f7: deeper phone-home / branding sweep

Catches user-visible OpenCode brand strings, OpenCode-product upsells,
and one real phone-home leak that the medium pass deferred.

Per the zone matrix:
- OpenCode -> BrowserCode in user-visible strings only. Internal
  identifiers (env vars, Effect service IDs, x-opencode-* headers,
  third-party provider User-Agents, OpenCodeHttpApi Effect class,
  `opencode` as wire-protocol service name in HttpApi.make) untouched.
- opencode -> bcode in CLI invocations shown to users (tips, toasts,
  ACP terminal-auth, MCP auth toast, MCP Client.name).

What changed:

* System prompts: codex / kimi / gpt / beast / copilot-gpt-5 / gemini /
  trinity now identify as BrowserCode (was "You are OpenCode"). Same
  wording previously applied to anthropic.txt / default.txt: name
  BrowserCode first, acknowledge OpenCode lineage, point at the
  BrowserCode repo for fork-specific features. anthropic.txt's
  objectivity section also reflows from OpenCode -> BrowserCode.

* OpenAPI route descriptions (config, experimental, global, instance,
  project, pty, session): 20 sites of "the OpenCode X" -> "the
  BrowserCode X". Visible at `GET /doc` and in SDK type descriptions.

* TUI sidebar/footer wordmark: "Open|Code" two-tone branding watermark
  -> "Browser|Code". The "Getting started" panel rewritten away from
  "OpenCode includes free models".

* TUI tips-view: 14 random-tip strings updated. Renamed `opencode` CLI
  invocations to `bcode`, replaced upstream config-path examples
  (`~/.config/opencode/tui.json`, `opencode.json`) with bcode-flavored
  paths. Removed: tips advertising `docker run ghcr.io/anomalyco/opencode`,
  `/opencode` GitHub commands, and the "/connect with OpenCode Zen"
  recommendation (we don't earn upsells from OpenCode and shouldn't
  steer users to them by default).

* TUI permission dialogs (both TUI and non-TUI `bcode run` paths):
  "until OpenCode is restarted" -> "until BrowserCode is restarted";
  "Tell OpenCode what to do differently" -> "BrowserCode".

* OAuth callback HTML pages (mcp/oauth-callback.ts + plugin/codex.ts):
  titles + body text say BrowserCode. Visible in the user's browser
  after an MCP-server or Codex provider auth flow.

* MCP wire identity: Client({ name: "opencode" }) -> "bcode" (3 sites
  in mcp/index.ts) so MCP servers see us as bcode in client-handshake
  logs; client_name: "OpenCode" -> "BrowserCode" in oauth-provider.ts
  (visible on third-party OAuth consent screens); toast "Run: opencode
  mcp auth ..." -> `bcode mcp auth`; the `cmd === "opencode"` BUN_BE_BUN
  check now matches both "bcode" and "opencode" so user MCP configs
  invoking either binary work.

* ACP agent identity (acp/agent.ts): agentInfo.name and terminal-auth
  command/label updated. ACP clients like Zed display the BrowserCode
  name and invoke `bcode auth login` for terminal auth.

* TUI app.tsx "Successfully updated to OpenCode v..." -> "BrowserCode
  v...". Visible after `bcode upgrade`.

* `bcode models` provider sort: removed the `a.startsWith("opencode")`
  boost that put OpenCode's providers first. Now plain alphabetical.

* `bcode providers login` (= `bcode auth login`): dropped the
  `opencode: 0` priority bias and the `opencode: "recommended"` hint
  in the provider picker. "Configure it in opencode.json" prose in two
  amazon-bedrock / generic-credential prompt blocks -> "bcode.json".
  Positional-arg description "opencode auth provider" -> "well-known
  auth provider URL".

* Phone-home removed: server/shared/ui.ts previously fell back to
  proxying every web UI request to https://app.opencode.ai when the
  embedded UI bundle was missing (dev or OPENCODE_DISABLE_EMBEDDED_WEB_UI).
  BrowserCode now 404s in that case. Removed: UI_UPSTREAM, upstreamURL,
  requestBody, proxyResponseHeaders, and the HTTP proxy code path.
  `services.client` is kept in the function signature so the router
  call-site doesn't need to change on every sync.

* repo_clone tool description + /init command template now say
  BrowserCode; agent.ts reference-scout prompt's "OpenCode materializes
  this configured repository" -> "BrowserCode".

