oh-my-opencode-unguarded 3.9.4 → 3.10.1

package/dist/cli/index.js

@@ -7109,11 +7109,14 @@ var init_constants = __esm(() => {
 });
 
 // src/features/hook-message-injector/injector.ts
+import { randomBytes } from "crypto";
+var processPrefix;
 var init_injector = __esm(() => {
   init_constants();
   init_logger();
   init_opencode_storage_detection();
   init_shared();
+  processPrefix = randomBytes(4).toString("hex");
 });
 
 // src/features/hook-message-injector/index.ts
@@ -8530,6 +8533,7 @@ var require_src = __commonJS((exports, module) => {
 });
 
 // src/hooks/auto-update-checker/constants.ts
+import * as fs4 from "fs";
 import * as path4 from "path";
 import * as os3 from "os";
 function getCacheDir2() {
@@ -8538,21 +8542,37 @@ function getCacheDir2() {
   }
   return path4.join(os3.homedir(), ".cache", "opencode");
 }
+function resolveHostCacheDir() {
+  if (process.platform === "win32") {
+    const dotCacheDir = path4.join(os3.homedir(), ".cache", "opencode");
+    if (fs4.existsSync(path4.join(dotCacheDir, "node_modules"))) {
+      return dotCacheDir;
+    }
+    const localAppDataDir = path4.join(process.env.LOCALAPPDATA ?? os3.homedir(), "opencode");
+    if (fs4.existsSync(path4.join(localAppDataDir, "node_modules"))) {
+      return localAppDataDir;
+    }
+    return dotCacheDir;
+  }
+  return path4.join(os3.homedir(), ".cache", "opencode");
+}
 function getWindowsAppdataDir() {
   if (process.platform !== "win32")
     return null;
   return process.env.APPDATA ?? path4.join(os3.homedir(), "AppData", "Roaming");
 }
-var PACKAGE_NAME3 = "oh-my-opencode-unguarded", NPM_REGISTRY_URL, NPM_FETCH_TIMEOUT = 5000, CACHE_DIR, VERSION_FILE, USER_CONFIG_DIR, USER_OPENCODE_CONFIG, USER_OPENCODE_CONFIG_JSONC, INSTALLED_PACKAGE_JSON;
+var PACKAGE_NAME3 = "oh-my-opencode-unguarded", NPM_REGISTRY_URL, NPM_FETCH_TIMEOUT = 5000, CACHE_DIR, VERSION_FILE, HOST_CACHE_DIR, USER_CONFIG_DIR, USER_OPENCODE_CONFIG, USER_OPENCODE_CONFIG_JSONC, INSTALLED_PACKAGE_JSON, HOST_INSTALLED_PACKAGE_JSON;
 var init_constants3 = __esm(() => {
   init_shared();
   NPM_REGISTRY_URL = `https://registry.npmjs.org/-/package/${PACKAGE_NAME3}/dist-tags`;
   CACHE_DIR = getCacheDir2();
   VERSION_FILE = path4.join(CACHE_DIR, "version");
+  HOST_CACHE_DIR = resolveHostCacheDir();
   USER_CONFIG_DIR = getOpenCodeConfigDir({ binary: "opencode" });
   USER_OPENCODE_CONFIG = path4.join(USER_CONFIG_DIR, "opencode.json");
   USER_OPENCODE_CONFIG_JSONC = path4.join(USER_CONFIG_DIR, "opencode.jsonc");
   INSTALLED_PACKAGE_JSON = path4.join(USER_CONFIG_DIR, "node_modules", PACKAGE_NAME3, "package.json");
+  HOST_INSTALLED_PACKAGE_JSON = path4.join(HOST_CACHE_DIR, "node_modules", PACKAGE_NAME3, "package.json");
 });
 
 // src/hooks/auto-update-checker/checker/config-paths.ts
@@ -8592,7 +8612,7 @@ function stripJsonComments(json3) {
 }
 
