@defend-tech/opencode-optima 0.1.50 → 0.1.52

package/dist/index.js

@@ -9719,7 +9719,13 @@ async function readOpenCodeJsonResponse(response, endpointName) {
     return { raw };
   }
 }
-async function sendOpenCodeSessionEventDirect({ baseUrl, sessionId, text, agent, fetchImpl = globalThis.fetch, legacyOnly = false } = {}) {
+function appendDirectoryQuery(url, directory) {
+  const value = String(directory || "").trim();
+  if (!value) return url;
+  const separator = url.includes("?") ? "&" : "?";
+  return `${url}${separator}directory=${encodeURIComponent(value)}`;
+}
+async function sendOpenCodeSessionEventDirect({ baseUrl, sessionId, text, agent, directory, fetchImpl = globalThis.fetch, legacyOnly = false } = {}) {
   if (typeof fetchImpl !== "function") throw new Error("OpenCode direct prompt delivery requires fetch.");
   const root = normalizeOpenCodeBaseUrl(baseUrl, "");
   if (!root) throw new Error("OpenCode direct prompt delivery requires a base URL.");
@@ -9727,7 +9733,7 @@ async function sendOpenCodeSessionEventDirect({ baseUrl, sessionId, text, agent,
   const attempts = [
     legacyOnly ? null : {
       name: "v2 prompt",
-      url: `${root}/api/session/${encodedSession}/prompt`,
+      url: appendDirectoryQuery(`${root}/api/session/${encodedSession}/prompt`, directory),
       body: { prompt: { text }, delivery: "queue", resume: true },
       accept: (response, data) => {
         if (!response.ok) return null;
@@ -9737,7 +9743,7 @@ async function sendOpenCodeSessionEventDirect({ baseUrl, sessionId, text, agent,
     },
     {
       name: "legacy async prompt",
-      url: `${root}/session/${encodedSession}/prompt_async`,
+      url: appendDirectoryQuery(`${root}/session/${encodedSession}/prompt_async`, directory),
       body: { agent, parts: [{ type: "text", text }] },
       accept: (response, data) => {
         if (response.status !== 204 && !response.ok) return null;
@@ -9761,7 +9767,17 @@ async function sendOpenCodeSessionEventDirect({ baseUrl, sessionId, text, agent,
   }
   throw firstError || new Error("OpenCode direct prompt delivery failed.");
 }
-async function callOpenCodePromptWithFallbacks(method, sessionId, flatPayload, structuredPayload) {
+function tagOpenCodePromptResult(result, deliveryMethod) {
+  if (result && typeof result === "object") {
+    try {
+      Object.defineProperty(result, "__optimaPromptDelivery", { value: deliveryMethod, enumerable: false, configurable: true });
+    } catch {
+      return { result, __optimaPromptDelivery: deliveryMethod };
+    }
+  }
+  return result;
+}
+async function callOpenCodePromptWithFallbacks(method, sessionId, flatPayload, structuredPayload, deliveryMethod) {
   const attempts = [
     { ...structuredPayload, path: { id: sessionId } },
     { ...structuredPayload, path: { sessionID: sessionId } },
@@ -9771,14 +9787,14 @@ async function callOpenCodePromptWithFallbacks(method, sessionId, flatPayload, s
   let firstError = null;
   for (const attempt of attempts) {
     try {
-      return assertOpenCodePromptAccepted(await method(attempt));
+      return tagOpenCodePromptResult(assertOpenCodePromptAccepted(await method(attempt)), deliveryMethod);
     } catch (error) {
       firstError ??= error;
     }
   }
   throw firstError;
 }
-async function sendOpenCodeSessionEvent(client, { sessionId, agent, text, directory, opencodeBaseUrl, baseUrl, fetchImpl, direct = false, legacyOnly = false } = {}) {
+async function sendOpenCodeSessionEvent(client, { sessionId, agent, text, directory, opencodeBaseUrl, baseUrl, fetchImpl, direct = false, legacyOnly = false, allowDirectFallback = true } = {}) {
   const directBaseUrl = opencodeBaseUrl || baseUrl;
   const parts = [{ type: "text", text }];
   const flatPayload = { directory, agent, parts };
@@ -9788,21 +9804,21 @@ async function sendOpenCodeSessionEvent(client, { sessionId, agent, text, direct
     body: { agent, parts }
   };
   let firstError = null;
-  if (!direct && typeof client?.session?.promptAsync === "function") {