* session/retry.ts: the FreeUsageLimitError upsell message stops saying
  "Subscribe to OpenCode Go ... $5/month"; replaced with a neutral
  "Free usage limit reached on this provider." sentinel. GO_UPSELL_URL
  stays empty so the TUI DialogRetryAction GO-treatment path stays dark
  (unchanged behavior, just wording).

* PWA manifest (ui/src/assets/favicon/site.webmanifest, symlinked from
  app/public/site.webmanifest): name + short_name -> BrowserCode.
  Picked up when the web UI is rebuilt (we don't currently rebuild;
  this is for the eventual upstream-side rebuild).

* config.ts deprecation log "tui keys in opencode config are deprecated"
  -> "in bcode config". "Server configuration for opencode serve" ->
  "bcode serve".

Deliberately NOT changed:

* @opencode-ai/* workspace package names — Red zone.
* @opencode/... Effect service IDs — Red zone.
* x-opencode-* HTTP headers — Red zone (wire protocol).
* OPENCODE_* env vars — Red zone (user-configurable interface).
* --user-agent=opencode/... for third-party provider compat — Red.
* HttpApi.make("opencode") service name + OpenCodeHttpApi Effect class
  — wire-protocol service name registered on the router; renaming
  would fork the entire HTTP API namespace.
* .well-known/opencode remote-config-server endpoint — wire protocol;
  third-party servers serve config at this conventionally-named path.
  Renaming would break interop with anyone running OpenCode-style
  remote-config servers.
* opencode.ai/zen, opencode.ai/go upsell URLs inside dialog-provider
  Zen/Go connect dialogs — only shown when user explicitly picks
  OpenCode as a provider; in that path they need the URL to get a key.
* dialog-retry-action.tsx GO_URL constant — already neutralized at the
  message level via empty GO_UPSELL_URL; dead code.
* acp/README.md, control-plane/dev/README.md — dev docs, not bundled.
* Renaming default theme opencode.json -> bcode.json and channel-DB
  filename opencode-{channel}.db -> bcode-{channel}.db — deferred.
  Theme rename cascades through ~6 theme.tsx sites and breaks users'
  `tui.json` `"theme": "opencode"`; channel db only fires for
  non-`latest` channels we don't ship. Both increase sync conflict
  surface for little user-facing payoff.

Verification:
* `bun run typecheck` 6/6 clean (16.3s).
* Single-platform build at OPENCODE_VERSION=0.1.3-f7-deeper-dryrun
  succeeds; `./bcode --help` boots, renders BrowserCode banner, lists
  commands as `bcode <cmd>`.

Author: bcode

packages/opencode/src/acp/agent.ts

@@ -518,9 +518,9 @@ export class Agent implements ACPAgent {
     if (params.clientCapabilities?._meta?.["terminal-auth"] === true) {
       authMethod._meta = {
         "terminal-auth": {
-          command: "opencode",
+          command: "bcode",
           args: ["auth", "login"],
-          label: "OpenCode Login",
+          label: "BrowserCode Login",
         },
       }
     }
@@ -546,7 +546,7 @@ export class Agent implements ACPAgent {
       },
       authMethods: [authMethod],
       agentInfo: {
-        name: "OpenCode",
+        name: "BrowserCode",
         version: InstallationVersion,
       },
     }

packages/opencode/src/agent/agent.ts

@@ -348,7 +348,7 @@ export const layer = Layer.effect(
             `Repository: ${reference.repository}`,
             ...(reference.branch ? [`Branch/ref: ${reference.branch}`] : []),
             `Cached directory: ${reference.path}`,
-            `OpenCode materializes this configured repository before use. Do not call repo_clone for this reference.`,
+            `BrowserCode materializes this configured repository before use. Do not call repo_clone for this reference.`,
             `Inspect the cached directory as the primary reference source. Prefer repo_overview with path ${JSON.stringify(reference.path)} before broader searches, then use Glob, Grep, and Read inside that directory. Do not edit files.`,
             `Return exact absolute file paths for findings whenever possible.`,
           ].join("\n\n")

packages/opencode/src/cli/cmd/models.ts

@@ -53,13 +53,7 @@ export const ModelsCommand = effectCmd({
       return
     }
 
-    const ids = Object.keys(providers).sort((a, b) => {
-      const aIsOpencode = a.startsWith("opencode")
-      const bIsOpencode = b.startsWith("opencode")
-      if (aIsOpencode && !bIsOpencode) return -1
-      if (!aIsOpencode && bIsOpencode) return 1
-      return a.localeCompare(b)
-    })
+    const ids = Object.keys(providers).sort((a, b) => a.localeCompare(b))
 
     for (const providerID of ids) print(ProviderID.make(providerID), args.verbose)
   }),

packages/opencode/src/cli/cmd/providers.ts

@@ -298,7 +298,7 @@ export const ProvidersLoginCommand = effectCmd({
   builder: (yargs) =>
     yargs
       .positional("url", {
-        describe: "opencode auth provider",
+        describe: "well-known auth provider URL",
         type: "string",
       })
       .option("provider", {
@@ -362,14 +362,16 @@ export const ProvidersLoginCommand = effectCmd({
     }
     const hooks = yield* pluginSvc.list()
 
