@opencode-ai/plugin@1.1.45 published with unresolved workspace:* and catalog: references — breaks third-party plugin installs #8075

Open
opened 2026-02-16 18:09:05 -05:00 by yindo · 3 comments
Owner

Originally created by @NamedIdentity on GitHub (Jan 30, 2026).

Originally assigned to: @thdxr on GitHub.

Description

Description
@opencode-ai/plugin@1.1.45 (published 2026-01-30T17:41:00Z) contains unresolved
monorepo-internal dependency references in its published package.json on npm:
"dependencies": {
"zod": "catalog:",
"@opencode-ai/sdk": "workspace:*"
}
These are Bun workspace/catalog references that only resolve inside the opencode
monorepo. When any package depending on @opencode-ai/plugin with a semver range
(e.g., ^1.1.19) is installed outside the monorepo, Bun resolves to 1.1.45 and
fails with:
error: Workspace dependency "@opencode-ai/sdk" not found
error: zod@catalog: failed to resolve
For comparison, @opencode-ai/plugin@1.1.44 (published 2026-01-30T04:47:26Z) has
correctly resolved dependencies:
dependencies: {
zod: 4.1.8,
@opencode-ai/sdk: 1.1.44
}

Impact
This breaks all third-party opencode plugins that declare @opencode-ai/plugin
as a dependency with a caret or tilde range. When opencode's plugin system runs
bun add in the isolated cache directory, the transitive resolution of
@opencode-ai/plugin@^x.y.z pulls 1.1.45, and the install fails. The plugin
cannot load, and if it is not a builtin, the error halts opencode startup entirely.
Confirmed affected: oh-my-opencode (versions from 3.1.5 through 3.1.9 tested).

Root Cause
The publish pipeline for @opencode-ai/plugin did not resolve workspace:* and
catalog: references to concrete version numbers before publishing 1.1.45 to npm.
All prior versions (1.1.19 through 1.1.44) have correctly resolved dependencies.

Suggested Fix
Either:

  1. Unpublish @opencode-ai/plugin@1.1.45 (npm unpublish @opencode-ai/plugin@1.1.45)
  2. Publish a fixed 1.1.46 with resolved dependency versions
  3. Fix the publish pipeline to ensure workspace:* and catalog: are always
    resolved before npm publish (e.g., verify with a post-publish smoke test that
    installs the package in an isolated directory)

Workaround
Pre-seed the plugin cache with the last working version before launching opencode:
cd <XDG_CACHE_HOME>/opencode
bun add --force --exact @opencode-ai/plugin@1.1.44

Note on workaround: Simply running bun add --force --exact @opencode-ai/plugin@1.1.44 in the cache directory does not persist — the next plugin install re-resolves the full tree and pulls 1.1.45 again. The durable workaround requires adding "overrides": {"@opencode-ai/plugin": "1.1.44"} to <XDG_CACHE_HOME>/opencode/package.json, which Bun respects across subsequent bun add operations.

Environment

  • OS: Windows 10
  • Bun: 1.3.5 (also reproduced on 1.3.8)
  • Node: v24.12.0
  • opencode: 1.1.34 (local build)
  • oh-my-opencode: 3.1.9 (also affects 3.1.5)

Plugins

OMO, DCP (modified), "opencode-openai-codex-auth", "opencode-gemini-auth@latest"

OpenCode version

1.1.34

Steps to reproduce

Steps to Reproduce
mkdir /tmp/test-plugin && cd /tmp/test-plugin
echo '{"name":"test","dependencies":{}}' > package.json
bun add --force --exact @opencode-ai/plugin@1.1.45
Expected: Package installs successfully.
Actual:
error: Workspace dependency "@opencode-ai/sdk" not found
"@opencode-ai/sdk": "workspace:*"
in "@opencode-ai/plugin@1.1.45"
error: zod@catalog: failed to resolve
"zod": "catalog:"
in "@opencode-ai/plugin@1.1.45"

