@defend-tech/opencode-optima 0.1.25 → 0.1.27

package/README.md

@@ -25,7 +25,7 @@ PMA will guide the repository setup flow and, when needed, initialize Optima ins
 
 During setup, PMA can initialize the repository and create `.optima/.config/optima.yaml`. Optima reads this file for repository-local defaults, feature flags, policy extraction settings, and per-agent config overrides.
 
-Repository-local policy overrides live in `.optima/policies/`. If a policy file is not present there, Optima falls back to the bundled plugin default automatically.
+Repository-local policy overrides live in `.optima/policies/`. If a policy file is not present there, Optima falls back to the bundled plugin default from package `assets/policies/` automatically.
 
 Repository-local full agent definitions can live in `.optima/agents/`. Use this folder to override a bundled agent's base prompt or define a brand new custom repository agent.
 

package/{agents → assets/agents}/codemap.yml

@@ -1,5 +1,5 @@
 scope: module
-parent: ../.optima/codemap.yml
+parent: ../../.optima/codemap.yml
 sources_of_truth:
   - path: product_manager.md
   - path: workflow_runner.md

package/assets/codemap.yml

@@ -0,0 +1,19 @@
+scope: module
+name: assets
+parent: ../.optima/codemap.yml
+purpose: Package-owned bundled runtime assets for opencode-optima.
+code_roots:
+  - agents/
+  - policies/
+modules:
+  - path: agents
+    summary: Bundled default agent prompts used by the plugin package.
+  - path: policies
+    summary: Bundled default policy markdown included by agent prompts.
+entrypoints: []
+sources_of_truth:
+  - path: agents
+    summary: Source of bundled agent definitions published with the npm package.
+  - path: policies
+    summary: Source of bundled policy defaults published with the npm package.
+commands: {}

package/{policies → assets/policies}/README.md

@@ -1,13 +1,13 @@
 # Optima Bundled Policies
 
-This package-root directory contains Optima's bundled fallback policy assets. Target repositories should put repo-local policy overrides in `.optima/policies/`, not in this package-root `policies/` directory.
+This package asset directory contains Optima's bundled fallback policy assets. Target repositories should put repo-local policy overrides in `.optima/policies/`, not in a package-root `policies/` directory.
 
 ## How Policy Resolution Works
 
 For any `<include:policy:<file>.md>` include, Optima resolves policy files in this order:
 
 1. `.optima/policies/<file>.md`
-2. bundled plugin default `policies/<file>.md`
+2. bundled plugin default from `assets/policies/<file>.md`
 
 Files under `.optima/.config/generated/policies/` are reference copies only. They are not read directly at runtime.
 

package/{policies → assets/policies}/codemap.yml

@@ -1,5 +1,5 @@
 scope: module
-parent: ../codemap.yml
+parent: ../../.optima/codemap.yml
 sources_of_truth:
   - path: README.md
   - path: definition-of-done.md