 // src/hooks/auto-update-checker/checker/local-dev-path.ts
-import * as fs4 from "fs";
+import * as fs5 from "fs";
 import { fileURLToPath } from "url";
 function isLocalDevMode(directory) {
   return getLocalDevPath(directory) !== null;
@@ -8600,9 +8620,9 @@ function isLocalDevMode(directory) {
 function getLocalDevPath(directory) {
   for (const configPath of getConfigPaths(directory)) {
     try {
-      if (!fs4.existsSync(configPath))
+      if (!fs5.existsSync(configPath))
         continue;
-      const content = fs4.readFileSync(configPath, "utf-8");
+      const content = fs5.readFileSync(configPath, "utf-8");
       const config2 = JSON.parse(stripJsonComments(content));
       const plugins = config2.plugin ?? [];
       for (const entry of plugins) {
@@ -8626,17 +8646,17 @@ var init_local_dev_path = __esm(() => {
 });
 
 // src/hooks/auto-update-checker/checker/package-json-locator.ts
-import * as fs5 from "fs";
+import * as fs6 from "fs";
 import * as path6 from "path";
 function findPackageJsonUp(startPath) {
   try {
-    const stat = fs5.statSync(startPath);
+    const stat = fs6.statSync(startPath);
     let dir = stat.isDirectory() ? startPath : path6.dirname(startPath);
     for (let i2 = 0;i2 < 10; i2++) {
       const pkgPath = path6.join(dir, "package.json");
-      if (fs5.existsSync(pkgPath)) {
+      if (fs6.existsSync(pkgPath)) {
         try {
-          const content = fs5.readFileSync(pkgPath, "utf-8");
+          const content = fs6.readFileSync(pkgPath, "utf-8");
           const pkg = JSON.parse(content);
           if (pkg.name === PACKAGE_NAME3)
             return pkgPath;
@@ -8655,7 +8675,7 @@ var init_package_json_locator = __esm(() => {
 });
 
 // src/hooks/auto-update-checker/checker/local-dev-version.ts
-import * as fs6 from "fs";
+import * as fs7 from "fs";
 function getLocalDevVersion(directory) {
   const localPath = getLocalDevPath(directory);
   if (!localPath)
@@ -8664,7 +8684,7 @@ function getLocalDevVersion(directory) {
     const pkgPath = findPackageJsonUp(localPath);
     if (!pkgPath)
       return null;
-    const content = fs6.readFileSync(pkgPath, "utf-8");
+    const content = fs7.readFileSync(pkgPath, "utf-8");
     const pkg = JSON.parse(content);
     return pkg.version ?? null;
   } catch {
@@ -8677,16 +8697,16 @@ var init_local_dev_version = __esm(() => {
 });
 
 // src/hooks/auto-update-checker/checker/plugin-entry.ts
-import * as fs7 from "fs";
+import * as fs8 from "fs";
 function isExplicitVersionPin(pinnedVersion) {
   return /^\d+\.\d+\.\d+/.test(pinnedVersion);
 }
 function findPluginEntry(directory) {
   for (const configPath of getConfigPaths(directory)) {
     try {
-      if (!fs7.existsSync(configPath))
+      if (!fs8.existsSync(configPath))
         continue;
-      const content = fs7.readFileSync(configPath, "utf-8");
+      const content = fs8.readFileSync(configPath, "utf-8");
       const config2 = JSON.parse(stripJsonComments(content));
       const plugins = config2.plugin ?? [];
       for (const entry of plugins) {
@@ -8711,23 +8731,32 @@ var init_plugin_entry = __esm(() => {
 });
 
