capix-code 1.3.0

package/scripts/install-config.sh

@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+# install-config.sh — drop the Capix provider config as the default.
+set -uo pipefail
+
+DIR="$(cd "$(dirname "$0")/.." && pwd)"
+CAPIX_CODE_DIR="${CAPIX_CODE_DIR:-$DIR/upstream}"
+CONFIG_SRC="$DIR/config/defaults.json"
+
+if [ ! -f "$CONFIG_SRC" ]; then
+  echo "✗ Missing $CONFIG_SRC"
+  exit 1
+fi
+
+# 1. Bundle the config into the capix-code package as a default.
+DEST_DIR="$CAPIX_CODE_DIR/packages/capix-code/config"
+mkdir -p "$DEST_DIR"
+cp "$CONFIG_SRC" "$DEST_DIR/capix-defaults.json"
+echo "  ✓ bundled capix-defaults.json"
+
+# 2. Create the init script that writes the default config on first run.
+WRAPPER="$CAPIX_CODE_DIR/packages/capix-code/scripts/init-capix-config.ts"
+mkdir -p "$(dirname "$WRAPPER")"
+cat > "$WRAPPER" << 'WRAPPER_EOF'
+import { existsSync, mkdirSync, writeFileSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+function getConfigDir(): string {
+  switch (process.platform) {
+    case "darwin": return join(homedir(), "Library", "Application Support", "capix-code");
+    case "win32": return join(homedir(), "AppData", "Roaming", "capix-code");
+    default: return join(homedir(), ".config", "capix-code");
+  }
+}
+
+const configDir = getConfigDir();
+const configFile = join(configDir, "capix-code.json");
+
+if (!existsSync(configFile)) {
+  let defaults = "{}";
+  try {
+    defaults = readFileSync(join(import.meta.dir, "..", "config", "capix-defaults.json"), "utf-8");
+  } catch {}
+  mkdirSync(configDir, { recursive: true });
+  writeFileSync(configFile, defaults, "utf-8");
+}
+WRAPPER_EOF
+echo "  ✓ created init-capix-config.ts wrapper"
+
+# 3. Install the TUI theme + brand assets.
+if [ -d "$DIR/themes" ]; then
+  THEME_DEST="$CAPIX_CODE_DIR/packages/capix-code/config/themes"
+  mkdir -p "$THEME_DEST"
+  cp "$DIR/themes/capix.toml" "$THEME_DEST/capix.toml" 2>/dev/null || true
+  cp "$DIR/tui-capix.json" "$CAPIX_CODE_DIR/packages/capix-code/config/tui-capix.json" 2>/dev/null || true
+  echo "  ✓ TUI theme installed"
+fi
+
+if [ -d "$DIR/brand" ]; then
+  BRAND_DEST="$CAPIX_CODE_DIR/packages/capix-code/config/brand"
+  mkdir -p "$BRAND_DEST"
+  cp -R "$DIR/brand/"* "$BRAND_DEST/" 2>/dev/null || true
+  echo "  ✓ brand assets installed"
+fi
+
+echo "✓ Capix config + branding installed."