package/dist/index.js

@@ -7900,8 +7900,9 @@ async function optima_validate_logic(worktree) {
 
 // src/index.js
 var PKG_ROOT = path2.resolve(path2.dirname(fileURLToPath(import.meta.url)), "..");
-var BUNDLE_AGENTS_DIR = path2.join(PKG_ROOT, "agents");
-var BUNDLE_POLICIES_DIR = path2.join(PKG_ROOT, "policies");
+var BUNDLE_ASSETS_DIR = path2.join(PKG_ROOT, "assets");
+var BUNDLE_AGENTS_DIR = path2.join(BUNDLE_ASSETS_DIR, "agents");
+var BUNDLE_POLICIES_DIR = path2.join(BUNDLE_ASSETS_DIR, "policies");
 var TEMPLATES_DIR = path2.join(PKG_ROOT, "templates");
 var HUMANS_REGISTRY_PATH = path2.join(PKG_ROOT, "docs", "core", "humans.md");
 var MANDATORY_AGENTS = /* @__PURE__ */ new Set(["product_manager", "business_analyst", "tech_lead"]);
@@ -7965,7 +7966,7 @@ var REPO_LOCAL_POLICIES_README = [
   "For any `<include:policy:<file>.md>` include, Optima resolves policy files in this order:",
   "",
   "1. `.optima/policies/<file>.md`",
-  "2. bundled plugin default `policies/<file>.md`",
+  "2. bundled plugin default from package assets (`assets/policies/<file>.md`)",
   "",
   "Files under `.optima/.config/generated/policies/` are reference copies only. They are not read directly at runtime.",
   "",
@@ -8853,6 +8854,9 @@ function optimaRuntimeDir(worktree) {
 function clickUpWebhookStatePath(worktree) {
   return path2.join(optimaRuntimeDir(worktree), "clickup-webhook.json");
 }
+function clickUpCommentLedgerPath(worktree) {
+  return path2.join(optimaRuntimeDir(worktree), "clickup-comment-ledger.jsonl");
+}
 function clickUpWebhookLogPath(worktree) {
   return path2.join(optimaRuntimeDir(worktree), "clickup-webhook.log.jsonl");
 }
@@ -9206,6 +9210,71 @@ function rememberClickUpWebhookEvent(state = {}, eventKey, limit = 200) {
   if (recent.includes(eventKey)) return { duplicate: true, state };
   return { duplicate: false, state: { ...state, recentEventKeys: [...recent, eventKey].slice(-limit) } };
 }
+function readClickUpCommentLedger(ledgerPath) {
+  const processed = /* @__PURE__ */ new Set();
+  if (!ledgerPath || !fs2.existsSync(ledgerPath)) return processed;
+  try {
+    const raw = fs2.readFileSync(ledgerPath, "utf8");
+    for (const [index, line] of raw.split(/\r?\n/).entries()) {
+      if (!line.trim()) continue;
+      try {
+        const entry = JSON.parse(line);
+        if (entry?.key) processed.add(String(entry.key));
+      } catch (error) {
+        throw new Error(`malformed ledger row ${index + 1}: ${error.message}`);
+      }
+    }
+  } catch (error) {
+    throw new Error(`ClickUp comment ledger unavailable: ${error.message}`);
+  }
+  return processed;
+}
+function appendClickUpCommentLedgerEntry(ledgerPath, entry = {}) {
+  if (!ledgerPath || !entry.key) return;
+  fs2.mkdirSync(path2.dirname(ledgerPath), { recursive: true, mode: 448 });
+  fs2.appendFileSync(ledgerPath, `${JSON.stringify(entry)}
+`, { encoding: "utf8", mode: 384 });
+  try {
+    fs2.chmodSync(ledgerPath, 384);
+  } catch {
+  }
+}
+function clickUpCommentLedgerKey({ taskId, eventType, payload }) {
+  const history = Array.isArray(payload?.history_items) ? payload.history_items[0] : payload?.history_item;
+  const comment = clickUpCommentFromPayload(payload);
+  const commentId = String(comment?.id || payload?.comment_id || payload?.commentId || history?.comment_id || history?.commentId || "").trim();
+  if (!commentId) return "";
+  const explicitVersion = String(
+    comment?.date_updated || comment?.dateUpdated || comment?.updated_at || comment?.updatedAt || comment?._version_vector || comment?.version_vector || comment?.versionVector || comment?.version || comment?.revision || comment?.modified_at || comment?.modifiedAt || ""
+  ).trim();
+  const contentVersion = crypto.createHash("sha256").update(JSON.stringify({ text: clickUpCommentText(comment), parts: Array.isArray(comment.comment) ? comment.comment : null })).digest("hex").slice(0, 16);
+  return [String(taskId || "").trim(), "comment", commentId, explicitVersion || `sha256-${contentVersion}`].filter(Boolean).join(":");
+}
