v1.0.4

Author: CoderLuii

.env.example

@@ -34,10 +34,14 @@ ANTHROPIC_API_KEY=
 # ENABLE_CLAUDE_AUTH=true
 # ENABLE_OH_MY_OPENAGENT=true
 
+# === Plugin Updates ===
+# HOLYCODE_PLUGIN_UPDATE=manual   # manual: install enabled plugins only if missing
+# HOLYCODE_PLUGIN_UPDATE=auto     # auto: install if missing AND update enabled plugins on boot
+
 # === OpenCode Behavior ===
 # OPENCODE_MODEL=claude-sonnet-4-6
 # OPENCODE_PERMISSION=auto
-# OPENCODE_DISABLE_AUTOUPDATE=true
+# OPENCODE_DISABLE_AUTOUPDATE=true  # Only affects OpenCode itself, not plugins
 # OPENCODE_DISABLE_TERMINAL_TITLE=true
 # OPENCODE_DISABLE_LSP_DOWNLOAD=true
 # OPENCODE_DISABLE_AUTOCOMPACT=true

README.md

@@ -356,7 +356,7 @@ services:
 | `AZURE_OPENAI_ENDPOINT` | (none) | Azure OpenAI - set all three Azure vars |
 | `AZURE_OPENAI_API_KEY` | (none) | Azure OpenAI |
 | `AZURE_OPENAI_API_VERSION` | (none) | Azure OpenAI API version |
-| `OPENCODE_DISABLE_AUTOUPDATE` | `true` | Prevent OpenCode from self-updating inside the container |
+| `OPENCODE_DISABLE_AUTOUPDATE` | `true` | Prevent OpenCode from self-updating inside the container (does not affect plugins) |
 | `OPENCODE_DISABLE_TERMINAL_TITLE` | `true` | Prevent OpenCode from changing the terminal title |
 | `OPENCODE_MODEL` | (none) | Override the default model |
 | `OPENCODE_PERMISSION` | (none) | Set to `auto` to skip permission prompts |
@@ -367,12 +367,15 @@ services:
 | `OPENCODE_SERVER_USERNAME` | `opencode` | Username for web UI basic auth |
 | `ENABLE_CLAUDE_AUTH` | (none) | Set to `true` to use Claude subscription instead of API key |
 | `ENABLE_OH_MY_OPENAGENT` | (none) | Set to `true` to enable multi-agent orchestration plugin |
+| `HOLYCODE_PLUGIN_UPDATE` | `manual` | Plugin update mode: `manual` (install if missing) or `auto` (install and update on boot) |
 
 > Plugin toggles (`ENABLE_CLAUDE_AUTH`, `ENABLE_OH_MY_OPENAGENT`) take effect on container restart. Set the env var and run `docker compose down && up -d`.
 
+> `HOLYCODE_PLUGIN_UPDATE` controls plugin package updates. `manual` (default) installs enabled plugins only if they are missing. `auto` installs missing plugins and updates enabled plugins on every boot. This is separate from `OPENCODE_DISABLE_AUTOUPDATE`, which only affects OpenCode itself.
+
 > `ENABLE_OH_MY_OPENAGENT=true` enables the plugin through the main OpenCode config at `/home/opencode/.config/opencode/opencode.json`. On the host, that file appears under whatever host path you bind to `/home/opencode`. On boot, HolyCode also checks whether the plugin package is missing and installs it if needed.
 
-> `ENABLE_OH_MY_OPENAGENT=true` enables the plugin. The built-in `/oh-my-openagent-setup` skill is the supported way to create or update the plugin-specific config file at `~/.config/opencode/oh-my-openagent.jsonc`.
+> `ENABLE_OH_MY_OPENAGENT=true` enables the plugin and exposes the built-in `/oh-my-openagent-setup` skill. The skill only appears when the plugin is enabled. Use it to create or update the plugin-specific config file at `~/.config/opencode/oh-my-openagent.jsonc`.
 
 > `GIT_USER_NAME` and `GIT_USER_EMAIL` are only applied on first boot. To re-apply, delete the sentinel file and restart: `docker exec holycode rm /home/opencode/.config/opencode/.holycode-bootstrapped` then `docker compose restart`.
 
@@ -543,7 +546,7 @@ docker exec -it holycode bash -c "opencode providers login"
 