package/scripts/install.sh

@@ -0,0 +1,115 @@
+#!/bin/bash
+set -euo pipefail
+
+VERSION="${CAPIX_CODE_VERSION:-${1:-}}"
+RELEASE_BASE_URL="${CAPIX_RELEASE_BASE_URL:-https://github.com/CapIX-Protocol/Capix-Code/releases/download}"
+INSTALL_DIR="${CAPIX_INSTALL_DIR:-${CAPIX_CODE_INSTALL_DIR:-${HOME}/.local/bin}}"
+RUNTIME_DIR="${CAPIX_CODE_RUNTIME_DIR:-${HOME}/.local/share/capix-code}"
+
+# "latest" is permitted only by resolving it to an immutable version BEFORE any
+# download — never by trusting mutable content. The release pipeline pins the
+# current stable version in CAPIX_STABLE_VERSION (the single source of truth
+# that also populates manifest/release-manifest.json#stableVersion). Without a
+# pin, "latest" fails closed so the installer never proceeds unbounded.
+if [ -z "$VERSION" ] || [ "$VERSION" = "latest" ]; then
+  if [ -n "${CAPIX_STABLE_VERSION:-}" ]; then
+    VERSION="$CAPIX_STABLE_VERSION"
+    echo "Resolved latest -> ${VERSION} (CAPIX_STABLE_VERSION)" >&2
+  else
+    echo "ERROR: 'latest' requires CAPIX_STABLE_VERSION to be set to an immutable release (e.g. v1.2.3)." >&2
+    echo "The release pipeline pins the current stable version there; do not pin to mutable content." >&2
+    exit 2
+  fi
+fi
+
+if [[ ! "$VERSION" =~ ^v[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?$ ]]; then
+  echo "ERROR: invalid version '$VERSION' (expected vMAJOR.MINOR.PATCH)" >&2
+  exit 2
+fi
+
+OS="${CAPIX_INSTALL_OS:-$(uname -s | tr '[:upper:]' '[:lower:]')}"
+ARCH="${CAPIX_INSTALL_ARCH:-$(uname -m)}"
+case "$OS" in
+  darwin|linux) ;;
+  mingw*|msys*|cygwin*|win32*|windows*)
+    echo "ERROR: Windows is not supported by this shell installer." >&2
+    echo "Download the Windows binary from:" >&2
+    echo "  https://github.com/CapIX-Protocol/Capix-Code/releases" >&2
+    echo "Or use PowerShell:" >&2
+    echo "  iwr -UseBasicParsing https://github.com/CapIX-Protocol/Capix-Code/releases/download/${VERSION}/capix-code-windows-x64.exe -OutFile capix-code.exe" >&2
+    exit 2
+    ;;
+  *)
+    echo "ERROR: unsupported operating system '$OS'" >&2
+    echo "Download a binary from: https://github.com/CapIX-Protocol/Capix-Code/releases" >&2
+    exit 2
+    ;;
+esac
+case "$ARCH" in
+  x86_64) ARCH="x64" ;;
+  arm64|aarch64) ARCH="arm64" ;;
+  *) echo "ERROR: unsupported architecture '$ARCH'" >&2; exit 2 ;;
+esac
+
+RELEASE_VERSION="${VERSION#v}"
+ARTIFACT="capix-code-${RELEASE_VERSION}-${OS}-${ARCH}-unsigned.tar.gz"
+BASE_URL="${RELEASE_BASE_URL}/${VERSION}"
+WORK_DIR=$(mktemp -d "${TMPDIR:-/tmp}/capix-code-install.XXXXXX")
+trap 'rm -rf "$WORK_DIR"' EXIT INT TERM
+
+if [[ "$BASE_URL" == https://* ]]; then
+  curl --proto '=https' --tlsv1.2 -fsSL "${BASE_URL}/${ARTIFACT}.sha256" -o "${WORK_DIR}/${ARTIFACT}.sha256"
+  curl --proto '=https' --tlsv1.2 -fsSL "${BASE_URL}/${ARTIFACT}" -o "${WORK_DIR}/${ARTIFACT}"
+else
+  curl -fsSL "${BASE_URL}/${ARTIFACT}.sha256" -o "${WORK_DIR}/${ARTIFACT}.sha256"
+  curl -fsSL "${BASE_URL}/${ARTIFACT}" -o "${WORK_DIR}/${ARTIFACT}"
+fi
+
+CHECKSUM_LINES=$(awk 'NF { count++ } END { print count + 0 }' "${WORK_DIR}/${ARTIFACT}.sha256")
+EXPECTED=$(awk 'NF { print $1 }' "${WORK_DIR}/${ARTIFACT}.sha256")
+RECORDED_ARTIFACT=$(awk 'NF { print $2 }' "${WORK_DIR}/${ARTIFACT}.sha256")
+RECORDED_ARTIFACT="${RECORDED_ARTIFACT#\*}"
+RECORDED_ARTIFACT="${RECORDED_ARTIFACT##*/}"
+if [ "$CHECKSUM_LINES" -ne 1 ] || [ "$RECORDED_ARTIFACT" != "$ARTIFACT" ] || [[ ! "$EXPECTED" =~ ^[0-9a-fA-F]{64}$ ]]; then
+  echo "ERROR: adjacent checksum must contain exactly one valid SHA-256 entry for ${ARTIFACT}" >&2
+  exit 1
+fi
+
+if command -v shasum >/dev/null 2>&1; then
+  ACTUAL=$(shasum -a 256 "${WORK_DIR}/${ARTIFACT}" | awk '{print $1}')
+elif command -v sha256sum >/dev/null 2>&1; then
+  ACTUAL=$(sha256sum "${WORK_DIR}/${ARTIFACT}" | awk '{print $1}')
+else
+  echo "ERROR: neither shasum nor sha256sum is available" >&2
+  exit 1
+fi
+
+if [ "$EXPECTED" != "$ACTUAL" ]; then
+  echo "ERROR: checksum verification failed for ${ARTIFACT}" >&2
+  exit 1
+fi
+
+mkdir -p "$INSTALL_DIR" "$(dirname "$RUNTIME_DIR")"
+
+if [ ! -w "$INSTALL_DIR" ]; then
+  echo "ERROR: ${INSTALL_DIR} is not writable. Re-run with a user-owned CAPIX_CODE_INSTALL_DIR; this installer does not invoke sudo." >&2
+  exit 1
+fi
+
+tar -xzf "${WORK_DIR}/${ARTIFACT}" -C "$WORK_DIR"
+test -x "${WORK_DIR}/customer/bin/capix-code" || {
+  echo "ERROR: verified archive does not contain customer/bin/capix-code" >&2
+  exit 1
+}
+
+STAGED_RUNTIME="${RUNTIME_DIR}.${VERSION}.new"
+rm -rf "$STAGED_RUNTIME"
+mkdir -p "$STAGED_RUNTIME"
+cp -a "${WORK_DIR}/customer/." "$STAGED_RUNTIME/"
+rm -rf "$RUNTIME_DIR"
+mv "$STAGED_RUNTIME" "$RUNTIME_DIR"
+ln -sfn "${RUNTIME_DIR}/bin/capix-code" "${INSTALL_DIR}/capix-code"
+TARGET="${INSTALL_DIR}/capix-code"
+
+echo "Installed verified Capix Code ${VERSION} at ${TARGET}"
+echo "This artifact is unsigned. Verification used the release's exact SHA-256 manifest entry."