 // src/hooks/auto-update-checker/checker/cached-version.ts
-import * as fs8 from "fs";
+import * as fs9 from "fs";
 import * as path7 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-function getCachedVersion() {
+function readVersionFromPackageJson(pkgJsonPath) {
   try {
-    if (fs8.existsSync(INSTALLED_PACKAGE_JSON)) {
-      const content = fs8.readFileSync(INSTALLED_PACKAGE_JSON, "utf-8");
+    if (fs9.existsSync(pkgJsonPath)) {
+      const content = fs9.readFileSync(pkgJsonPath, "utf-8");
       const pkg = JSON.parse(content);
       if (pkg.version)
         return pkg.version;
     }
   } catch {}
+  return null;
+}
+function getCachedVersion() {
+  const hostVersion = readVersionFromPackageJson(HOST_INSTALLED_PACKAGE_JSON);
+  if (hostVersion)
+    return hostVersion;
+  const configVersion = readVersionFromPackageJson(INSTALLED_PACKAGE_JSON);
+  if (configVersion)
+    return configVersion;
   try {
     const currentDir = path7.dirname(fileURLToPath2(import.meta.url));
     const pkgPath = findPackageJsonUp(currentDir);
     if (pkgPath) {
-      const content = fs8.readFileSync(pkgPath, "utf-8");
+      const content = fs9.readFileSync(pkgPath, "utf-8");
       const pkg = JSON.parse(content);
       if (pkg.version)
         return pkg.version;
@@ -8736,10 +8765,10 @@ function getCachedVersion() {
     log("[auto-update-checker] Failed to resolve version from current directory:", err);
   }
   try {
-    const execDir = path7.dirname(fs8.realpathSync(process.execPath));
+    const execDir = path7.dirname(fs9.realpathSync(process.execPath));
     const pkgPath = findPackageJsonUp(execDir);
     if (pkgPath) {
-      const content = fs8.readFileSync(pkgPath, "utf-8");
+      const content = fs9.readFileSync(pkgPath, "utf-8");
       const pkg = JSON.parse(content);
       if (pkg.version)
         return pkg.version;
@@ -8756,10 +8785,10 @@ var init_cached_version = __esm(() => {
 });
 
 // src/hooks/auto-update-checker/checker/pinned-version-updater.ts
-import * as fs9 from "fs";
+import * as fs10 from "fs";
 function replacePluginEntry(configPath, oldEntry, newEntry) {
   try {
-    const content = fs9.readFileSync(configPath, "utf-8");
+    const content = fs10.readFileSync(configPath, "utf-8");
     const pluginMatch = content.match(/"plugin"\s*:\s*\[/);
     if (!pluginMatch || pluginMatch.index === undefined) {
       log(`[auto-update-checker] No "plugin" array found in ${configPath}`);
@@ -8790,7 +8819,7 @@ function replacePluginEntry(configPath, oldEntry, newEntry) {
       log(`[auto-update-checker] No changes made to ${configPath}`);
       return false;
     }
-    fs9.writeFileSync(configPath, updatedContent, "utf-8");
+    fs10.writeFileSync(configPath, updatedContent, "utf-8");
     log(`[auto-update-checker] Updated ${configPath}: ${oldEntry} \u2192 ${newEntry}`);
     return true;
   } catch (err) {
@@ -8937,17 +8966,17 @@ var init_checker = __esm(() => {
 });
 