+function isClickUpCommentVersionProcessed({ ledgerPath, key, ledger = null, worktree = process.cwd() } = {}) {
+  if (!key) return false;
+  try {
+    return (ledger || readClickUpCommentLedger(ledgerPath)).has(key);
+  } catch (error) {
+    try {
+      appendClickUpWebhookLocalLog(worktree, { type: "comment_ledger_read_failed", ledgerPath, message: error.message });
+    } catch {
+    }
+    throw error;
+  }
+}
+function recordClickUpCommentVersionProcessed({ ledgerPath, key, taskId, eventType, payload, result, at = /* @__PURE__ */ new Date() } = {}) {
+  if (!key) return;
+  const comment = clickUpCommentFromPayload(payload);
+  appendClickUpCommentLedgerEntry(ledgerPath, {
+    key,
+    taskId,
+    eventType,
+    commentId: comment?.id || payload?.comment_id || payload?.commentId || null,
+    action: result?.action || null,
+    sessionId: result?.sessionId || null,
+    recordedAt: at.toISOString()
+  });
+}
 function clickUpTaskIdFromPayload(payload = {}) {
   return String(payload.task_id || payload.taskId || payload.task?.id || payload.task?.task_id || "").trim();
 }
@@ -9561,17 +9630,21 @@ async function withClickUpTaskRouteLock(taskId, operation) {
     if (activeClickUpTaskRoutes.get(key) === current) activeClickUpTaskRoutes.delete(key);
   }
 }
-async function routeClickUpWebhookEventUnlocked({ payload, config, state = {}, worktree = process.cwd(), clickupClient, openCodeClient, sessionExists = openCodeSessionExists, createSession = createOpenCodeSession, sendSessionEvent = sendOpenCodeSessionEvent, saveState = null, now = () => /* @__PURE__ */ new Date(), host = os.hostname() } = {}) {
+async function routeClickUpWebhookEventUnlocked({ payload, config, state = {}, worktree = process.cwd(), clickupClient, openCodeClient, sessionExists = openCodeSessionExists, createSession = createOpenCodeSession, sendSessionEvent = sendOpenCodeSessionEvent, saveState = null, now = () => /* @__PURE__ */ new Date(), host = os.hostname(), commentLedgerPath = clickUpCommentLedgerPath(worktree) } = {}) {
   const eventType = clickUpEventType(payload);
   const eventKey = clickUpWebhookEventKey(payload);
   const remembered = rememberClickUpWebhookEvent(state, eventKey);
   if (remembered.duplicate) return { ok: true, action: "ignored", reason: "duplicate", eventKey };
   let stateToPersist = remembered.state;
+  let commentLedgerKey = "";
   const persistState = (nextState) => {
     stateToPersist = nextState;
     if (saveState) saveState(nextState);
   };
   const finish = (result) => {
+    if (result?.ok && commentLedgerKey && ["created_session", "sent_to_existing_session", "missing_session_reported"].includes(result.action)) {
+      recordClickUpCommentVersionProcessed({ ledgerPath: commentLedgerPath, key: commentLedgerKey, taskId: result.taskId, eventType, payload, result, at: now() });
+    }
     if (result?.ok && saveState) saveState(stateToPersist);
     return result;
   };
@@ -9586,6 +9659,14 @@ async function routeClickUpWebhookEventUnlocked({ payload, config, state = {}, w
     const authorId = clickUpCommentAuthorId(comment);
     if (authorId && authorId === config.routing.ignoredCommentAuthorId) return finish({ ok: true, action: "ignored", reason: "self_authored_comment", taskId });
     if (!clickUpCommentMentionsProductManager(comment, config.routing)) return finish({ ok: true, action: "ignored", reason: "missing_product_manager_mention", taskId });
+    commentLedgerKey = clickUpCommentLedgerKey({ taskId, eventType, payload });
+    try {
+      if (isClickUpCommentVersionProcessed({ ledgerPath: commentLedgerPath, key: commentLedgerKey, worktree })) {
+        return finish({ ok: true, action: "ignored", reason: "comment_version_already_processed", taskId, eventKey, commentLedgerKey });
+      }
+    } catch (error) {
+      return { ok: false, action: "error", reason: "comment_ledger_unavailable", taskId, eventKey, message: error.message };
+    }
   }
   if (!isCommentEvent && !isClickUpTaskAssignedToProductManager(task, config.routing.productManagerAssigneeId)) return finish({ ok: true, action: "ignored", reason: "not_assigned_to_product_manager", taskId });