package/scripts/package-customer.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+set -euo pipefail
+VERSION="${1:?version required}"
+PLATFORM="${2:?platform required}"
+ARCH="${3:?architecture required}"
+ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+CUSTOMER="$ROOT/dist/customer"
+OUT="$ROOT/release-artifacts"
+NAME="capix-code-$VERSION-$PLATFORM-$ARCH-unsigned"
+
+"$ROOT/scripts/assert-artifact.sh" "$CUSTOMER"
+"$ROOT/scripts/assert-customer-brand.sh" "$CUSTOMER"
+mkdir -p "$OUT"
+if [ "$PLATFORM" = win32 ]; then
+  ARCHIVE="$OUT/$NAME.zip"
+  (cd "$ROOT/dist" && 7z a -tzip "$ARCHIVE" customer)
+else
+  ARCHIVE="$OUT/$NAME.tar.gz"
+  tar -C "$ROOT/dist" -czf "$ARCHIVE" customer
+fi
+if command -v sha256sum >/dev/null 2>&1; then
+  sha256sum "$ARCHIVE" > "$ARCHIVE.sha256"
+else
+  shasum -a 256 "$ARCHIVE" > "$ARCHIVE.sha256"
+fi
+printf '%s\n' "$(git -C "$ROOT" rev-parse HEAD)" > "$OUT/$NAME.source-commit.txt"
+node "$ROOT/scripts/write-release-entry.mjs" "$VERSION" "$PLATFORM" "$ARCH" "$ARCHIVE"
+echo "Verified release artifact: $ARCHIVE"