 // src/hooks/auto-update-checker/cache.ts
-import * as fs10 from "fs";
+import * as fs11 from "fs";
 import * as path8 from "path";
 function stripTrailingCommas(json3) {
   return json3.replace(/,(\s*[}\]])/g, "$1");
 }
-function removeFromBunLock(packageName) {
-  const lockPath = path8.join(USER_CONFIG_DIR, "bun.lock");
-  if (!fs10.existsSync(lockPath))
+function removeFromBunLock(dir, packageName) {
+  const lockPath = path8.join(dir, "bun.lock");
+  if (!fs11.existsSync(lockPath))
     return false;
   try {
-    const content = fs10.readFileSync(lockPath, "utf-8");
+    const content = fs11.readFileSync(lockPath, "utf-8");
     const lock = JSON.parse(stripTrailingCommas(content));
     let modified = false;
     if (lock.workspaces?.[""]?.dependencies?.[packageName]) {
@@ -8959,38 +8988,55 @@ function removeFromBunLock(packageName) {
       modified = true;
     }
     if (modified) {
-      fs10.writeFileSync(lockPath, JSON.stringify(lock, null, 2));
-      log(`[auto-update-checker] Removed from bun.lock: ${packageName}`);
+      fs11.writeFileSync(lockPath, JSON.stringify(lock, null, 2));
+      log(`[auto-update-checker] Removed from bun.lock in ${dir}: ${packageName}`);
     }
     return modified;
   } catch {
     return false;
   }
 }
+function removeNodeModulesDir(baseDir, packageName) {
+  const pkgDir = path8.join(baseDir, "node_modules", packageName);
+  if (!fs11.existsSync(pkgDir))
+    return false;
+  fs11.rmSync(pkgDir, { recursive: true, force: true });
+  log(`[auto-update-checker] Package removed: ${pkgDir}`);
+  return true;
+}
+function removeFromPackageJson(baseDir, packageName) {
+  const pkgJsonPath = path8.join(baseDir, "package.json");
+  if (!fs11.existsSync(pkgJsonPath))
+    return false;
+  try {
+    const content = fs11.readFileSync(pkgJsonPath, "utf-8");
+    const pkgJson = JSON.parse(content);
+    if (pkgJson.dependencies?.[packageName]) {
+      delete pkgJson.dependencies[packageName];
+      fs11.writeFileSync(pkgJsonPath, JSON.stringify(pkgJson, null, 2));
+      log(`[auto-update-checker] Dependency removed from package.json in ${baseDir}: ${packageName}`);
+      return true;
+    }
+  } catch {}
+  return false;
+}
 function invalidatePackage(packageName = PACKAGE_NAME3) {
   try {
-    const pkgDir = path8.join(USER_CONFIG_DIR, "node_modules", packageName);
-    const pkgJsonPath = path8.join(USER_CONFIG_DIR, "package.json");
-    let packageRemoved = false;
-    let dependencyRemoved = false;
-    let lockRemoved = false;
-    if (fs10.existsSync(pkgDir)) {
-      fs10.rmSync(pkgDir, { recursive: true, force: true });
-      log(`[auto-update-checker] Package removed: ${pkgDir}`);
-      packageRemoved = true;
-    }
-    if (fs10.existsSync(pkgJsonPath)) {
-      const content = fs10.readFileSync(pkgJsonPath, "utf-8");
-      const pkgJson = JSON.parse(content);
-      if (pkgJson.dependencies?.[packageName]) {
-        delete pkgJson.dependencies[packageName];
-        fs10.writeFileSync(pkgJsonPath, JSON.stringify(pkgJson, null, 2));
-        log(`[auto-update-checker] Dependency removed from package.json: ${packageName}`);
-        dependencyRemoved = true;
-      }
-    }
-    lockRemoved = removeFromBunLock(packageName);
-    if (!packageRemoved && !dependencyRemoved && !lockRemoved) {
+    let invalidated = false;
+    const hostRemoved = removeNodeModulesDir(HOST_CACHE_DIR, packageName);
+    const hostPkgJsonRemoved = removeFromPackageJson(HOST_CACHE_DIR, packageName);
+    const hostLockRemoved = removeFromBunLock(HOST_CACHE_DIR, packageName);
+    if (hostRemoved || hostPkgJsonRemoved || hostLockRemoved) {
+      invalidated = true;
+    }
+    if (HOST_CACHE_DIR !== USER_CONFIG_DIR) {
+      const configRemoved = removeNodeModulesDir(USER_CONFIG_DIR, packageName);
+      const configLockRemoved = removeFromBunLock(USER_CONFIG_DIR, packageName);
+      if (configRemoved || configLockRemoved) {
+        invalidated = true;
+      }
+    }
+    if (!invalidated) {
       log(`[auto-update-checker] Package not found, nothing to invalidate: ${packageName}`);
       return false;
     }
@@ -9329,7 +9375,7 @@ var {
 // package.json
 var package_default = {
   name: "oh-my-opencode-unguarded",
-  version: "3.9.4",
+  version: "3.10.1",
   description: "The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -9379,10 +9425,6 @@ var package_default = {
     url: "https://github.com/D4ch1au/evil-oh-my-opencode/issues"
   },
   homepage: "https://github.com/D4ch1au/evil-oh-my-opencode#readme",
-  publishConfig: {
-    registry: "https://registry.npmjs.org",
-    access: "public"
-  },
   dependencies: {
     "@ast-grep/cli": "^0.40.0",
     "@ast-grep/napi": "^0.40.0",
@@ -9408,23 +9450,27 @@ var package_default = {
     typescript: "^5.7.3"
   },
   optionalDependencies: {
-    "oh-my-opencode-darwin-arm64": "3.9.0",
-    "oh-my-opencode-darwin-x64": "3.9.0",
-    "oh-my-opencode-darwin-x64-baseline": "3.9.0",
-    "oh-my-opencode-linux-arm64": "3.9.0",
-    "oh-my-opencode-linux-arm64-musl": "3.9.0",
-    "oh-my-opencode-linux-x64": "3.9.0",
-    "oh-my-opencode-linux-x64-baseline": "3.9.0",
-    "oh-my-opencode-linux-x64-musl": "3.9.0",
-    "oh-my-opencode-linux-x64-musl-baseline": "3.9.0",
-    "oh-my-opencode-windows-x64": "3.9.0",
-    "oh-my-opencode-windows-x64-baseline": "3.9.0"
+    "oh-my-opencode-darwin-arm64": "3.10.0",
+    "oh-my-opencode-darwin-x64": "3.10.0",
+    "oh-my-opencode-darwin-x64-baseline": "3.10.0",
+    "oh-my-opencode-linux-arm64": "3.10.0",
+    "oh-my-opencode-linux-arm64-musl": "3.10.0",
+    "oh-my-opencode-linux-x64": "3.10.0",
+    "oh-my-opencode-linux-x64-baseline": "3.10.0",
+    "oh-my-opencode-linux-x64-musl": "3.10.0",
+    "oh-my-opencode-linux-x64-musl-baseline": "3.10.0",
+    "oh-my-opencode-windows-x64": "3.10.0",
+    "oh-my-opencode-windows-x64-baseline": "3.10.0"
   },
   trustedDependencies: [
     "@ast-grep/cli",
     "@ast-grep/napi",
     "@code-yeongyu/comment-checker"
-  ]
+  ],
+  publishConfig: {
+    registry: "https://registry.npmjs.org",
+    access: "public"
+  }
 };
 