   if (isClickUpTaskTerminal(task, payload, config.routing.ignoredStatuses)) return finish({ ok: true, action: "ignored", reason: "terminal_status", taskId });
@@ -11397,7 +11478,7 @@ Follow-up: use optima_prompt_workflow with session_id '${sessionId}' to check in
     }
   };
 }
-OptimaPlugin.__internals = { BUNDLE_AGENTS_DIR, CLICKUP_DEFINITION_DOC_PARENT, activeClickUpWebhookLifecycleRegistry, cleanupManagedClickUpWebhook, deleteClickUpWebhookBestEffort, BUNDLE_POLICIES_DIR, buildClickUpApplyPayloadResult, buildClickUpCreateSubtasksPayload, buildClickUpStartTaskPayload, buildClickUpSummaryPayload, buildClickUpTransitionPayload, buildOptimaAgents, clickUpCommentMentionsProductManager, clickUpWebhookAuditLogDir, clickUpWebhookAuditLogPath, createClickUpApiClient, ensureClickUpWebhookSubscription, handleClickUpWebhookRequest, isClickUpWebhookStateActive, normalizeClickUpWebhookConfig, normalizeClickUpWebhookLogLevel, normalizeOpenCodeBaseUrl, readClickUpWebhookState, resolveOptimaPluginOptions, resolveSecretReference, routeClickUpWebhookEvent, sendOpenCodeSessionEvent, sendOpenCodeSessionEventDirect, startClickUpWebhookListener, validateClickUpWebhookState, verifyClickUpSignature, writeClickUpWebhookState, decideClickUpStatusAction, deriveClickUpBranchName, deriveClickUpPendingSubtaskBranch, deriveClickUpPrTarget, deriveClickUpWorktree, determineClickUpMergeAuthority, ensureOptimaGitignoreRules, explicitSafeInputWorktree, finalApprovalAssignees, formatValidationResult, isIgnoredClickUpTaskType, isOptimaPluginPackageWorktree, isSafeWritableDirectory, loadHumansRegistry, mergeClickUpAgentMetadata, mergeClickUpSessionMetadata, migrateLegacyOptimaLayout, normalizeAgentMetadataJson, normalizeClickUpStatus, normalizeClickUpTaskType, normalizePromptResponseParts, normalizeWorkflowTaskPath, parseClickUpSubtasksMarkdown, parseHumansRegistry, parseMarkdownArtifact, parseMarkdownSections, preEstimateClickUpWork, readMarkdownArtifact, resolveHumanRoles, resolveSafeWorktree, safeWorktreeOrFailure, stripRawLogSections, validateMainWorkspaceBranchSafety, workflowFinalMessageFromPromptResponse };
+OptimaPlugin.__internals = { BUNDLE_AGENTS_DIR, BUNDLE_ASSETS_DIR, CLICKUP_DEFINITION_DOC_PARENT, activeClickUpWebhookLifecycleRegistry, cleanupManagedClickUpWebhook, deleteClickUpWebhookBestEffort, BUNDLE_POLICIES_DIR, buildClickUpApplyPayloadResult, buildClickUpCreateSubtasksPayload, buildClickUpStartTaskPayload, buildClickUpSummaryPayload, buildClickUpTransitionPayload, buildOptimaAgents, clickUpCommentLedgerKey, clickUpCommentMentionsProductManager, clickUpWebhookAuditLogDir, clickUpWebhookAuditLogPath, createClickUpApiClient, ensureClickUpWebhookSubscription, handleClickUpWebhookRequest, isClickUpWebhookStateActive, normalizeClickUpWebhookConfig, normalizeClickUpWebhookLogLevel, normalizeOpenCodeBaseUrl, readClickUpCommentLedger, readClickUpWebhookState, recordClickUpCommentVersionProcessed, resolveOptimaPluginOptions, resolveSecretReference, routeClickUpWebhookEvent, sendOpenCodeSessionEvent, sendOpenCodeSessionEventDirect, startClickUpWebhookListener, validateClickUpWebhookState, verifyClickUpSignature, writeClickUpWebhookState, decideClickUpStatusAction, deriveClickUpBranchName, deriveClickUpPendingSubtaskBranch, deriveClickUpPrTarget, deriveClickUpWorktree, determineClickUpMergeAuthority, ensureOptimaGitignoreRules, explicitSafeInputWorktree, finalApprovalAssignees, formatValidationResult, isIgnoredClickUpTaskType, isOptimaPluginPackageWorktree, isSafeWritableDirectory, loadHumansRegistry, mergeClickUpAgentMetadata, mergeClickUpSessionMetadata, migrateLegacyOptimaLayout, normalizeAgentMetadataJson, normalizeClickUpStatus, normalizeClickUpTaskType, normalizePromptResponseParts, normalizeWorkflowTaskPath, parseClickUpSubtasksMarkdown, parseHumansRegistry, parseMarkdownArtifact, parseMarkdownSections, preEstimateClickUpWork, readMarkdownArtifact, resolveHumanRoles, resolveSafeWorktree, safeWorktreeOrFailure, stripRawLogSections, validateMainWorkspaceBranchSafety, workflowFinalMessageFromPromptResponse };
 export {
   OptimaPlugin as default
 };

