Rename Docker image: control-plane → agentlockd (clearer artifact name; parallels agentlock CLI)

Author: knhn1004

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -43,7 +43,7 @@ body:
     id: control-plane-version
     attributes:
       label: control-plane image tag
-      description: e.g. `ghcr.io/openagentlock/control-plane:0.1.0` or `:latest`
+      description: e.g. `ghcr.io/openagentlock/agentlockd:0.1.0` or `:latest`
     validations: { required: true }
 
   - type: dropdown

.github/workflows/docker-publish.yml

@@ -16,7 +16,7 @@ concurrency:
 
 env:
   REGISTRY: ghcr.io
-  IMAGE_NAME: ${{ github.repository_owner }}/control-plane
+  IMAGE_NAME: ${{ github.repository_owner }}/agentlockd
 
 jobs:
   build-and-push:
@@ -52,8 +52,8 @@ jobs:
             type=raw,value=latest,enable={{is_default_branch}}
             type=sha,prefix=sha-,format=short
           labels: |
-            org.opencontainers.image.title=OpenAgentLock control-plane
-            org.opencontainers.image.description=Local HTTP service for OpenAgentLock — policy evaluation, install plan/apply, ledger appends.
+            org.opencontainers.image.title=agentlockd
+            org.opencontainers.image.description=OpenAgentLock daemon — local HTTP service for policy evaluation, install plan/apply, and Merkle-ledger appends.
             org.opencontainers.image.licenses=FSL-1.1-Apache-2.0
             org.opencontainers.image.source=https://github.com/${{ github.repository }}
             org.opencontainers.image.url=https://openagentlock.github.io/openagentlock

README.md

@@ -7,7 +7,7 @@
 [![CI](https://img.shields.io/github/actions/workflow/status/openagentlock/openagentlock/ci.yml?branch=main&label=ci&style=flat-square)](https://github.com/openagentlock/openagentlock/actions/workflows/ci.yml)
 [![docker-publish](https://img.shields.io/github/actions/workflow/status/openagentlock/openagentlock/docker-publish.yml?branch=main&label=docker&style=flat-square)](https://github.com/openagentlock/openagentlock/actions/workflows/docker-publish.yml)
 [![npm](https://img.shields.io/npm/v/%40openagentlock%2Fcli?style=flat-square&label=%40openagentlock%2Fcli)](https://www.npmjs.com/package/@openagentlock/cli)
-[![ghcr](https://img.shields.io/badge/ghcr.io-control--plane-black?style=flat-square&logo=docker&logoColor=white)](https://github.com/openagentlock/openagentlock/pkgs/container/control-plane)
+[![ghcr](https://img.shields.io/badge/ghcr.io-agentlockd-black?style=flat-square&logo=docker&logoColor=white)](https://github.com/openagentlock/openagentlock/pkgs/container/agentlockd)
 [![license](https://img.shields.io/badge/license-FSL--1.1--Apache--2.0-black?style=flat-square)](LICENSE)
 [![docs](https://img.shields.io/badge/docs-openagentlock.github.io/openagentlock-black?style=flat-square)](https://openagentlock.github.io/openagentlock/)
 [![stars](https://img.shields.io/github/stars/openagentlock/openagentlock?style=flat-square)](https://github.com/openagentlock/openagentlock/stargazers)
@@ -104,7 +104,7 @@ See [Policies and the five gates](https://openagentlock.github.io/openagentlock/
 
 ```
 cli/                        TypeScript + Bun + OpenTUI                — @openagentlock/cli
-control-plane/              Go HTTP service in Docker                 — ghcr.io/openagentlock/control-plane
+control-plane/              Go HTTP service in Docker                 — ghcr.io/openagentlock/agentlockd
   api/openapi.yaml          source-of-truth API contract
   Dockerfile, docker-compose.yml
   dashboard-ui/             Vite SPA embedded into the Go binary

SECURITY.md

@@ -19,7 +19,7 @@ In scope:
 - The CLI (`cli/`)
 - The control plane (`control-plane/`)
 - The ledger crate (`ledger/`)
-- The published `ghcr.io/openagentlock/control-plane` Docker image
+- The published `ghcr.io/openagentlock/agentlockd` Docker image
 - The published `@openagentlock/cli` npm package
 
 Out of scope:

cli/README.md

@@ -11,8 +11,8 @@ npm i -g @openagentlock/cli
 The CLI talks to a local control plane (Go service in Docker, port 7878). Pull and start the control-plane image:
 