 // src/cli/cli-installer.ts
@@ -26598,11 +26644,11 @@ var PACKAGE_NAME4 = "oh-my-opencode-unguarded";
 var OPENCODE_BINARIES2 = ["opencode", "opencode-desktop"];
 
 // src/cli/doctor/checks/system.ts
-import { existsSync as existsSync22, readFileSync as readFileSync23 } from "fs";
+import { existsSync as existsSync23, readFileSync as readFileSync23 } from "fs";
 
 // src/cli/doctor/checks/system-binary.ts
 init_spawn_with_windows_hide();
-import { existsSync as existsSync19 } from "fs";
+import { existsSync as existsSync20 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join16 } from "path";
 function getDesktopAppPaths(platform) {
@@ -26642,7 +26688,7 @@ function buildVersionCommand(binaryPath, platform) {
   }
   return [binaryPath, "--version"];
 }
-function findDesktopBinary(platform = process.platform, checkExists = existsSync19) {
+function findDesktopBinary(platform = process.platform, checkExists = existsSync20) {
   for (const desktopPath of getDesktopAppPaths(platform)) {
     if (checkExists(desktopPath)) {
       return { binary: "opencode", path: desktopPath };
@@ -26689,13 +26735,13 @@ function compareVersions(current, minimum) {
 }
 
 // src/cli/doctor/checks/system-plugin.ts
-import { existsSync as existsSync20, readFileSync as readFileSync21 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync21 } from "fs";
 init_shared();
 function detectConfigPath() {
   const paths = getOpenCodeConfigPaths({ binary: "opencode", version: null });
-  if (existsSync20(paths.configJsonc))
+  if (existsSync21(paths.configJsonc))
     return paths.configJsonc;
-  if (existsSync20(paths.configJson))
+  if (existsSync21(paths.configJson))
     return paths.configJson;
   return null;
 }
@@ -26768,7 +26814,7 @@ function getPluginInfo() {
 // src/cli/doctor/checks/system-loaded-version.ts
 init_checker();
 init_auto_update_checker();
-import { existsSync as existsSync21, readFileSync as readFileSync22 } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync22 } from "fs";
 import { homedir as homedir6 } from "os";
 import { join as join17 } from "path";
 init_shared();
@@ -26785,12 +26831,12 @@ function resolveOpenCodeCacheDir() {
     return join17(xdgCacheHome, "opencode");
   const fromShared = getOpenCodeCacheDir();
   const platformDefault = join17(getPlatformDefaultCacheDir(), "opencode");
-  if (existsSync21(fromShared) || !existsSync21(platformDefault))
+  if (existsSync22(fromShared) || !existsSync22(platformDefault))
     return fromShared;
   return platformDefault;
 }
 function readPackageJson(filePath) {
-  if (!existsSync21(filePath))
+  if (!existsSync22(filePath))
     return null;
   try {
     const content = readFileSync22(filePath, "utf-8");
@@ -26831,7 +26877,7 @@ init_shared();
 function isConfigValid(configPath) {
   if (!configPath)
     return true;
-  if (!existsSync22(configPath))
+  if (!existsSync23(configPath))
     return false;
   try {
     parseJsonc(readFileSync23(configPath, "utf-8"));
@@ -26942,7 +26988,7 @@ init_shared();
 