+    // No bcode-branded provider yet; sort major providers ahead of long tail without
+    // putting OpenCode's own "opencode" / "opencode-go" at the top — we're not earning
+    // them upsells from our binary.
     const priority: Record<string, number> = {
-      opencode: 0,
+      anthropic: 0,
       openai: 1,
-      "github-copilot": 2,
-      google: 3,
-      anthropic: 4,
-      openrouter: 5,
-      vercel: 6,
+      google: 2,
+      "github-copilot": 3,
+      openrouter: 4,
+      vercel: 5,
     }
     const pluginProviders = resolvePluginProviders({
       hooks,
@@ -390,7 +392,6 @@ export const ProvidersLoginCommand = effectCmd({
           label: x.name,
           value: x.id,
           hint: {
-            opencode: "recommended",
             openai: "ChatGPT Plus/Pro or API key",
           }[x.id],
         })),
@@ -443,7 +444,7 @@ export const ProvidersLoginCommand = effectCmd({
       }
 
       yield* Prompt.log.warn(
-        `This only stores a credential for ${provider} - you will need configure it in opencode.json, check the docs for examples.`,
+        `This only stores a credential for ${provider} - you will need configure it in bcode.json, check the docs for examples.`,
       )
     }
 
@@ -452,7 +453,7 @@ export const ProvidersLoginCommand = effectCmd({
         "Amazon Bedrock authentication priority:\n" +
           "  1. Bearer token (AWS_BEARER_TOKEN_BEDROCK or /connect)\n" +
           "  2. AWS credential chain (profile, access keys, IAM roles, EKS IRSA)\n\n" +
-          "Configure via opencode.json options (profile, region, endpoint) or\n" +
+          "Configure via bcode.json options (profile, region, endpoint) or\n" +
           "AWS environment variables (AWS_PROFILE, AWS_REGION, AWS_ACCESS_KEY_ID, AWS_WEB_IDENTITY_TOKEN_FILE).",
       )
     }

packages/opencode/src/cli/cmd/run/footer.permission.tsx

@@ -99,7 +99,7 @@ function RejectField(props: {
       minHeight={1}
       maxHeight={3}
       wrapMode="word"
-      placeholder="Tell OpenCode what to do differently"
+      placeholder="Tell BrowserCode what to do differently"
       placeholderColor={props.theme.muted}
       textColor={props.theme.text}
       focusedTextColor={props.theme.text}
@@ -288,7 +288,7 @@ export function RunPermissionBody(props: {
           </Match>
           <Match when={state().stage === "reject"}>
             <box paddingLeft={1}>
-              <text fg={props.theme.muted}>Tell OpenCode what to do differently</text>
+              <text fg={props.theme.muted}>Tell BrowserCode what to do differently</text>
             </box>
           </Match>
         </Switch>

packages/opencode/src/cli/cmd/run/permission.shared.ts

@@ -125,11 +125,11 @@ export function permissionInfo(request: PermissionRequest): PermissionInfo {
 
 export function permissionAlwaysLines(request: PermissionRequest): string[] {
   if (request.always.length === 1 && request.always[0] === "*") {
-    return [`This will allow ${request.permission} until OpenCode is restarted.`]
+    return [`This will allow ${request.permission} until BrowserCode is restarted.`]
   }
 
   return [
-    "This will allow the following patterns until OpenCode is restarted.",
+    "This will allow the following patterns until BrowserCode is restarted.",
     ...request.always.map((item) => `- ${item}`),
   ]
 }

packages/opencode/src/cli/cmd/tui/app.tsx

@@ -882,7 +882,7 @@ function App(props: { onSnapshot?: () => Promise<string[]> }) {
     await DialogAlert.show(
       dialog,
       "Update Complete",
-      `Successfully updated to OpenCode v${result.data.version}. Please restart the application.`,
+      `Successfully updated to BrowserCode v${result.data.version}. Please restart the application.`,
     )
 