package/dist/sanitize_cli.js

@@ -7907,8 +7907,9 @@ async function optima_validate_logic(worktree) {
 
 // src/index.js
 var PKG_ROOT = path2.resolve(path2.dirname(fileURLToPath(import.meta.url)), "..");
-var BUNDLE_AGENTS_DIR = path2.join(PKG_ROOT, "agents");
-var BUNDLE_POLICIES_DIR = path2.join(PKG_ROOT, "policies");
+var BUNDLE_ASSETS_DIR = path2.join(PKG_ROOT, "assets");
+var BUNDLE_AGENTS_DIR = path2.join(BUNDLE_ASSETS_DIR, "agents");
+var BUNDLE_POLICIES_DIR = path2.join(BUNDLE_ASSETS_DIR, "policies");
 var TEMPLATES_DIR = path2.join(PKG_ROOT, "templates");
 var HUMANS_REGISTRY_PATH = path2.join(PKG_ROOT, "docs", "core", "humans.md");
 var MANDATORY_AGENTS = /* @__PURE__ */ new Set(["product_manager", "business_analyst", "tech_lead"]);
@@ -7972,7 +7973,7 @@ var REPO_LOCAL_POLICIES_README = [
   "For any `<include:policy:<file>.md>` include, Optima resolves policy files in this order:",
   "",
   "1. `.optima/policies/<file>.md`",
-  "2. bundled plugin default `policies/<file>.md`",
+  "2. bundled plugin default from package assets (`assets/policies/<file>.md`)",
   "",
   "Files under `.optima/.config/generated/policies/` are reference copies only. They are not read directly at runtime.",
   "",
@@ -8860,6 +8861,9 @@ function optimaRuntimeDir(worktree) {
 function clickUpWebhookStatePath(worktree) {
   return path2.join(optimaRuntimeDir(worktree), "clickup-webhook.json");
 }
+function clickUpCommentLedgerPath(worktree) {
+  return path2.join(optimaRuntimeDir(worktree), "clickup-comment-ledger.jsonl");
+}
 function clickUpWebhookLogPath(worktree) {
   return path2.join(optimaRuntimeDir(worktree), "clickup-webhook.log.jsonl");
 }
@@ -9213,6 +9217,71 @@ function rememberClickUpWebhookEvent(state = {}, eventKey, limit = 200) {
   if (recent.includes(eventKey)) return { duplicate: true, state };
   return { duplicate: false, state: { ...state, recentEventKeys: [...recent, eventKey].slice(-limit) } };
 }
+function readClickUpCommentLedger(ledgerPath) {
+  const processed = /* @__PURE__ */ new Set();
+  if (!ledgerPath || !fs2.existsSync(ledgerPath)) return processed;
+  try {
+    const raw = fs2.readFileSync(ledgerPath, "utf8");
+    for (const [index, line] of raw.split(/\r?\n/).entries()) {
+      if (!line.trim()) continue;
+      try {
+        const entry = JSON.parse(line);
+        if (entry?.key) processed.add(String(entry.key));
+      } catch (error) {
+        throw new Error(`malformed ledger row ${index + 1}: ${error.message}`);
+      }
+    }
+  } catch (error) {
+    throw new Error(`ClickUp comment ledger unavailable: ${error.message}`);
+  }
+  return processed;
+}
+function appendClickUpCommentLedgerEntry(ledgerPath, entry = {}) {
+  if (!ledgerPath || !entry.key) return;
+  fs2.mkdirSync(path2.dirname(ledgerPath), { recursive: true, mode: 448 });
+  fs2.appendFileSync(ledgerPath, `${JSON.stringify(entry)}
+`, { encoding: "utf8", mode: 384 });
+  try {
+    fs2.chmodSync(ledgerPath, 384);
+  } catch {
+  }
+}
+function clickUpCommentLedgerKey({ taskId, eventType, payload }) {
+  const history = Array.isArray(payload?.history_items) ? payload.history_items[0] : payload?.history_item;
+  const comment = clickUpCommentFromPayload(payload);
+  const commentId = String(comment?.id || payload?.comment_id || payload?.commentId || history?.comment_id || history?.commentId || "").trim();
