This directory stores committed local copies of the published npm packages tracked by the upstream plugin maintenance workflow.

Tracked packages:

• opencode-antigravity-auth
• @playwo/opencode-cursor-oauth (tracked internally under references/upstream-plugins/opencode-cursor-oauth/)
• opencode-gemini-auth
• opencode-qwencode-auth

Refresh everything with:

npm run upstream:sync

Prepare a full review handoff with:

npm run upstream:prepare-review

Check whether GitHub should open or close [check] <plugin> had update issues with:

npm run upstream:check

The published package contents under each plugin directory are regenerated by the sync script. Edit the scripts, not the copied package files.

Known embedded credentials from upstream packages are deterministically redacted during sync before the snapshots are committed. Update checks still come from references/upstream-plugins/lock.json version comparisons, not from sanitized file contents.

The GitHub issue stays open until the maintainer closes it manually after review/fix/release work.