package/scripts/package.sh

@@ -0,0 +1,84 @@
+#!/bin/bash
+set -euo pipefail
+
+VERSION="${1:-0.1.0-dev}"
+ARCH="$(uname -m)"
+OUTPUT_DIR="dist"
+ARTIFACT_NAME="capix-code-$VERSION-darwin-$ARCH"
+
+echo "=== Packaging Capix Code $VERSION ($ARCH) ==="
+
+mkdir -p "$OUTPUT_DIR"
+
+# 1. Build the TypeScript
+npm run compile || true  # tsc --noEmit for now — no separate build step yet
+
+# 2. Create tarball with src/, config/, manifest/
+echo "Creating tarball..."
+tar -czf "$OUTPUT_DIR/$ARTIFACT_NAME.tar.gz" \
+  src/ \
+  config/ \
+  manifest/ \
+  package.json \
+  package-lock.json \
+  tui-capix.json \
+  tsconfig.json \
+  LICENSE \
+  NOTICE \
+  README.md
+
+# 3. Generate SHA-256
+echo "Generating SHA-256..."
+shasum -a 256 "$OUTPUT_DIR/$ARTIFACT_NAME.tar.gz" > "$OUTPUT_DIR/$ARTIFACT_NAME.tar.gz.sha256"
+
+# 4. Provenance
+cat > "$OUTPUT_DIR/$ARTIFACT_NAME.provenance.json" << EOF
+{
+  "artifact": "$ARTIFACT_NAME.tar.gz",
+  "version": "$VERSION",
+  "platform": "darwin-$ARCH",
+  "signed": false,
+  "sourceCommit": "$(git rev-parse HEAD)",
+  "builtAt": "$(date -u +%Y-%m-%dT%H:%M:%SZ)",
+  "builder": "$(whoami)@$(hostname)",
+  "checksum": "$(cat "$OUTPUT_DIR/$ARTIFACT_NAME.tar.gz.sha256" | awk '{print $1}')"
+}
+EOF
+
+# 5. Minimal SBOM
+cat > "$OUTPUT_DIR/$ARTIFACT_NAME.sbom.json" << EOF
+{
+  "sbomFormat": "CapIX-minimal",
+  "version": "0.1.0",
+  "generatedAt": "$(date -u +%Y-%m-%dT%H:%M:%SZ)",
+  "dependencies": "See package-lock.json",
+  "sourceCommit": "$(git rev-parse HEAD)",
+  "unsigned": true
+}
+EOF
+
+# 6. Installation instructions
+cat << INST
+
+=== Capix Code $VERSION (UNSIGNED) ===
+
+Artifact: $OUTPUT_DIR/$ARTIFACT_NAME.tar.gz
+SHA-256:  $(cat "$OUTPUT_DIR/$ARTIFACT_NAME.tar.gz.sha256" | awk '{print $1}')
+
+## Installation (UNSIGNED)
+
+1. Verify checksum:
+   shasum -a 256 $OUTPUT_DIR/$ARTIFACT_NAME.tar.gz
+
+2. Extract:
+   tar -xzf $OUTPUT_DIR/$ARTIFACT_NAME.tar.gz -C ~/capix-code
+
+3. Install dependencies:
+   cd ~/capix-code && npm install --production
+
+4. Run:
+   node ~/capix-code/src/index.ts  # or after tsc: node dist/index.js
+
+Source commit: $(git rev-parse HEAD)
+
+INST

package/scripts/postinstall.js

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+const { execSync } = require('child_process');
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+
+const PLATFORM = process.platform === 'darwin' ? 'darwin' : 'linux';
+const ARCH = process.arch === 'arm64' ? 'arm64' : 'x64';
+const VERSION = '1.3.0';
+const RELEASE = `https://github.com/CapIX-Protocol/CapIX-Code/releases/download/v${VERSION}`;
+
+const installDir = path.join(os.homedir(), '.capix-code');
+const binDir = path.join(installDir, 'bin');
+const engineDir = path.join(installDir, 'engine');
+
+fs.mkdirSync(binDir, { recursive: true });
+fs.mkdirSync(engineDir, { recursive: true });
+
+try {
+  console.log('Downloading capix-code binary...');
+  execSync(`curl -fsSL ${RELEASE}/capix-code -o ${binDir}/capix-code`, { stdio: 'inherit' });
+  fs.chmodSync(path.join(binDir, 'capix-code'), 0o755);
+  
+  console.log('Downloading capix-engine (this may take a minute)...');
+  execSync(`curl -fsSL ${RELEASE}/capix-engine -o ${engineDir}/capix-engine`, { stdio: 'inherit', timeout: 300000 });
+  fs.chmodSync(path.join(engineDir, 'capix-engine'), 0o755);
+  
+  console.log('✓ Capix Code installed to ' + installDir);
+  console.log('Run: capix-code --version');
+} catch (err) {
+  console.warn('⚠ Binary download failed. Download manually from:');
+  console.warn('  https://github.com/CapIX-Protocol/CapIX-Code/releases');
+}

package/scripts/prepare-npm-meta.mjs

@@ -0,0 +1,12 @@
+import { chmodSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+const root = new URL('..', import.meta.url).pathname;
+const launcher = join(root, 'bin', 'capix-code.cjs');
+
+if (!existsSync(launcher)) {
+  console.error('Capix Code npm launcher is missing.');
+  process.exit(1);
+}
+
+chmodSync(launcher, 0o755);