+  if (!direct && typeof client?.session?.prompt === "function") {
     try {
-      return await callOpenCodePromptWithFallbacks(client.session.promptAsync.bind(client.session), sessionId, flatPayload, structuredPayload);
+      return await callOpenCodePromptWithFallbacks(client.session.prompt.bind(client.session), sessionId, flatPayload, structuredPayload, "prompt");
     } catch (error) {
       firstError ??= error;
     }
   }
-  if (!direct && typeof client?.session?.prompt === "function") {
+  if (!direct && typeof client?.session?.promptAsync === "function") {
     try {
-      return await callOpenCodePromptWithFallbacks(client.session.prompt.bind(client.session), sessionId, flatPayload, structuredPayload);
+      return await callOpenCodePromptWithFallbacks(client.session.promptAsync.bind(client.session), sessionId, flatPayload, structuredPayload, "prompt_async");
     } catch (error) {
       firstError ??= error;
     }
   }
-  if (directBaseUrl) return sendOpenCodeSessionEventDirect({ baseUrl: directBaseUrl, sessionId, text, agent, fetchImpl, legacyOnly });
+  if (allowDirectFallback && directBaseUrl) return sendOpenCodeSessionEventDirect({ baseUrl: directBaseUrl, sessionId, text, agent, directory, fetchImpl, legacyOnly });
   if (firstError) throw firstError;
   throw new Error("OpenCode client does not expose session.prompt or session.promptAsync.");
 }
@@ -9837,6 +9853,11 @@ function openCodeMessageText(message) {
   for (const part of partList) parts.push(part?.text, part?.content);
   return parts.filter((value) => typeof value === "string").join("\n");
 }
+function openCodeMessageStableKey(message, index = 0) {
+  const id = message?.id || message?.messageID || message?.messageId || message?.data?.id || null;
+  if (id) return `id:${id}`;
+  return `idx:${index}:text:${openCodeMessageText(message)}`;
+}
 async function verifyOpenCodeSessionEventDelivery(client, { sessionId, beforeMessages = null, expectedText = "", markers = [], attempts = 8, delayMs = 250 } = {}) {
   let lastError = "message_verification_unavailable";
   for (let attempt = 0; attempt < Math.max(1, attempts); attempt += 1) {
@@ -9844,13 +9865,15 @@ async function verifyOpenCodeSessionEventDelivery(client, { sessionId, beforeMes
       const afterMessages = await readOpenCodeSessionMessages(client, { sessionId, limit: 50 });
       if (!afterMessages) return { ok: false, reason: "message_verification_unavailable" };
       const beforeCount = Array.isArray(beforeMessages) ? beforeMessages.length : null;
-      const lastMessage = afterMessages.at(-1) || null;
+      const beforeKeys = Array.isArray(beforeMessages) ? new Set(beforeMessages.map(openCodeMessageStableKey)) : null;
+      const newMessages = beforeKeys ? afterMessages.filter((message, index) => !beforeKeys.has(openCodeMessageStableKey(message, index))) : afterMessages;
+      const lastMessage = newMessages.at(-1) || afterMessages.at(-1) || null;
       const lastMessageId = lastMessage?.id || lastMessage?.messageID || lastMessage?.messageId || null;
       if (beforeCount !== null && afterMessages.length > beforeCount) return { ok: true, method: "message_count", beforeCount, afterCount: afterMessages.length, lastMessageId };
       const textNeedles = [expectedText, ...markers].map((value) => String(value || "").trim()).filter(Boolean);
-      const haystack = afterMessages.slice(-20).map(openCodeMessageText).join("\n");
+      const haystack = newMessages.slice(-20).map(openCodeMessageText).join("\n");
       const matched = textNeedles.find((needle) => haystack.includes(needle));
-      if (matched) return { ok: true, method: "message_text", marker: matched, beforeCount, afterCount: afterMessages.length, lastMessageId };
+      if (matched && (!beforeKeys || newMessages.length > 0)) return { ok: true, method: "message_text", marker: matched, beforeCount, afterCount: afterMessages.length, lastMessageId };
       lastError = "message_not_visible";
