string' ? explicitDefinition : contributionOrDefinition;
         if (definition === undefined)
-            throw new TypeError('dsh-tui: registerCommand requires a command definition');
+            throw new TypeError('dsh-cli: registerCommand requires a command definition');
         const name = typeof definition.name === 'string' ? definition.name : 'unknown';
         const inferred = identity.manifest.contributes.commands.filter(command => command.id === name || command.id.endsWith(`.${name}`));
         const contributionId = typeof contributionOrDefinition === 'string'
             ? contributionOrDefinition
             : inferred.length === 1 ? inferred[0].id : '';
         if (contributionId === '' || !declaresCommand(identity, contributionId)) {
-            throw new TypeError(`dsh-tui: command "${name}" is not bound to a declared contribution id`);
+            throw new TypeError(`dsh-cli: command "${name}" is not bound to a declared contribution id`);
         }
         // dsh-commands normalizes into a fresh definition and intentionally drops
         // unknown fields. A per-registration handler wrapper survives that copy,
@@ -539,10 +539,10 @@ export class TuiPluginHostRuntime extends Service {
             throw new Error('commands service is not mounted for reversible command probe');
         }
         const service = commands;
-        const name = `dsh_tui_live_probe_${randomUUID().replace(/-/g, '').slice(0, 12)}`;
+        const name = `dsh_cli_live_probe_${randomUUID().replace(/-/g, '').slice(0, 12)}`;
         const definition = {
             name,
-            description: 'dsh-tui adapter reversible live probe',
+            description: 'dsh-cli adapter reversible live probe',
             handler: () => ({ kind: 'success', text: 'ok' }),
         };
         let dispose;
@@ -617,8 +617,8 @@ export class TuiPluginHostRuntime extends Service {
         return [...verifyRegistry(data), ...verifyContractProfiles(data)];
     }
 }
-const HOST_ADMISSION_TOKEN = Symbol('dsh-tui.host-admission');
-const HOST_ADMISSION_TEST_TOKEN = Symbol('dsh-tui.host-admission-test');
+const HOST_ADMISSION_TOKEN = Symbol('dsh-cli.host-admission');
+const HOST_ADMISSION_TEST_TOKEN = Symbol('dsh-cli.host-admission-test');
 /** Per-activation fiber -> host-issued opaque activation id (Cordis activation scope). */
 const activationFiberIds = new WeakMap();
 function issueActivationId(fiber) {
@@ -651,7 +651,7 @@ export function getHostInitialKernelRefreshForTest(runtime) {
                 await state.initialKernelRefreshStarted;
                 const refresh = state.initialKernelRefresh;
                 if (refresh === undefined) {
-                    throw new Error('dsh-tui: host initial kernel refresh was not started');
+                    throw new Error('dsh-cli: host initial kernel refresh was not started');
                 }
                 return refresh;
             },
@@ -731,17 +731,17 @@ function assertActivationContext(hostCtx, pluginCtx) {
             || caller === root
             || callerFiber === undefined
             || callerFiber === rootFiber) {
-            throw new Error('dsh-tui: mediated capability requires a non-root activation context from the host composition');
+            throw new Error('dsh-cli: mediated capability requires a non-root activation context from the host composition');
         }
         return caller;
     }
     catch (error) {
-        if (error instanceof Error && error.message.startsWith('dsh-tui:'))
+        if (error instanceof Error && error.message.startsWith('dsh-cli:'))
             throw error;
-        throw new Error('dsh-tui: mediated capability requires a live activation context');
+        throw new Error('dsh-cli: mediated capability requires a live activation context');
     }
 }
-export const name = 'dsh-tui-plugin-host';
+export const name = 'dsh-cli-plugin-host';
 export function apply(ctx) {
     // The plugin-host service first — the contract surfaces mounted below
     // read its grant store (they fall back to a private read only when mounted

package/lib/types/dsh-adapter/plugin-storage.d.ts

@@ -1,6 +1,6 @@
 /**
  * storage.local contract surface (C-040, `storage.dsh/v1alpha1#LocalStorage`):
- * per-plugin private persistence, mounted by the dsh-tui-plugin-host row as
+ * per-plugin private persistence, mounted by the dsh-cli-plugin-host row as
  * `ctx.tuiPluginStorage`.
  *
  * The plugin-facing API is `open(ctx)` → `{ get, set, delete }`:
@@ -11,7 +11,7 @@
  * - GRANTS AT CALL TIME: `get` requires `storage.local.read`, `set`/`delete`
  *   require `storage.local.write` — checked per call against the live grant
  *   store (a revoked grant blocks the very next operation without restart).
- * - Backend: `~/.dsh-tui/plugin-storage/<namespace>.json`, one flat JSON
+ * - Backend: `~/.dsh-cli/plugin-storage/<namespace>.json`, one flat JSON
  *   object per namespace. Writes go through dsh-atomic-write (`withFileLock`
  *   for the read-modify-write cycle + `writeFileAtomic` for the commit), and
  *   an in-process per-namespace promise chain serializes operations in
@@ -81,7 +81,7 @@ export declare const PLUGIN_STORAGE_DIR = "plugin-storage";
 export declare function storageFileName(plugin: string): string;
 /**
  * `ctx.tuiPluginStorage` — storage.local contract surface. Mounted by the
- * dsh-tui-plugin-host row; grants come from that row's store when present
+ * dsh-cli-plugin-host row; grants come from that row's store when present
  * (normal path) or a private read otherwise (bare mounts in tests).
  */
 export declare class TuiPluginStorageRuntime extends Service {