package/scripts/prepare-npm-platform.mjs

@@ -0,0 +1,59 @@
+import { execFileSync } from 'node:child_process';
+import { cpSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const [platform, arch, source = 'dist/customer', destination = 'npm-platform'] =
+  process.argv.slice(2);
+const supported = new Set([
+  'darwin-arm64',
+  'darwin-x64',
+  'linux-arm64',
+  'linux-x64',
+  'windows-x64',
+]);
+const id = `${platform}-${arch}`;
+
+if (!supported.has(id)) {
+  console.error(`Unsupported Capix Code npm platform: ${id}`);
+  process.exit(2);
+}
+
+const root = resolve(fileURLToPath(new URL('..', import.meta.url)));
+const artifact = resolve(root, source);
+const output = resolve(root, destination, id);
+const isWindows = process.platform === 'win32';
+const assertScript = join(root, 'scripts', 'assert-artifact.sh');
+const brandScript = join(root, 'scripts', 'assert-customer-brand.sh');
+if (!isWindows) {
+  execFileSync(assertScript, [artifact], { stdio: 'inherit' });
+  execFileSync(brandScript, [artifact], { stdio: 'inherit' });
+} else {
+  // On Windows, run via bash if available; otherwise skip shell-script assertions
+  try {
+    execFileSync('bash', [assertScript, artifact], { stdio: 'inherit' });
+    execFileSync('bash', [brandScript, artifact], { stdio: 'inherit' });
+  } catch {
+    console.warn('Skipping shell-script assertions on Windows (bash not available)');
+  }
+}
+rmSync(output, { recursive: true, force: true });
+mkdirSync(output, { recursive: true });
+cpSync(artifact, join(output, 'customer'), { recursive: true });
+writeFileSync(
+  join(output, 'package.json'),
+  `${JSON.stringify(
+    {
+      name: `@capix-code/${id}`,
+      version: '1.2.7',
+      description: `Capix Code native runtime for ${id}`,
+      license: 'Apache-2.0',
+      os: [platform === 'windows' ? 'win32' : platform],
+      cpu: [arch],
+      files: ['customer/'],
+    },
+    null,
+    2
+  )}\n`
+);
+console.log(output);