 // src/cli/doctor/checks/model-resolution-cache.ts
 init_shared();
-import { existsSync as existsSync23, readFileSync as readFileSync24 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync24 } from "fs";
 import { homedir as homedir7 } from "os";
 import { join as join18 } from "path";
 function getOpenCodeCacheDir2() {
@@ -26953,7 +26999,7 @@ function getOpenCodeCacheDir2() {
 }
 function loadAvailableModelsFromCache() {
   const cacheFile = join18(getOpenCodeCacheDir2(), "models.json");
-  if (!existsSync23(cacheFile)) {
+  if (!existsSync24(cacheFile)) {
     return { providers: [], modelCount: 0, cacheExists: false };
   }
   try {
@@ -27279,7 +27325,7 @@ async function checkConfig() {
 
 // src/cli/doctor/checks/dependencies.ts
 init_spawn_with_windows_hide();
-import { existsSync as existsSync24 } from "fs";
+import { existsSync as existsSync25 } from "fs";
 import { createRequire } from "module";
 import { dirname as dirname6, join as join22 } from "path";
 async function checkBinaryExists(binary2) {
@@ -27337,7 +27383,7 @@ async function checkAstGrepNapi() {
       path: null
     };
   } catch {
-    const { existsSync: existsSync25 } = await import("fs");
+    const { existsSync: existsSync26 } = await import("fs");
     const { join: join23 } = await import("path");
     const { homedir: homedir8 } = await import("os");
     const pathsToCheck = [
@@ -27345,7 +27391,7 @@ async function checkAstGrepNapi() {
       join23(process.cwd(), "node_modules", "@ast-grep", "napi")
     ];
     for (const napiPath of pathsToCheck) {
-      if (existsSync25(napiPath)) {
+      if (existsSync26(napiPath)) {
         return {
           name: "AST-Grep NAPI",
           required: false,
@@ -27371,7 +27417,7 @@ function findCommentCheckerPackageBinary() {
     const require2 = createRequire(import.meta.url);
     const pkgPath = require2.resolve("@code-yeongyu/comment-checker/package.json");
     const binaryPath = join22(dirname6(pkgPath), "bin", binaryName);
-    if (existsSync24(binaryPath))
+    if (existsSync25(binaryPath))
       return binaryPath;
   } catch {}
   return null;
@@ -27490,14 +27536,14 @@ init_jsonc_parser();
 
 // src/tools/lsp/server-installation.ts
 init_shared();
-import { existsSync as existsSync25 } from "fs";
+import { existsSync as existsSync26 } from "fs";
 import { join as join23 } from "path";
 function isServerInstalled(command) {
   if (command.length === 0)
     return false;
   const cmd = command[0];
   if (cmd.includes("/") || cmd.includes("\\")) {
-    if (existsSync25(cmd))
+    if (existsSync26(cmd))
       return true;
   }
   const isWindows = process.platform === "win32";
@@ -27519,7 +27565,7 @@ function isServerInstalled(command) {
   const paths = pathEnv.split(pathSeparator);
   for (const p2 of paths) {
     for (const suffix of exts) {
-      if (existsSync25(join23(p2, cmd + suffix))) {
+      if (existsSync26(join23(p2, cmd + suffix))) {
         return true;
       }
     }
@@ -27535,7 +27581,7 @@ function isServerInstalled(command) {
   ];
   for (const base of additionalBases) {
     for (const suffix of exts) {
-      if (existsSync25(join23(base, cmd + suffix))) {
+      if (existsSync26(join23(base, cmd + suffix))) {
         return true;
       }
     }
@@ -27569,7 +27615,7 @@ function getLspServerStats(servers) {
 