+  if (!commentId) return "";
+  const explicitVersion = String(
+    comment?.date_updated || comment?.dateUpdated || comment?.updated_at || comment?.updatedAt || comment?._version_vector || comment?.version_vector || comment?.versionVector || comment?.version || comment?.revision || comment?.modified_at || comment?.modifiedAt || ""
+  ).trim();
+  const contentVersion = crypto.createHash("sha256").update(JSON.stringify({ text: clickUpCommentText(comment), parts: Array.isArray(comment.comment) ? comment.comment : null })).digest("hex").slice(0, 16);
+  return [String(taskId || "").trim(), "comment", commentId, explicitVersion || `sha256-${contentVersion}`].filter(Boolean).join(":");
+}
+function isClickUpCommentVersionProcessed({ ledgerPath, key, ledger = null, worktree = process.cwd() } = {}) {
+  if (!key) return false;
+  try {
+    return (ledger || readClickUpCommentLedger(ledgerPath)).has(key);
+  } catch (error) {
+    try {
+      appendClickUpWebhookLocalLog(worktree, { type: "comment_ledger_read_failed", ledgerPath, message: error.message });
+    } catch {
+    }
+    throw error;
+  }
+}
+function recordClickUpCommentVersionProcessed({ ledgerPath, key, taskId, eventType, payload, result, at = /* @__PURE__ */ new Date() } = {}) {
+  if (!key) return;
+  const comment = clickUpCommentFromPayload(payload);
+  appendClickUpCommentLedgerEntry(ledgerPath, {
+    key,
+    taskId,
+    eventType,
+    commentId: comment?.id || payload?.comment_id || payload?.commentId || null,
+    action: result?.action || null,
+    sessionId: result?.sessionId || null,
+    recordedAt: at.toISOString()
+  });
+}
 function clickUpTaskIdFromPayload(payload = {}) {
   return String(payload.task_id || payload.taskId || payload.task?.id || payload.task?.task_id || "").trim();
 }
@@ -9568,17 +9637,21 @@ async function withClickUpTaskRouteLock(taskId, operation) {
     if (activeClickUpTaskRoutes.get(key) === current) activeClickUpTaskRoutes.delete(key);
   }
 }
-async function routeClickUpWebhookEventUnlocked({ payload, config, state = {}, worktree = process.cwd(), clickupClient, openCodeClient, sessionExists = openCodeSessionExists, createSession = createOpenCodeSession, sendSessionEvent = sendOpenCodeSessionEvent, saveState = null, now = () => /* @__PURE__ */ new Date(), host = os.hostname() } = {}) {
+async function routeClickUpWebhookEventUnlocked({ payload, config, state = {}, worktree = process.cwd(), clickupClient, openCodeClient, sessionExists = openCodeSessionExists, createSession = createOpenCodeSession, sendSessionEvent = sendOpenCodeSessionEvent, saveState = null, now = () => /* @__PURE__ */ new Date(), host = os.hostname(), commentLedgerPath = clickUpCommentLedgerPath(worktree) } = {}) {
   const eventType = clickUpEventType(payload);
   const eventKey = clickUpWebhookEventKey(payload);
   const remembered = rememberClickUpWebhookEvent(state, eventKey);
   if (remembered.duplicate) return { ok: true, action: "ignored", reason: "duplicate", eventKey };
   let stateToPersist = remembered.state;
+  let commentLedgerKey = "";
   const persistState = (nextState) => {
     stateToPersist = nextState;
     if (saveState) saveState(nextState);
   };
   const finish = (result) => {
+    if (result?.ok && commentLedgerKey && ["created_session", "sent_to_existing_session", "missing_session_reported"].includes(result.action)) {
