[BUG] opencode still want to install latest plugin although I pin version

[WAY29]

Bug Description
opencode still want to install latest opencode-openai-codex-auth although I pin version

Steps to Reproduce

1. add opencode config: "plugin": ["opencode-openai-codex-auth@4.0.2"],
   2.run opencode, get stuck
   3.run debug command: opencode run hello --print-logs --model opencode/grok-code, check it get stuck in install latest plugin

Expected Behavior
opencode open normally

Actual Behavior
opencode get sutck

Environment

• opencode version: 1.0.134
• Plugin version: 4.0.2
• Operating System: macos
• Node.js version: v24.8.0

Logs

opencode run hello --print-logs --model opencode/grok-code
INFO  2025-12-09T03:07:54 +286ms service=default version=1.0.134 args=["run","hello","--print-logs","--model","opencode/grok-code"] opencode
INFO  2025-12-09T03:07:54 +0ms service=default directory=/Users/lang/coding/ts/opencode creating instance
INFO  2025-12-09T03:07:54 +0ms service=project directory=/Users/lang/coding/ts/opencode fromDirectory
INFO  2025-12-09T03:07:54 +1ms service=project status=started git.rev-parse
INFO  2025-12-09T03:07:54 +2ms service=project status=completed duration=2 git.rev-parse
INFO  2025-12-09T03:07:54 +24ms service=default directory=/Users/lang/coding/ts/opencode bootstrapping
INFO  2025-12-09T03:07:54 +2ms service=config path=/Users/lang/.config/opencode/config.json loading
INFO  2025-12-09T03:07:54 +0ms service=config path=/Users/lang/.config/opencode/opencode.json loading
INFO  2025-12-09T03:07:54 +6ms service=config path=/Users/lang/.config/opencode/opencode.jsonc loading
INFO  2025-12-09T03:07:54 +1ms service=bun cmd=["/opt/homebrew/lib/node_modules/opencode-ai/node_modules/opencode-darwin-arm64/bin/opencode","add","@opencode-ai/plugin@1.0.134","--exact"] cwd=/Users/lang/.config/opencode running
INFO  2025-12-09T03:07:54 +6ms service=bun code=0 stdout=bun add v1.3.3 (274e01c7)

installed @opencode-ai/plugin@1.0.134

[1.00ms] done
 stderr=Saved lockfile
 done
INFO  2025-12-09T03:07:54 +1ms service=config path=/Users/lang/coding/ts/opencode/.opencode/opencode.jsonc loading
INFO  2025-12-09T03:07:54 +1ms service=config path=/Users/lang/coding/ts/opencode/.opencode/opencode.json loading
INFO  2025-12-09T03:07:54 +1ms service=bun cmd=["/opt/homebrew/lib/node_modules/opencode-ai/node_modules/opencode-darwin-arm64/bin/opencode","add","@opencode-ai/plugin@1.0.134","--exact"] cwd=/Users/lang/coding/ts/opencode/.opencode running
INFO  2025-12-09T03:07:54 +9ms service=bun code=0 stdout=bun add v1.3.3 (274e01c7)

installed @opencode-ai/plugin@1.0.134

[5.00ms] done
 stderr=Saved lockfile
 done
INFO  2025-12-09T03:07:54 +0ms service=plugin path=opencode-openai-codex-auth@4.0.2 loading plugin
INFO  2025-12-09T03:07:54 +21ms service=plugin path=opencode-openai-codex-auth loading plugin
INFO  2025-12-09T03:07:54 +1ms service=bun pkg=opencode-openai-codex-auth version=latest installing package using Bun's default registry resolution
INFO  2025-12-09T03:07:54 +0ms service=bun pkg=opencode-openai-codex-auth version=latest attempt=1 total=3 bun install attempt
INFO  2025-12-09T03:07:54 +0ms service=bun cmd=["/opt/homebrew/lib/node_modules/opencode-ai/node_modules/opencode-darwin-arm64/bin/opencode","add","--force","--exact","--cwd","/Users/lang/.cache/opencode","opencode-openai-codex-auth@latest"] cwd=/Users/lang/.cache/opencode running

Compliance Checklist
Please confirm:

• I'm using this plugin for personal development only
• I have an active ChatGPT Plus/Pro subscription
• This issue is not related to attempting commercial use or TOS violations
• I've reviewed the FAQ and Troubleshooting sections

Additional Context

[WAY29]

It is quite confusing that after a period of time, when I run it again, opencode seems to no longer attempt to download the latest version of the plugin...

