oh-my-opencode 5.1.48 → 5.1.54

package/packages/omo-codex/plugin/shared/package.json

@@ -14,7 +14,7 @@
 	},
 	"devDependencies": {
 		"@types/node": "^26.6.2",
-		"bun-types": "1.4.3",
+		"bun-types": "1.4.4",
 		"typescript": "^7.0.2"
 	},
 	"engines": {

package/packages/omo-codex/plugin/skills/ast-grep/README.md

@@ -11,7 +11,7 @@ git clone https://github.com/code-yeongyu/ast-grep-skill ~/.agents/skills/ast-gr
 bash ~/.agents/skills/ast-grep/install.sh        # installs the ast-grep binary
 ```
 
-That is it. The wrapper script is single-file Python 3 stdlib; no `pip install` needed. The installer tries `brew` → `npm` → `cargo` → `pip` → `nix` → `mise` → GitHub release in priority order, picks the first that works, and falls back to a cached binary at `<skill>/bin/sg`.
+That is it. The wrapper script is single-file Python 3 stdlib; no `pip install` needed. The installer tries `brew` → `npm` → `cargo` → `pip` → `nix` → `mise` → GitHub release in priority order, picks the first that works, and falls back to a cached binary in a user cache folder (`~/.cache/omo-ast-grep/bin/sg`, or `%LOCALAPPDATA%\omo-ast-grep\bin\sg.exe` on Windows), never inside the skill.
 
 ### Symlink for active development
 

package/packages/omo-codex/plugin/skills/ast-grep/install.ps1

@@ -5,7 +5,8 @@
 
 .DESCRIPTION
   Tries package managers in priority order, then falls back to downloading a
-  pinned release zip from GitHub into <skill_root>/bin/sg.exe.
+  pinned release zip from GitHub into %LOCALAPPDATA%\omo-ast-grep\bin\sg.exe
+  (never into the skill directory, which can sit inside a signed app bundle).
 
   Order:
     1. Already installed?  -> nothing to do
@@ -15,7 +16,7 @@
     5. npm (@ast-grep/cli)
     6. cargo binstall / cargo install
     7. pip (ast-grep-cli)
-    8. GitHub release zip -> <skill_root>/bin/sg.exe
+    8. GitHub release zip -> %LOCALAPPDATA%\omo-ast-grep\bin\sg.exe
 
 .PARAMETER Method
   Force one method: scoop | winget | choco | npm | cargo | pip | github
@@ -44,7 +45,8 @@ param(
 
 $ErrorActionPreference = 'Stop'
 $ScriptDir = Split-Path -Parent $MyInvocation.MyCommand.Path
-$CacheBinDir = if ($env:OMO_AST_GREP_BIN_DIR) { $env:OMO_AST_GREP_BIN_DIR } else { Join-Path $ScriptDir "bin" }
+$CacheRoot = if ($env:LOCALAPPDATA) { $env:LOCALAPPDATA } else { Join-Path $HOME "AppData\Local" }
+$CacheBinDir = if ($env:OMO_AST_GREP_BIN_DIR) { $env:OMO_AST_GREP_BIN_DIR } else { Join-Path $CacheRoot "omo-ast-grep\bin" }
 
 function Log([string]$msg) {
     if (-not $Quiet) {

package/packages/omo-codex/plugin/skills/ast-grep/install.sh

@@ -3,7 +3,8 @@
 # install.sh - install the ast-grep binary on POSIX systems (macOS, Linux, WSL, Git Bash).
 #
 # Tries package managers in priority order, then falls back to downloading a
-# pinned release binary from GitHub into <skill_root>/bin/sg.
+# pinned release binary from GitHub into ${XDG_CACHE_HOME:-~/.cache}/omo-ast-grep/bin/sg
+# (never into the skill directory, which can sit inside a signed app bundle).
 #
 # Order:
 #   1. Already installed?  -> nothing to do
@@ -13,7 +14,7 @@
 #   5. pip (ast-grep-cli)
 #   6. nix-env (NixOS / Nix users)
 #   7. mise (asdf successor)
-#   8. GitHub release tarball -> <skill_root>/bin/sg
+#   8. GitHub release tarball -> ${XDG_CACHE_HOME:-~/.cache}/omo-ast-grep/bin/sg
 #
 # Flags:
 #   --method=<m>     Force one method: brew | npm | cargo | pip | nix | mise | github
@@ -29,9 +30,7 @@
 
 set -euo pipefail
 
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-SKILL_ROOT="$SCRIPT_DIR"
-CACHE_BIN_DIR="${OMO_AST_GREP_BIN_DIR:-$SKILL_ROOT/bin}"
+CACHE_BIN_DIR="${OMO_AST_GREP_BIN_DIR:-${XDG_CACHE_HOME:-$HOME/.cache}/omo-ast-grep/bin}"
 
 PINNED_VERSION="0.45.0"
 FORCED_METHOD=""

package/packages/omo-codex/plugin/skills/ast-grep/references/install.md

@@ -105,7 +105,7 @@ sudo chmod +x /usr/local/bin/sg
 sg --version
 ```
 