+      recordClickUpCommentVersionProcessed({ ledgerPath: commentLedgerPath, key: commentLedgerKey, taskId: result.taskId, eventType, payload, result, at: now() });
+    }
     if (result?.ok && saveState) saveState(stateToPersist);
     return result;
   };
@@ -9593,6 +9666,14 @@ async function routeClickUpWebhookEventUnlocked({ payload, config, state = {}, w
     const authorId = clickUpCommentAuthorId(comment);
     if (authorId && authorId === config.routing.ignoredCommentAuthorId) return finish({ ok: true, action: "ignored", reason: "self_authored_comment", taskId });
     if (!clickUpCommentMentionsProductManager(comment, config.routing)) return finish({ ok: true, action: "ignored", reason: "missing_product_manager_mention", taskId });
+    commentLedgerKey = clickUpCommentLedgerKey({ taskId, eventType, payload });
+    try {
+      if (isClickUpCommentVersionProcessed({ ledgerPath: commentLedgerPath, key: commentLedgerKey, worktree })) {
+        return finish({ ok: true, action: "ignored", reason: "comment_version_already_processed", taskId, eventKey, commentLedgerKey });
+      }
+    } catch (error) {
+      return { ok: false, action: "error", reason: "comment_ledger_unavailable", taskId, eventKey, message: error.message };
+    }
   }
   if (!isCommentEvent && !isClickUpTaskAssignedToProductManager(task, config.routing.productManagerAssigneeId)) return finish({ ok: true, action: "ignored", reason: "not_assigned_to_product_manager", taskId });
   if (isClickUpTaskTerminal(task, payload, config.routing.ignoredStatuses)) return finish({ ok: true, action: "ignored", reason: "terminal_status", taskId });
@@ -11404,7 +11485,7 @@ Follow-up: use optima_prompt_workflow with session_id '${sessionId}' to check in
     }
   };
 }
-OptimaPlugin.__internals = { BUNDLE_AGENTS_DIR, CLICKUP_DEFINITION_DOC_PARENT, activeClickUpWebhookLifecycleRegistry, cleanupManagedClickUpWebhook, deleteClickUpWebhookBestEffort, BUNDLE_POLICIES_DIR, buildClickUpApplyPayloadResult, buildClickUpCreateSubtasksPayload, buildClickUpStartTaskPayload, buildClickUpSummaryPayload, buildClickUpTransitionPayload, buildOptimaAgents, clickUpCommentMentionsProductManager, clickUpWebhookAuditLogDir, clickUpWebhookAuditLogPath, createClickUpApiClient, ensureClickUpWebhookSubscription, handleClickUpWebhookRequest, isClickUpWebhookStateActive, normalizeClickUpWebhookConfig, normalizeClickUpWebhookLogLevel, normalizeOpenCodeBaseUrl, readClickUpWebhookState, resolveOptimaPluginOptions, resolveSecretReference, routeClickUpWebhookEvent, sendOpenCodeSessionEvent, sendOpenCodeSessionEventDirect, startClickUpWebhookListener, validateClickUpWebhookState, verifyClickUpSignature, writeClickUpWebhookState, decideClickUpStatusAction, deriveClickUpBranchName, deriveClickUpPendingSubtaskBranch, deriveClickUpPrTarget, deriveClickUpWorktree, determineClickUpMergeAuthority, ensureOptimaGitignoreRules, explicitSafeInputWorktree, finalApprovalAssignees, formatValidationResult, isIgnoredClickUpTaskType, isOptimaPluginPackageWorktree, isSafeWritableDirectory, loadHumansRegistry, mergeClickUpAgentMetadata, mergeClickUpSessionMetadata, migrateLegacyOptimaLayout, normalizeAgentMetadataJson, normalizeClickUpStatus, normalizeClickUpTaskType, normalizePromptResponseParts, normalizeWorkflowTaskPath, parseClickUpSubtasksMarkdown, parseHumansRegistry, parseMarkdownArtifact, parseMarkdownSections, preEstimateClickUpWork, readMarkdownArtifact, resolveHumanRoles, resolveSafeWorktree, safeWorktreeOrFailure, stripRawLogSections, validateMainWorkspaceBranchSafety, workflowFinalMessageFromPromptResponse };