package/scripts/rebrand.sh

@@ -0,0 +1,159 @@
+#!/usr/bin/env bash
+# rebrand.sh — apply Capix branding.
+# ONLY renames: binary name, config dirs, env var prefixes, install script.
+# Does NOT rename: workspace package name, npm package name, or import paths.
+set -euo pipefail
+
+DIR="$(cd "$(dirname "$0")/.." && pwd)"
+CAPIX_CODE_DIR="${CAPIX_CODE_DIR:-$DIR/upstream}"
+
+if [ ! -d "$CAPIX_CODE_DIR" ]; then
+  echo "✗ No $CAPIX_CODE_DIR. Run ./scripts/bootstrap.sh first."
+  exit 1
+fi
+
+cd "$CAPIX_CODE_DIR"
+
+# 0. Rename the upstream package directory.
+if [ -d "packages/opencode" ]; then
+  mv packages/opencode packages/capix-code
+  echo "  ✓ package directory renamed"
+fi
+
+echo "▸ Rebranding in $CAPIX_CODE_DIR"
+
+# 1. Binary name in packages/capix-code/package.json — ONLY the "bin" field.
+PKG="$CAPIX_CODE_DIR/packages/capix-code/package.json"
+if [ -f "$PKG" ]; then
+  # Change only the binary name, not the package name (workspace deps depend on it).
+  sed -i.bak 's|"bin": {"opencode"|"bin": {"capix-code"|g' "$PKG"
+  rm -f "$PKG.bak"
+  echo "  ✓ binary name renamed"
+fi
+
+# 2. Build script — only the output directory/file naming.
+BUILD="$CAPIX_CODE_DIR/packages/capix-code/script/build.ts"
+if [ -f "$BUILD" ]; then
+  sed -i.bak 's|bin/opencode|bin/capix-code|g' "$BUILD"
+  rm -f "$BUILD.bak"
+  echo "  ✓ build.ts: output binary renamed"
+fi
+
+# 3. Env prefixes in environment accesses only. Never rewrite imported symbols.
+echo "▸ Replacing env var prefixes…"
+find "$CAPIX_CODE_DIR/packages/capix-code/src" \( -name '*.ts' -o -name '*.js' -o -name '*.tsx' \) -type f 2>/dev/null | while IFS= read -r f; do
+  perl -0pi.bak -e 's/(process[.]env|Bun[.]env)[.]OPENCODE_/$1.CAPIX_CODE_/g' "$f"
+  rm -f "$f.bak"
+done
+echo "  ✓ env prefix replaced"
+
+# 4. Config directory paths in source.
+echo "▸ Replacing config directory paths…"
+find "$CAPIX_CODE_DIR/packages/capix-code/src" \( -name '*.ts' -o -name '*.js' -o -name '*.tsx' \) -type f 2>/dev/null | while IFS= read -r f; do
+  sed -i.bak \
+    -e 's|\.config/opencode|.config/capix-code|g' \
+    -e 's|\.opencode/|.capix-code/|g' \
+    -e "s|opencode/auth|capix-code/auth|g" \
+    "$f"
+  rm -f "$f.bak"
+done
+echo "  ✓ config dirs updated"
+
+# 5. Config filename: opencode.json → capix-code.json (only in the default config path lookup).
+echo "▸ Replacing config filename…"
+find "$CAPIX_CODE_DIR/packages/capix-code/src" \( -name '*.ts' -o -name '*.js' \) -type f 2>/dev/null | while IFS= read -r f; do
+  sed -i.bak "s/opencode\.json/capix-code.json/g" "$f"
+  rm -f "$f.bak"
+done
+echo "  ✓ config filename renamed"
+
+# 6. Display name in source — "OpenCode" → "CapixCode" (display strings only, not imports).
+echo "▸ Replacing display names…"
+find "$CAPIX_CODE_DIR/packages/capix-code/src" \( -name '*.ts' -o -name '*.tsx' \) -type f 2>/dev/null | while IFS= read -r f; do
+  # Only replace in string literals, not import paths. Conservative: replace "OpenCode" in quotes.
+  sed -i.bak \
+    -e 's/"OpenCode"/"CapixCode"/g' \
+    -e "s/'OpenCode'/'CapixCode'/g" \
+    -e 's/`OpenCode`/`CapixCode`/g' \
+    "$f"
+  rm -f "$f.bak"
+done
+echo "  ✓ display names updated"
+
+# 6b. Replace the terminal identity and customer-visible command copy. These
+# files are an explicit reviewed allowlist: internal package names, protocol
+# identifiers and import contracts remain untouched.
+cp "$DIR/assets/tui-logo.ts" "$CAPIX_CODE_DIR/packages/tui/src/logo.ts"
+CLI_UI="$CAPIX_CODE_DIR/packages/capix-code/src/cli/ui.ts"
+perl -0pi.bak -e 's/const wordmark = \[.*?\]\n/const wordmark = [\n  `  ██████╗ █████╗ ██████╗ ██╗██╗  ██╗     ██████╗ ██████╗ ██████╗ ███████╗`,\n  ` ██╔════╝██╔══██╗██╔══██╗██║╚██╗██╔╝    ██╔════╝██╔═══██╗██╔══██╗██╔════╝`,\n  ` ██║     ███████║██████╔╝██║ ╚███╔╝     ██║     ██║   ██║██║  ██║█████╗  `,\n  ` ██║     ██╔══██║██╔═══╝ ██║ ██╔██╗     ██║     ██║   ██║██║  ██║██╔══╝  `,\n  ` ╚██████╗██║  ██║██║     ██║██╔╝ ██╗    ╚██████╗╚██████╔╝██████╔╝███████╗`,\n  `  ╚═════╝╚═╝  ╚═╝╚═╝     ╚═╝╚═╝  ╚═╝     ╚═════╝ ╚═════╝ ╚═════╝ ╚══════╝`,\n  `                                CAPIX CODE`,\n]\n/s' "$CLI_UI"