-The skill's `install.sh` does steps 1-3 automatically and drops the binary in `<skill_root>/bin/sg` so you can use it without sudo.
+The skill's `install.sh` does steps 1-3 automatically and drops the binary in `${XDG_CACHE_HOME:-~/.cache}/omo-ast-grep/bin/sg` (`%LOCALAPPDATA%\omo-ast-grep\bin\sg.exe` on Windows; override with `OMO_AST_GREP_BIN_DIR`) so you can use it without sudo. It never writes into the skill directory, which can sit inside a signed app bundle.
 
 ---
 
@@ -163,4 +163,4 @@ See `references/cli.md` for `ast-grep lsp` flags.
 | scoop | `scoop uninstall ast-grep` |
 | winget | `winget uninstall --id ast-grep.ast-grep` |
 | choco | `choco uninstall ast-grep` |
-| GitHub binary | `rm <skill_root>/bin/sg` |
+| GitHub binary | `rm ${XDG_CACHE_HOME:-~/.cache}/omo-ast-grep/bin/sg` |

package/packages/omo-codex/plugin/skills/ast-grep/scripts/ast_grep_helper.py

@@ -140,12 +140,22 @@ def skill_root() -> Path:
     return script_dir().parent
 
 
+def cache_bin_dir() -> Path:
+    """Where install.sh / install.ps1 drop a downloaded binary; never inside the skill (#11373)."""
+    override = os.environ.get("OMO_AST_GREP_BIN_DIR")
+    if override:
+        return Path(override).expanduser()
+    if os.name == "nt":
+        return Path(os.environ.get("LOCALAPPDATA") or Path.home() / "AppData" / "Local") / "omo-ast-grep" / "bin"
+    return Path(os.environ.get("XDG_CACHE_HOME") or Path.home() / ".cache") / "omo-ast-grep" / "bin"
+
+
 def cached_binary() -> Optional[Path]:
-    """Look in <skill_root>/bin/ for a previously downloaded binary."""
+    """Look in cache_bin_dir() for a previously downloaded binary."""
     binname = "sg.exe" if os.name == "nt" else "sg"
     altname = "ast-grep.exe" if os.name == "nt" else "ast-grep"
     for name in (binname, altname):
-        p = skill_root() / "bin" / name
+        p = cache_bin_dir() / name
         if p.is_file() and os.access(p, os.X_OK):
             return p
     return None
@@ -248,7 +258,7 @@ def resolve_binary() -> Optional[Path]:
 
     1. OMO_AST_GREP_SG_PATH override
     2. OMO runtime dirs
-    3. Cached binary in <skill>/bin/
+    3. Cached binary in cache_bin_dir()
     4. PATH (via shutil.which)
     5. Homebrew default paths
     """