+OptimaPlugin.__internals = { BUNDLE_AGENTS_DIR, BUNDLE_ASSETS_DIR, CLICKUP_DEFINITION_DOC_PARENT, activeClickUpWebhookLifecycleRegistry, cleanupManagedClickUpWebhook, deleteClickUpWebhookBestEffort, BUNDLE_POLICIES_DIR, buildClickUpApplyPayloadResult, buildClickUpCreateSubtasksPayload, buildClickUpStartTaskPayload, buildClickUpSummaryPayload, buildClickUpTransitionPayload, buildOptimaAgents, clickUpCommentLedgerKey, clickUpCommentMentionsProductManager, clickUpWebhookAuditLogDir, clickUpWebhookAuditLogPath, createClickUpApiClient, ensureClickUpWebhookSubscription, handleClickUpWebhookRequest, isClickUpWebhookStateActive, normalizeClickUpWebhookConfig, normalizeClickUpWebhookLogLevel, normalizeOpenCodeBaseUrl, readClickUpCommentLedger, readClickUpWebhookState, recordClickUpCommentVersionProcessed, resolveOptimaPluginOptions, resolveSecretReference, routeClickUpWebhookEvent, sendOpenCodeSessionEvent, sendOpenCodeSessionEventDirect, startClickUpWebhookListener, validateClickUpWebhookState, verifyClickUpSignature, writeClickUpWebhookState, decideClickUpStatusAction, deriveClickUpBranchName, deriveClickUpPendingSubtaskBranch, deriveClickUpPrTarget, deriveClickUpWorktree, determineClickUpMergeAuthority, ensureOptimaGitignoreRules, explicitSafeInputWorktree, finalApprovalAssignees, formatValidationResult, isIgnoredClickUpTaskType, isOptimaPluginPackageWorktree, isSafeWritableDirectory, loadHumansRegistry, mergeClickUpAgentMetadata, mergeClickUpSessionMetadata, migrateLegacyOptimaLayout, normalizeAgentMetadataJson, normalizeClickUpStatus, normalizeClickUpTaskType, normalizePromptResponseParts, normalizeWorkflowTaskPath, parseClickUpSubtasksMarkdown, parseHumansRegistry, parseMarkdownArtifact, parseMarkdownSections, preEstimateClickUpWork, readMarkdownArtifact, resolveHumanRoles, resolveSafeWorktree, safeWorktreeOrFailure, stripRawLogSections, validateMainWorkspaceBranchSafety, workflowFinalMessageFromPromptResponse };
 
 // src/sanitize_cli.js
 var { migrateLegacyOptimaLayout: migrateLegacyOptimaLayout2 } = OptimaPlugin.__internals;

package/docs/setup/CONFIGURATION.md

@@ -90,7 +90,7 @@ policies:
   extract_defaults: all
 ```
 
-This writes the bundled default policy files to `.optima/.config/generated/policies/` for reference. Those generated files are not used directly at runtime. To customize one, copy it into `.optima/policies/` and edit the copy.
+This writes the bundled default policy files from package `assets/policies/` to `.optima/.config/generated/policies/` for reference. Those generated files are not used directly at runtime. To customize one, copy it into `.optima/policies/` and edit the copy.
 
 ### Add repository-specific agent instructions
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@defend-tech/opencode-optima",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "repository": {
     "type": "git",
     "url": "git+ssh://git@github.com/defend-tech/opencode-optima.git"
@@ -25,9 +25,8 @@
   },
   "files": [
     "dist",
-    "agents",
+    "assets",
     "docs",
-    "policies",
     "templates",
     "scripts/optima-sanitize-host.js",
     "Agents_Common.md",