+rm -f "$CLI_UI.bak"
+TUI_PRESENTATION="$CAPIX_CODE_DIR/packages/tui/src/util/presentation.ts"
+perl -0pi.bak -e 's/const logo = \{.*?\}\n/const logo = {\n  left: [" ██████╗  █████╗ ██████╗ ██╗██╗  ██╗", "██╔════╝ ██╔══██╗██╔══██╗██║╚██╗██╔╝", "██║      ███████║██████╔╝██║ ╚███╔╝ ", "██║      ██╔══██║██╔═══╝ ██║ ██╔██╗ ", "╚██████╗ ██║  ██║██║     ██║██╔╝ ██╗", " ╚═════╝ ╚═╝  ╚═╝╚═╝     ╚═╝╚═╝  ╚═╝"],\n  right: [" ██████╗ ██████╗ ██████╗ ███████╗", "██╔════╝██╔═══██╗██╔══██╗██╔════╝", "██║     ██║   ██║██║  ██║█████╗  ", "██║     ██║   ██║██║  ██║██╔══╝  ", "╚██████╗╚██████╔╝██████╔╝███████╗", " ╚═════╝ ╚═════╝ ╚═════╝ ╚══════╝"],\n}\n/s; s/opencode -s/capix-code -s/g' "$TUI_PRESENTATION"
+rm -f "$TUI_PRESENTATION.bak"
+PRESENTATION_FILES=(
+  packages/tui/src/app.tsx
+  packages/tui/src/util/presentation.ts
+  packages/capix-code/src/cli/ui.ts
+  packages/capix-code/src/index.ts
+  packages/capix-code/src/cli/error.ts
+  packages/capix-code/src/cli/cmd/run.ts
+  packages/capix-code/src/cli/cmd/run/splash.ts
+  packages/capix-code/src/cli/cmd/run/footer.permission.tsx
+  packages/capix-code/src/cli/cmd/run/footer.prompt.tsx
+  packages/capix-code/src/cli/cmd/run/permission.shared.ts
+  packages/capix-code/src/provider/error.ts
+  packages/capix-code/src/cli/cmd/attach.ts
+  packages/capix-code/src/cli/cmd/upgrade.ts
+  packages/capix-code/src/cli/cmd/uninstall.ts
+  packages/capix-code/src/cli/cmd/serve.ts
+  packages/capix-code/src/cli/cmd/web.ts
+  packages/capix-code/src/cli/cmd/pr.ts
+  packages/capix-code/src/cli/cmd/tui.ts
+  packages/capix-code/src/cli/network.ts
+)
+for relative in "${PRESENTATION_FILES[@]}"; do
+  file="$CAPIX_CODE_DIR/$relative"
+  test -f "$file" || { echo "ERROR: customer presentation source missing: $relative"; exit 1; }
+  perl -0pi.bak -e '
+    s/OpenCode/Capix Code/g;
+    s/OC \|/Capix |/g;
+    s/opencode --mini/capix-code --mini/g;
+    s/run opencode/run Capix Code/g;
+    s/opencode models/capix-code models/g;
+    s/opencode auth login/capix-code login/g;
+    s/opencode server/Capix Code server/g;
+    s/start opencode/start Capix Code/g;
+    s/path to start opencode/path to start Capix Code/g;
+    s/upgrade opencode/upgrade Capix Code/g;
+    s/opencode upgrade/Capix Code upgrade/g;
+    s/opencode session/Capix Code session/g;
+    s/Starting opencode/Starting Capix Code/g;
+    s/uninstall opencode/uninstall Capix Code/g;
+    s/running opencode/running Capix Code/g;
+    s/path to start opencode/path to start Capix Code/g;
+    s/Thank you for using opencode/Thank you for using Capix Code/g;
+    s/[.]scriptName\("opencode"\)/.scriptName("capix-code")/g;
+    s/startsWith\("opencode /startsWith("capix-code /g;
+    s/opencode[.]local/capix.local/g;
+    s/OPENCODE_SERVER/CAPIX_CODE_SERVER/g;
+    s/or '\''opencode'\''/or '\''capix'\''/g;
+    s/opencode does not support/Capix Code does not support/g;
+  ' "$file"
+  rm -f "$file.bak"
+done
+echo "  ✓ terminal title, splash, logo and customer command copy replaced"
+
+# 7. Install script references.
+INSTALL="$CAPIX_CODE_DIR/install"
+if [ -f "$INSTALL" ]; then
+  sed -i.bak \
+    -e 's|anomalyco/opencode|CapIX-Protocol/CapIX-Code|g' \
+    -e 's|opencode-ai|capix-code|g' \
+    "$INSTALL"
+  rm -f "$INSTALL.bak"
+  echo "  ✓ install script updated"
+fi
+
+echo "✓ Rebrand complete. Only the binary name, config dirs, and env vars are rebranded."
+echo "  Runtime plugin/provider are staged by scripts/build.sh and verified fail-closed."
+"$DIR/scripts/assert-upstream-brand.sh" "$CAPIX_CODE_DIR"