[WAY29]

This seems to be a random occurrence, which drives me crazy.

[ben-vargas]

@WAY29 - What I do is just fork or directly clone this repo to give me full control of what code opencode is auto executing... then you manually control when the local git branch is updated and can review changes rather than auto pulling from npm (much safer).

Your ~/.config/opencode/opencode.json or ~/.config/opencode/opencode.jsonc would look something like this (just point to the local dir)...

  "plugin": [
    "file:///home/code/projects/ben-vargas/ai-opencode-gemini-auth/main",
    "file:///home/code/projects/ben-vargas/ai-opencode-openai-codex-auth/fix-gpt-5-2-none-reasoning"
  ],

Edit: I use bare git worktrees setup so I can have multiple branches in the project directory at the same level, so yours might just look like file:///home/some-user/projects/ai-opencode-openai-codex-auth - but you get the idea.

[WAY29]

@WAY29 - What I do is just fork or directly clone this repo to give me full control of what code opencode is auto executing... then you manually control when the local git branch is updated and can review changes rather than auto pulling from npm (much safer).

Your ~/.config/opencode/opencode.json or ~/.config/opencode/opencode.jsonc would look something like this (just point to the local dir)...

  "plugin": [
    "file:///home/code/projects/ben-vargas/ai-opencode-gemini-auth/main",
    "file:///home/code/projects/ben-vargas/ai-opencode-openai-codex-auth/fix-gpt-5-2-none-reasoning"
  ],

Edit: I use bare git worktrees setup so I can have multiple branches in the project directory at the same level, so yours might just look like file:///home/some-user/projects/ai-opencode-openai-codex-auth - but you get the idea.

This seems like a good idea, can opencode's ai-sdk do the same, or is it only plugins that can, such as @ai-sdk/anthropic?

[ben-vargas]

@WAY29 - Not really of loading the dependencies, they're a dependency for a reason. You can however prevent opencode from auto updating which effectively pins the entire opencode at whatever version you're on including dependencies its built on.

There are a couple of default plugins that opencode is loading behind the scenes as well, like the anthropic auth plugin equivalent to this codebase for openai.

The default plugins can be stopped with an env variable in your shell like...

OPENCODE_DISABLE_DEFAULT_PLUGINS=true opencode
# or
OPENCODE_DISABLE_DEFAULT_PLUGINS=1 opencode

The auto update of opencode over all can be stopped with...

OPENCODE_DISABLE_AUTOUPDATE=true opencode
# or
OPENCODE_DISABLE_AUTOUPDATE=1 opencode

or by setting opencode.json/opencode.jsonc in ~/.config/opencode/ ...

{
  "autoupdate": false
}

This stuff might be available in the opencode docs, but if not, I keep the opencode codebase cloned and use an LLM to ask questions like this, it will often turn up helpful info quickly.

[WAY29]

@WAY29 - Not really of loading the dependencies, they're a dependency for a reason. You can however prevent opencode from auto updating which effectively pins the entire opencode at whatever version you're on including dependencies its built on.

There are a couple of default plugins that opencode is loading behind the scenes as well, like the anthropic auth plugin equivalent to this codebase for openai.

The default plugins can be stopped with an env variable in your shell like...

OPENCODE_DISABLE_DEFAULT_PLUGINS=true opencode
# or
OPENCODE_DISABLE_DEFAULT_PLUGINS=1 opencode

The auto update of opencode over all can be stopped with...

OPENCODE_DISABLE_AUTOUPDATE=true opencode
# or
OPENCODE_DISABLE_AUTOUPDATE=1 opencode

or by setting opencode.json/opencode.jsonc in ~/.config/opencode/ ...

{
  "autoupdate": false
}

This stuff might be available in the opencode docs, but if not, I keep the opencode codebase cloned and use an LLM to ask questions like this, it will often turn up helpful info quickly.

Thank you for your answer.