     void exit()

packages/opencode/src/cli/cmd/tui/feature-plugins/home/tips-view.tsx

@@ -83,14 +83,14 @@ const TIPS = [
   "Switch to {highlight}Plan{/highlight} agent to get suggestions without making actual changes",
   "Use {highlight}@agent-name{/highlight} in prompts to invoke specialized subagents",
   "Press {highlight}Ctrl+X Right/Left{/highlight} to cycle through parent and child sessions",
-  "Create {highlight}opencode.json{/highlight} for server settings and {highlight}tui.json{/highlight} for TUI settings",
-  "Place TUI settings in {highlight}~/.config/opencode/tui.json{/highlight} for global config",
+  "Create {highlight}bcode.json{/highlight} for server settings and {highlight}tui.json{/highlight} for TUI settings",
+  "Place TUI settings in {highlight}~/.config/bcode/tui.json{/highlight} for global config",
   "Add {highlight}$schema{/highlight} to your config for autocomplete in your editor",
   "Configure {highlight}model{/highlight} in config to set your default model",
   "Override any keybind in {highlight}tui.json{/highlight} via the {highlight}keybinds{/highlight} section",
   "Set any keybind to {highlight}none{/highlight} to disable it completely",
   "Configure local or remote MCP servers in the {highlight}mcp{/highlight} config section",
-  "OpenCode auto-handles OAuth for remote MCP servers requiring auth",
+  "BrowserCode auto-handles OAuth for remote MCP servers requiring auth",
   "Add {highlight}.md{/highlight} files to {highlight}.bcode/command/{/highlight} to define reusable custom prompts",
   "Use {highlight}$ARGUMENTS{/highlight}, {highlight}$1{/highlight}, {highlight}$2{/highlight} in custom commands for dynamic input",
   "Use backticks in commands to inject shell output (e.g., {highlight}`git status`{/highlight})",
@@ -99,28 +99,24 @@ const TIPS = [
   'Use patterns like {highlight}"git *": "allow"{/highlight} for granular bash permissions',
   'Set {highlight}"rm -rf *": "deny"{/highlight} to block destructive commands',
   'Configure {highlight}"git push": "ask"{/highlight} to require approval before pushing',
-  "OpenCode auto-formats files using prettier, gofmt, ruff, and more",
+  "BrowserCode auto-formats files using prettier, gofmt, ruff, and more",
   'Set {highlight}"formatter": false{/highlight} in config to disable all auto-formatting',
   "Define custom formatter commands with file extensions in config",
-  "OpenCode uses LSP servers for intelligent code analysis",
+  "BrowserCode uses LSP servers for intelligent code analysis",
   "Create {highlight}.ts{/highlight} files in {highlight}.bcode/tools/{/highlight} to define new LLM tools",
   "Tool definitions can invoke scripts written in Python, Go, etc",
   "Add {highlight}.ts{/highlight} files to {highlight}.bcode/plugin/{/highlight} for event hooks",
   "Use plugins to send OS notifications when sessions complete",
-  "Create a plugin to prevent OpenCode from reading sensitive files",
-  "Use {highlight}opencode run{/highlight} for non-interactive scripting",
-  "Use {highlight}opencode --continue{/highlight} to resume the last session",
-  "Use {highlight}opencode run -f file.ts{/highlight} to attach files via CLI",
+  "Create a plugin to prevent BrowserCode from reading sensitive files",
+  "Use {highlight}bcode run{/highlight} for non-interactive scripting",
+  "Use {highlight}bcode --continue{/highlight} to resume the last session",
+  "Use {highlight}bcode run -f file.ts{/highlight} to attach files via CLI",
   "Use {highlight}--format json{/highlight} for machine-readable output in scripts",
-  "Run {highlight}opencode serve{/highlight} for headless API access to OpenCode",
-  "Use {highlight}opencode run --attach{/highlight} to connect to a running server",
-  "Run {highlight}opencode upgrade{/highlight} to update to the latest version",
-  "Run {highlight}opencode auth list{/highlight} to see all configured providers",
-  "Run {highlight}opencode agent create{/highlight} for guided agent creation",
-  "Use {highlight}/opencode{/highlight} in GitHub issues/PRs to trigger AI actions",
-  "Run {highlight}opencode github install{/highlight} to set up the GitHub workflow",
-  "Comment {highlight}/opencode fix this{/highlight} on issues to auto-create PRs",
-  "Comment {highlight}/oc{/highlight} on PR code lines for targeted code reviews",
+  "Run {highlight}bcode serve{/highlight} for headless API access to BrowserCode",
+  "Use {highlight}bcode run --attach{/highlight} to connect to a running server",
+  "Run {highlight}bcode upgrade{/highlight} to update to the latest version",
+  "Run {highlight}bcode auth list{/highlight} to see all configured providers",
+  "Run {highlight}bcode agent create{/highlight} for guided agent creation",
   'Use {highlight}"theme": "system"{/highlight} to match your terminal\'s colors',
   "Create JSON theme files in {highlight}.bcode/themes/{/highlight} directory",
   "Themes support dark/light variants for both modes",
@@ -138,15 +134,13 @@ const TIPS = [
   "Run {highlight}/unshare{/highlight} to remove a session from public access",
   "Permission {highlight}doom_loop{/highlight} prevents infinite tool call loops",
   "Permission {highlight}external_directory{/highlight} protects files outside project",
-  "Run {highlight}opencode debug config{/highlight} to troubleshoot configuration",
+  "Run {highlight}bcode debug config{/highlight} to troubleshoot configuration",
   "Use {highlight}--print-logs{/highlight} flag to see detailed logs in stderr",
   "Press {highlight}Ctrl+X G{/highlight} or {highlight}/timeline{/highlight} to jump to specific messages",
   "Press {highlight}Ctrl+X H{/highlight} to toggle code block visibility in messages",
   "Press {highlight}Ctrl+X S{/highlight} or {highlight}/status{/highlight} to see system status info",
   "Enable {highlight}scroll_acceleration{/highlight} in {highlight}tui.json{/highlight} for smooth macOS-style scrolling",
   "Toggle username display in chat via command palette ({highlight}Ctrl+P{/highlight})",
-  "Run {highlight}docker run -it --rm ghcr.io/anomalyco/opencode{/highlight} for containerized use",
-  "Use {highlight}/connect{/highlight} with OpenCode Zen for curated, tested models",
   "Commit your project's {highlight}AGENTS.md{/highlight} file to Git for team sharing",
   "Use {highlight}/review{/highlight} to review uncommitted changes, branches, or PRs",
   "Run {highlight}/help{/highlight} or {highlight}Ctrl+X H{/highlight} to show the help dialog",