Screenshot and/or share link

No response

Operating System

Windows 10

Terminal

Windows Terminal

Originally created by @NamedIdentity on GitHub (Jan 30, 2026). Originally assigned to: @thdxr on GitHub. ### Description Description `@opencode-ai/plugin@1.1.45` (published 2026-01-30T17:41:00Z) contains unresolved monorepo-internal dependency references in its published package.json on npm: "dependencies": { "zod": "catalog:", "@opencode-ai/sdk": "workspace:*" } These are Bun workspace/catalog references that only resolve inside the opencode monorepo. When any package depending on @opencode-ai/plugin with a semver range (e.g., ^1.1.19) is installed outside the monorepo, Bun resolves to 1.1.45 and fails with: error: Workspace dependency "@opencode-ai/sdk" not found error: zod@catalog: failed to resolve For comparison, @opencode-ai/plugin@1.1.44 (published 2026-01-30T04:47:26Z) has correctly resolved dependencies: dependencies: { zod: 4.1.8, @opencode-ai/sdk: 1.1.44 } Impact This breaks all third-party opencode plugins that declare @opencode-ai/plugin as a dependency with a caret or tilde range. When opencode's plugin system runs bun add <plugin> in the isolated cache directory, the transitive resolution of @opencode-ai/plugin@^x.y.z pulls 1.1.45, and the install fails. The plugin cannot load, and if it is not a builtin, the error halts opencode startup entirely. Confirmed affected: oh-my-opencode (versions from 3.1.5 through 3.1.9 tested). Root Cause The publish pipeline for @opencode-ai/plugin did not resolve workspace:* and catalog: references to concrete version numbers before publishing 1.1.45 to npm. All prior versions (1.1.19 through 1.1.44) have correctly resolved dependencies. Suggested Fix Either: 1. Unpublish @opencode-ai/plugin@1.1.45 (npm unpublish @opencode-ai/plugin@1.1.45) 2. Publish a fixed 1.1.46 with resolved dependency versions 3. Fix the publish pipeline to ensure workspace:* and catalog: are always resolved before npm publish (e.g., verify with a post-publish smoke test that installs the package in an isolated directory) Workaround Pre-seed the plugin cache with the last working version before launching opencode: cd <XDG_CACHE_HOME>/opencode bun add --force --exact @opencode-ai/plugin@1.1.44 Note on workaround: Simply running bun add --force --exact @opencode-ai/plugin@1.1.44 in the cache directory does not persist — the next plugin install re-resolves the full tree and pulls 1.1.45 again. The durable workaround requires adding "overrides": {"@opencode-ai/plugin": "1.1.44"} to <XDG_CACHE_HOME>/opencode/package.json, which Bun respects across subsequent bun add operations. Environment - OS: Windows 10 - Bun: 1.3.5 (also reproduced on 1.3.8) - Node: v24.12.0 - opencode: 1.1.34 (local build) - oh-my-opencode: 3.1.9 (also affects 3.1.5) ### Plugins OMO, DCP (modified), "opencode-openai-codex-auth", "opencode-gemini-auth@latest" ### OpenCode version 1.1.34 ### Steps to reproduce Steps to Reproduce mkdir /tmp/test-plugin && cd /tmp/test-plugin echo '{"name":"test","dependencies":{}}' > package.json bun add --force --exact @opencode-ai/plugin@1.1.45 Expected: Package installs successfully. Actual: error: Workspace dependency "@opencode-ai/sdk" not found "@opencode-ai/sdk": "workspace:*" in "@opencode-ai/plugin@1.1.45" error: zod@catalog: failed to resolve "zod": "catalog:" in "@opencode-ai/plugin@1.1.45" ### Screenshot and/or share link _No response_ ### Operating System Windows 10 ### Terminal Windows Terminal
yindo added the windowsbug labels 2026-02-16 18:09:05 -05:00
Author
Owner

@djdembeck commented on GitHub (Jan 30, 2026):

Having this exact problem happening with plugins. Oh-my-Opencode has issues related as well:
https://github.com/code-yeongyu/oh-my-opencode/issues/1299
https://github.com/code-yeongyu/oh-my-opencode/issues/1294

And also mentioned in this issue:
https://github.com/anomalyco/opencode/issues/11327#issuecomment-3824773957

@djdembeck commented on GitHub (Jan 30, 2026): Having this exact problem happening with plugins. Oh-my-Opencode has issues related as well: https://github.com/code-yeongyu/oh-my-opencode/issues/1299 https://github.com/code-yeongyu/oh-my-opencode/issues/1294 And also mentioned in this issue: https://github.com/anomalyco/opencode/issues/11327#issuecomment-3824773957
Author
Owner

@jonhearsch commented on GitHub (Jan 30, 2026):

Same issue with custom tools I created.

@jonhearsch commented on GitHub (Jan 30, 2026): Same issue with custom tools I created.
Author
Owner

@rekram1-node commented on GitHub (Jan 30, 2026):

This should be fixed on latest, if you installed with brew use brew install anomalyco/tap/opencode

@rekram1-node commented on GitHub (Jan 30, 2026): This should be fixed on latest, if you installed with brew use `brew install anomalyco/tap/opencode`
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#8075