 ### oh-my-openagent setup and reconfiguration
 
-If you enabled `ENABLE_OH_MY_OPENAGENT=true`, use the shipped setup skill to create or refresh the plugin-specific config:
+If you enabled `ENABLE_OH_MY_OPENAGENT=true`, the `/oh-my-openagent-setup` skill becomes available. Use it to create or refresh the plugin-specific config:
 
 ```text
 /oh-my-openagent-setup

docker-compose.full.yaml

@@ -49,6 +49,7 @@ services:
       # - AZURE_OPENAI_API_VERSION=
 
       # --- OpenCode behavior (set by default in image, override if needed) ---
+      # OPENCODE_DISABLE_AUTOUPDATE only affects OpenCode itself, not plugins
       # - OPENCODE_DISABLE_AUTOUPDATE=true
       # - OPENCODE_DISABLE_TERMINAL_TITLE=true
       # - OPENCODE_MODEL=claude-sonnet-4-6
@@ -71,3 +72,8 @@ services:
       # Installs automatically on first boot when enabled
       # Toggle on/off with docker compose down && up -d
       # - ENABLE_OH_MY_OPENAGENT=true
+
+      # --- Plugin Updates ---
+      # manual: install enabled plugins only if missing (default)
+      # auto: install if missing AND update enabled plugins on boot
+      # - HOLYCODE_PLUGIN_UPDATE=manual

docs/CHANGELOG.md

@@ -4,18 +4,21 @@ All notable changes to HolyCode will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/), and this project adheres to [Semantic Versioning](https://semver.org/).
 
-## [1.0.3] - 04/04/2026
+## [1.0.4] - 04/04/2026
 
 ### Added
 
-- Ship a built-in `/oh-my-openagent-setup` skill for first-time setup and reruns after provider changes
+- Ship a built-in `/oh-my-openagent-setup` skill for first-time setup and reruns after provider changes (only visible when `ENABLE_OH_MY_OPENAGENT=true`)
 - Copy HolyCode-managed OpenCode skills into `~/.config/opencode/skills` on boot without overwriting existing user skill folders
 - Ensure enabled plugin packages are installed on boot if they are missing from the OpenCode cache
+- Add `HOLYCODE_PLUGIN_UPDATE` environment variable with two modes: `manual` (install if missing only) and `auto` (install if missing and update on boot)
 
 ### Changed
 
 - Document `/oh-my-openagent-setup` as the supported path for writing `oh-my-openagent.jsonc`
 - Document the default picker policy so only Sisyphus, Hephaestus, Prometheus, and Atlas are visible by default
+- Clarify that `OPENCODE_DISABLE_AUTOUPDATE` only affects OpenCode itself, not plugins
+- Clarify that `/oh-my-openagent-setup` skill only appears when the plugin is enabled
 
 ### Fixed
 

scripts/entrypoint.sh

@@ -14,17 +14,41 @@ WORKSPACE_DIR="/workspace"
 sync_shipped_skills() {
     local source_skills_dir="/usr/local/share/holycode/skills"
     local target_skills_dir="$OC_HOME/.config/opencode/skills"
+    local oh_my_openagent_skill="oh-my-openagent-setup"
 
     [ -d "$source_skills_dir" ] || return 0
 
     mkdir -p "$target_skills_dir"
     chown "$PUID:$PGID" "$target_skills_dir"
 
+    local oh_skill_target="$target_skills_dir/$oh_my_openagent_skill"
+    local oh_skill_marker="$oh_skill_target/.holycode-managed"
+
+    if [ "${ENABLE_OH_MY_OPENAGENT}" = "true" ]; then
+        if [ ! -e "$oh_skill_target" ]; then
+            if [ -d "$source_skills_dir/$oh_my_openagent_skill" ]; then
+                cp -R "$source_skills_dir/$oh_my_openagent_skill" "$oh_skill_target"
+                touch "$oh_skill_marker"
+                chown -R "$PUID:$PGID" "$oh_skill_target"
+                echo "[entrypoint] Installed built-in skill '$oh_my_openagent_skill'"
+            fi
+        elif [ ! -f "$oh_skill_marker" ]; then
+            echo "[entrypoint] Skill '$oh_my_openagent_skill' exists (not HolyCode-managed), skipping"
+        fi
+    else
+        if [ -f "$oh_skill_marker" ]; then
+            rm -rf "$oh_skill_target"
+            echo "[entrypoint] Removed HolyCode-managed skill '$oh_my_openagent_skill'"
+        fi
+    fi
+
     find "$source_skills_dir" -mindepth 1 -maxdepth 1 -type d | while read -r skill_dir; do
         local skill_name target_dir
         skill_name=$(basename "$skill_dir")
         target_dir="$target_skills_dir/$skill_name"
 
+        [ "$skill_name" = "$oh_my_openagent_skill" ] && continue
+
         if [ -e "$target_dir" ]; then
             continue
         fi
@@ -38,8 +62,19 @@ sync_shipped_skills() {
 ensure_plugin_installed() {
     local plugin_name="$1"
     local plugin_dir="$OC_HOME/.cache/opencode/node_modules/$plugin_name"
+    local update_mode="${HOLYCODE_PLUGIN_UPDATE:-manual}"
+
+    if [ "$update_mode" != "auto" ]; then
+        update_mode="manual"
+    fi
 
     if [ -f "$plugin_dir/package.json" ]; then
+        if [ "$update_mode" = "auto" ]; then
+            echo "[entrypoint] Plugin '$plugin_name' updating (auto mode)"
+            if ! runuser -u "$OC_USER" -- opencode plugin "$plugin_name" -g; then
+                echo "[entrypoint] WARNING: Failed to update plugin '$plugin_name'"
+            fi
+        fi
         return 0
     fi