package/lib/types/dsh-adapter/plugin-storage.js

@@ -1,6 +1,6 @@
 /**
  * storage.local contract surface (C-040, `storage.dsh/v1alpha1#LocalStorage`):
- * per-plugin private persistence, mounted by the dsh-tui-plugin-host row as
+ * per-plugin private persistence, mounted by the dsh-cli-plugin-host row as
  * `ctx.tuiPluginStorage`.
  *
  * The plugin-facing API is `open(ctx)` → `{ get, set, delete }`:
@@ -11,7 +11,7 @@
  * - GRANTS AT CALL TIME: `get` requires `storage.local.read`, `set`/`delete`
  *   require `storage.local.write` — checked per call against the live grant
  *   store (a revoked grant blocks the very next operation without restart).
- * - Backend: `~/.dsh-tui/plugin-storage/<namespace>.json`, one flat JSON
+ * - Backend: `~/.dsh-cli/plugin-storage/<namespace>.json`, one flat JSON
  *   object per namespace. Writes go through dsh-atomic-write (`withFileLock`
  *   for the read-modify-write cycle + `writeFileAtomic` for the commit), and
  *   an in-process per-namespace promise chain serializes operations in
@@ -212,7 +212,7 @@ function isJsonValue(value, seen) {
 }
 /**
  * `ctx.tuiPluginStorage` — storage.local contract surface. Mounted by the
- * dsh-tui-plugin-host row; grants come from that row's store when present
+ * dsh-cli-plugin-host row; grants come from that row's store when present
  * (normal path) or a private read otherwise (bare mounts in tests).
  */
 export class TuiPluginStorageRuntime extends Service {
@@ -280,7 +280,7 @@ export class TuiPluginStorageRuntime extends Service {
     async #runReversibleProbe() {
         assertCapabilityShadowPolicy('host.storage.liveProbe', storageStateFor(this).runtime.mode, storageStateFor(this).runtime.slices);
         const state = storageStateFor(this);
-        const tempNamespace = `__dsh_tui_live_probe_${randomUUID().replace(/-/g, '')}`;
+        const tempNamespace = `__dsh_cli_live_probe_${randomUUID().replace(/-/g, '')}`;
         const file = join(state.dir, `${storageFileName(tempNamespace)}.json`);
         const operations = [];
         const identity = {
@@ -456,7 +456,7 @@ export class TuiPluginStorageRuntime extends Service {
                     errorCode: 'PERMISSION_NOT_GRANTED',
                 }, caller);
                 throw new PluginStorageError('PERMISSION_NOT_GRANTED', `storage.${permission.endsWith('.read') ? 'get' : 'set/delete'} from plugin "${plugin}" denied — grant "${permission}" ` +
-                    `for "${plugin}" in ~/.dsh-tui/extension-grants.json first`);
+                    `for "${plugin}" in ~/.dsh-cli/extension-grants.json first`);
             }
         };
         // withFileLock creates its lock as a SIBLING of the file and does not

package/lib/types/dsh-adapter/plugin.d.ts

@@ -12,13 +12,13 @@ export declare function initialPromptFromCmdlineArgs(args: readonly string[] | u
  * How this process should treat the TUI frontend, given the terminal it runs on.
  *
  * Three startup identities exist:
- *  1. `dsh-tui` / standalone — the user explicitly asked for the terminal UI;
- *  2. Web / Tauri / other GUI hosts — the profile merely has dsh-tui installed
- *     and the current process is NOT a dsh-tui frontend. stdout is a pipe or
+ *  1. `dsh-cli` / standalone — the user explicitly asked for the terminal UI;
+ *  2. Web / Tauri / other GUI hosts — the profile merely has dsh-cli installed
+ *     and the current process is NOT a dsh-cli frontend. stdout is a pipe or
  *     null there, and mounting a TUI would fail the whole composition.
  *
  * The official launcher (and the standalone runtime) mark explicit launches,
- * so an explicit `dsh-tui` run without a TTY keeps failing loudly, while
+ * so an explicit `dsh-cli` run without a TTY keeps failing loudly, while
  * foreign hosts skip the plugin and let the host boot.
  */
 export type TuiHostMode = 'interactive' | 'invalid-explicit-launch' | 'headless-host';