packages/opencode/src/cli/cmd/tui/feature-plugins/sidebar/footer.tsx

@@ -49,7 +49,7 @@ function View(props: { api: TuiPluginApi }) {
                 ✕
               </text>
             </box>
-            <text fg={theme().textMuted}>OpenCode includes free models so you can start immediately.</text>
+            <text fg={theme().textMuted}>BrowserCode supports 75+ providers — bring your own API key to get started.</text>
             <text fg={theme().textMuted}>
               Connect from 75+ providers to use other models, including Claude, GPT, Gemini etc
             </text>
@@ -65,7 +65,7 @@ function View(props: { api: TuiPluginApi }) {
         <span style={{ fg: theme().text }}>{path().name}</span>
       </text>
       <text fg={theme().textMuted}>
-        <span style={{ fg: theme().success }}>•</span> <b>Open</b>
+        <span style={{ fg: theme().success }}>•</span> <b>Browser</b>
         <span style={{ fg: theme().text }}>
           <b>Code</b>
         </span>{" "}

packages/opencode/src/cli/cmd/tui/routes/session/permission.tsx

@@ -145,11 +145,11 @@ export function PermissionPrompt(props: { request: PermissionRequest }) {
           body={
             <Switch>
               <Match when={props.request.always.length === 1 && props.request.always[0] === "*"}>
-                <TextBody title={"This will allow " + props.request.permission + " until OpenCode is restarted."} />
+                <TextBody title={"This will allow " + props.request.permission + " until BrowserCode is restarted."} />
               </Match>
               <Match when={true}>
                 <box paddingLeft={1} gap={1}>
-                  <text fg={theme.textMuted}>This will allow the following patterns until OpenCode is restarted</text>
+                  <text fg={theme.textMuted}>This will allow the following patterns until BrowserCode is restarted</text>
                   <box>
                     <For each={props.request.always}>
                       {(pattern) => (
@@ -486,7 +486,7 @@ function RejectPrompt(props: { onConfirm: (message: string) => void; onCancel: (
           <text fg={theme.text}>Reject permission</text>
         </box>
         <box paddingLeft={1}>
-          <text fg={theme.textMuted}>Tell OpenCode what to do differently</text>
+          <text fg={theme.textMuted}>Tell BrowserCode what to do differently</text>
         </box>
       </box>
       <box