 // src/cli/doctor/checks/tools-mcp.ts
 init_shared();
-import { existsSync as existsSync26, readFileSync as readFileSync27 } from "fs";
+import { existsSync as existsSync27, readFileSync as readFileSync27 } from "fs";
 import { homedir as homedir8 } from "os";
 import { join as join24 } from "path";
 var BUILTIN_MCP_SERVERS = ["context7", "grep_app"];
@@ -27583,7 +27629,7 @@ function getMcpConfigPaths() {
 function loadUserMcpConfig() {
   const servers = {};
   for (const configPath of getMcpConfigPaths()) {
-    if (!existsSync26(configPath))
+    if (!existsSync27(configPath))
       continue;
     try {
       const content = readFileSync27(configPath, "utf-8");
@@ -27988,7 +28034,7 @@ async function doctor(options = { mode: "default" }) {
 
 // src/features/mcp-oauth/storage.ts
 init_shared();
-import { chmodSync, existsSync as existsSync27, mkdirSync as mkdirSync6, readFileSync as readFileSync28, unlinkSync as unlinkSync2, writeFileSync as writeFileSync12 } from "fs";
+import { chmodSync, existsSync as existsSync28, mkdirSync as mkdirSync6, readFileSync as readFileSync28, unlinkSync as unlinkSync2, writeFileSync as writeFileSync12 } from "fs";
 import { dirname as dirname7, join as join25 } from "path";
 var STORAGE_FILE_NAME = "mcp-oauth.json";
 function getMcpOauthStoragePath() {
@@ -28029,7 +28075,7 @@ function buildKey(serverHost, resource) {
 }
 function readStore() {
   const filePath = getMcpOauthStoragePath();
-  if (!existsSync27(filePath)) {
+  if (!existsSync28(filePath)) {
     return null;
   }
   try {
@@ -28043,7 +28089,7 @@ function writeStore(store2) {
   const filePath = getMcpOauthStoragePath();
   try {
     const dir = dirname7(filePath);
-    if (!existsSync27(dir)) {
+    if (!existsSync28(dir)) {
       mkdirSync6(dir, { recursive: true });
     }
     writeFileSync12(filePath, JSON.stringify(store2, null, 2), { encoding: "utf-8", mode: 384 });
@@ -28078,7 +28124,7 @@ function deleteToken(serverHost, resource) {
   if (Object.keys(store2).length === 0) {
     try {
       const filePath = getMcpOauthStoragePath();
-      if (existsSync27(filePath)) {
+      if (existsSync28(filePath)) {
         unlinkSync2(filePath);
       }
       return true;
@@ -28259,10 +28305,10 @@ async function findAvailablePort2(startPort = DEFAULT_PORT) {
 
 // src/features/mcp-oauth/oauth-authorization-flow.ts
 import { spawn as spawn2 } from "child_process";
-import { createHash, randomBytes } from "crypto";
+import { createHash, randomBytes as randomBytes2 } from "crypto";
 import { createServer } from "http";
 function generateCodeVerifier() {
-  return randomBytes(32).toString("base64url");
+  return randomBytes2(32).toString("base64url");
 }
 function generateCodeChallenge(verifier) {
   return createHash("sha256").update(verifier).digest("base64url");
@@ -28347,7 +28393,7 @@ function openBrowser(url2) {
 async function runAuthorizationCodeRedirect(options) {
   const verifier = generateCodeVerifier();
   const challenge = generateCodeChallenge(verifier);
-  const state = randomBytes(16).toString("hex");
+  const state = randomBytes2(16).toString("hex");
   const authorizationUrl = buildAuthorizationUrl(options.authorizationEndpoint, {
     clientId: options.clientId,
     redirectUri: options.redirectUri,

package/dist/hooks/auto-update-checker/constants.d.ts

@@ -3,8 +3,10 @@ export declare const NPM_REGISTRY_URL = "https://registry.npmjs.org/-/package/oh
 export declare const NPM_FETCH_TIMEOUT = 5000;
 export declare const CACHE_DIR: string;
 export declare const VERSION_FILE: string;
+export declare const HOST_CACHE_DIR: string;
 export declare function getWindowsAppdataDir(): string | null;
 export declare const USER_CONFIG_DIR: string;
 export declare const USER_OPENCODE_CONFIG: string;
 export declare const USER_OPENCODE_CONFIG_JSONC: string;
 export declare const INSTALLED_PACKAGE_JSON: string;
+export declare const HOST_INSTALLED_PACKAGE_JSON: string;