 ```bash
-docker pull ghcr.io/openagentlock/control-plane:latest
-docker run -d --name agentlock -p 127.0.0.1:7878:7878 ghcr.io/openagentlock/control-plane:latest
+docker pull ghcr.io/openagentlock/agentlockd:latest
+docker run -d --name agentlock -p 127.0.0.1:7878:7878 ghcr.io/openagentlock/agentlockd:latest
 ```
 
 Then use the CLI:

control-plane/README.md

@@ -1,16 +1,16 @@
 # control-plane
 
-OpenAgentLock control plane. Local HTTP service that evaluates policy, drives the install/uninstall plan-apply flow, and appends every decision to the Merkle ledger. Listens on `127.0.0.1:7878`. Go module path: `github.com/openagentlock/openagentlock/control-plane`.
+OpenAgentLock daemon (agentlockd). Local HTTP service that evaluates policy, drives the install/uninstall plan-apply flow, and appends every decision to the Merkle ledger. Listens on `127.0.0.1:7878`. Go module path: `github.com/openagentlock/openagentlock/control-plane`.
 
 ## Run with Docker
 
 ```bash
-docker pull ghcr.io/openagentlock/control-plane:latest
+docker pull ghcr.io/openagentlock/agentlockd:latest
 docker run -d --name agentlock \
   -p 127.0.0.1:7878:7878 \
   -p 127.0.0.1:7879:7879 \
   -v "$HOME/.agentlock:/var/lib/agentlock" \
-  ghcr.io/openagentlock/control-plane:latest
+  ghcr.io/openagentlock/agentlockd:latest
 ```
 
 Or via the published `docker-compose.yml`:

control-plane/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   control-plane:
     build: .
-    image: openagentlock-control-plane:dev
+    image: agentlockd:dev
     ports:
       - "127.0.0.1:7878:7878"
     environment:

docker-compose.yml

@@ -1,4 +1,4 @@
-# OpenAgentLock control plane — drop-in compose file for end users.
+# OpenAgentLock daemon (agentlockd) — drop-in compose file for end users.
 #
 # Pulls the published image from GitHub Container Registry. No build step
 # required.
@@ -13,7 +13,7 @@
 
 services:
   control-plane:
-    image: ghcr.io/openagentlock/control-plane:latest
+    image: ghcr.io/openagentlock/agentlockd:latest
     container_name: agentlock
     restart: unless-stopped
     ports:

docs/guide/auth.md

@@ -31,7 +31,7 @@ auth:
   mode: oidc
   oidc:
     issuer: https://accounts.google.com
-    audience: openagentlock-control-plane
+    audience: agentlockd
     jwks_uri: https://www.googleapis.com/oauth2/v3/certs
     require_email_domain: yourcompany.com
 ```

docs/guide/getting-started.md

@@ -20,12 +20,12 @@ The control plane is a small Go HTTP service that lives in a Docker container. I
 === "docker run"
 
     ```bash
-    docker pull ghcr.io/openagentlock/control-plane:latest
+    docker pull ghcr.io/openagentlock/agentlockd:latest
     docker run -d --name agentlock \
       -p 127.0.0.1:7878:7878 \
       -p 127.0.0.1:7879:7879 \
       -v "$HOME/.agentlock:/var/lib/agentlock" \
-      ghcr.io/openagentlock/control-plane:latest
+      ghcr.io/openagentlock/agentlockd:latest
     ```
 
 The service binds to `127.0.0.1:7878` (CLI / hook traffic) and `127.0.0.1:7879` (local web dashboard). Neither port should ever be exposed to a non-loopback interface.