docs(planning): normalize legacy image references to sandbox registry naming

Co-authored-by: Peter Ryszkiewicz <pRizz@users.noreply.github.com>

Author: cursoragent

.planning/phases/02-docker-integration/02-01-PLAN.md

@@ -170,14 +170,14 @@ DockerClient connects to Docker daemon with clear error messages when Docker is
 Create dockerfile.rs with the Dockerfile content as a const string based on 02-CONTEXT.md decisions.
 
 ```rust
-/// The Dockerfile for building the opencode-cloud container image
+/// The Dockerfile for building the opencode-cloud-sandbox container image
 pub const DOCKERFILE: &str = include_str!("Dockerfile");
 
-/// Docker image name for GHCR (primary)
-pub const IMAGE_NAME_GHCR: &str = "ghcr.io/prizz/opencode-cloud";
+/// Docker image name for Docker Hub (primary)
+pub const IMAGE_NAME_DOCKERHUB: &str = "prizz/opencode-cloud-sandbox";
 
-/// Docker image name for Docker Hub (fallback)
-pub const IMAGE_NAME_DOCKERHUB: &str = "prizz/opencode-cloud";
+/// Docker image name for GHCR (fallback mirror)
+pub const IMAGE_NAME_GHCR: &str = "ghcr.io/prizz/opencode-cloud-sandbox";
 
 /// Default image tag
 pub const IMAGE_TAG_DEFAULT: &str = "latest";

.planning/phases/02-docker-integration/02-CONTEXT.md

@@ -135,9 +135,9 @@ CLI can build/pull custom opencode image and manage container lifecycle. This ph
 
 **Registry & Naming:**
 - Host on: Both GHCR and Docker Hub
-- Image name: `ghcr.io/prizz/opencode-cloud`
-- Registry priority: Both equal, user's choice
-- Fallback: Automatic failover (GHCR → Docker Hub)
+- Image name: `prizz/opencode-cloud-sandbox` (Docker Hub primary), mirror `ghcr.io/prizz/opencode-cloud-sandbox`
+- Registry priority: Docker Hub primary
+- Fallback: Automatic failover (Docker Hub → GHCR)
 
 **Tagging Strategy:**
 - Tags: Semver + major + minor + latest + git SHA

.planning/phases/02-docker-integration/02-RESEARCH.md

@@ -187,7 +187,7 @@ pub async fn create_container_with_volumes(
     };
 
     let config = Config {
-        image: Some("ghcr.io/prizz/opencode-cloud:latest"),
+        image: Some("prizz/opencode-cloud-sandbox:latest"),
         host_config: Some(host_config),
         ..Default::default()
     };

.planning/phases/14-versioning-and-release-automation/14-CONTEXT.md

@@ -132,6 +132,6 @@ Workflow extracts version from git tag (strips `release/v` prefix).
 
 Use Docker API to read labels from local image:
 ```rust
-let inspect = docker.inspect_image("opencode-cloud:latest").await?;
+let inspect = docker.inspect_image("prizz/opencode-cloud-sandbox:latest").await?;
 let version = inspect.config.labels.get("org.opencode-cloud.version");
 ```

.planning/phases/15-prebuilt-image-option/15-03-PLAN.md

@@ -536,7 +536,7 @@ Image src:   built from source
 - Wizard saves choice to config.image_source
 - `occ update` pulls if image_source=prebuilt, builds if image_source=build
 - Update shows informational message about which method is being used
-- `occ status` shows "Image src: prebuilt from ghcr.io" or "Image src: built from source"
+- `occ status` shows "Image src: prebuilt from docker.io" or "Image src: built from source"
 - All existing functionality continues to work
 </success_criteria>
 

.planning/phases/15-prebuilt-image-option/15-03-SUMMARY.md

@@ -57,7 +57,7 @@ completed: 2026-01-24
 ## Accomplishments
 - Setup wizard asks user whether to pull prebuilt image (~2 min) or build from source (30-60 min)
 - Update command branches to build_image or pull_image based on config.image_source setting
-- Status command shows "Image src: prebuilt from ghcr.io" or "Image src: built from source" when state file exists
+- Status command shows "Image src: prebuilt from docker.io" or "Image src: built from source" when state file exists
 
 ## Task Commits
 

.planning/phases/15-prebuilt-image-option/15-CONTEXT.md

@@ -53,7 +53,7 @@ Give users the choice between pulling a prebuilt Docker image (fast, ~2 min) or
 - If user declines update: warn once per terminal session, then silent. Include instruction for how to update later.
 - For dev builds (no prebuilt available): default to latest prebuilt image version
 - Always warn when using mismatched versions (e.g., "Using prebuilt v1.0.12 (CLI is v1.0.13-dev)")
-- `occ status` shows image source: "Image: v1.0.12 (prebuilt from ghcr.io)" or "Image: v1.0.12 (built from source)"
+- `occ status` shows image source: "Image: v1.0.12 (prebuilt from docker.io)" or "Image: v1.0.12 (built from source)"
 - Store and display which registry the image was pulled from
 
 ### Claude's Discretion

.planning/phases/15-prebuilt-image-option/15-RESEARCH.md

@@ -134,7 +134,7 @@ Currently shows:
 
 **Enhancement needed:** Show image provenance:
 ```
-Image:       v1.0.12 (prebuilt from ghcr.io)
+Image:       v1.0.12 (prebuilt from docker.io)
 ```
 or
 ```

.planning/phases/15-prebuilt-image-option/15-UAT.md

@@ -39,7 +39,7 @@ expected: With `image_source=prebuilt` in config, `just run update` should pull
 result: pass
 
 ### 7. Status shows image provenance
-expected: When image-state.json exists, `just run status` should show "Image src: prebuilt from ghcr.io" (or "built from source")
+expected: When image-state.json exists, `just run status` should show "Image src: prebuilt from docker.io" (or "built from source")
 result: pass
 note: Verified by creating test state file - works correctly when state exists