     } catch (error) {
       lastError = error.message || "message_verification_failed";
@@ -9873,46 +9896,44 @@ async function applyClickUpBlockerTag({ clickupClient, worktree, taskId, reason,
     return { ok: false, error: error.message, tagName };
   }
 }
+function openCodeBlockingPromptVerification(result, sessionId) {
+  if (result?.__optimaPromptDelivery !== "prompt") return null;
+  const response = result?.response ?? result;
+  const data = response?.data ?? result?.data ?? null;
+  const parts = normalizePromptResponseParts(result);
+  const messageId = data?.id ?? response?.id ?? result?.id ?? data?.messageID ?? response?.messageID ?? result?.messageID;
+  const deliveredSessionId = response?.sessionID ?? response?.sessionId ?? data?.sessionID ?? data?.sessionId ?? result?.sessionID ?? result?.sessionId;
+  if (deliveredSessionId && String(deliveredSessionId) !== String(sessionId)) {
+    throw new Error(`OpenCode blocking prompt targeted foreign session ${deliveredSessionId}.`);
+  }
+  if (parts.length > 0 || messageId) return { ok: true, method: parts.length > 0 ? "blocking_prompt_parts" : "blocking_prompt_message", messageId: messageId ? String(messageId) : null, sessionId: deliveredSessionId ? String(deliveredSessionId) : String(sessionId), parts: parts.length };
+  return null;
+}
 async function deliverClickUpSessionEventWithVerification({ openCodeClient, sendSessionEvent, clickupClient, worktree, taskId, sessionId, agent, text, directory, opencodeBaseUrl, eventMarkers = [], verifySessionEventDelivery = verifyOpenCodeSessionEventDelivery, applyBlockerOnFailure = true } = {}) {
   const beforeMessages = await readOpenCodeSessionMessages(openCodeClient, { sessionId, limit: 50 }).catch(() => null);
-  const sendResult = await sendSessionEvent(openCodeClient, { sessionId, agent, text, directory, opencodeBaseUrl });
+  const sendResult = await sendSessionEvent(openCodeClient, { sessionId, agent, text, directory, opencodeBaseUrl, allowDirectFallback: false });
+  let blockingPromptVerification = null;
   let admissionVerification = null;
   try {
-    admissionVerification = openCodePromptAdmissionVerification(sendResult, sessionId);
+    blockingPromptVerification = openCodeBlockingPromptVerification(sendResult, sessionId);
+    if (!blockingPromptVerification) admissionVerification = openCodePromptAdmissionVerification(sendResult, sessionId);
   } catch (error) {
     appendClickUpWebhookLocalLog(worktree, { type: "message_delivery_failed", taskId, sessionId, reason: error.message, fallbackAttempted: false });
     if (!applyBlockerOnFailure) return { ok: false, action: "message_delivery_failed", reason: error.message, taskId, sessionId, fallbackAttempted: false };
     const blocker2 = await applyClickUpBlockerTag({ clickupClient, worktree, taskId, reason: error.message, source: "delivery_admission_failed" });
     return { ok: false, action: "message_delivery_failed", reason: error.message, taskId, sessionId, fallbackAttempted: false, blockerTag: blocker2 };
   }
+  if (blockingPromptVerification) return { ok: true, verification: blockingPromptVerification, admissionVerification: null, fallback: false };
   let verification = await verifySessionEventDelivery(openCodeClient, { sessionId, beforeMessages, expectedText: text, markers: eventMarkers });
   if (verification?.ok) return { ok: true, verification, admissionVerification, fallback: false };
-  if (verification?.reason === "message_verification_unavailable" && !admissionVerification) {
-    return { ok: true, verification: { ok: true, method: "legacy_prompt_accepted", skipped: true }, fallback: false };
-  }
   if (admissionVerification) {
     appendClickUpWebhookLocalLog(worktree, { type: "message_delivery_admitted_but_invisible", taskId, sessionId, admission: admissionVerification, reason: verification?.reason || "message_not_visible" });
   }
-  const canFallbackDirect = Boolean(opencodeBaseUrl);
-  if (canFallbackDirect) {
-    const retryBeforeMessages = await readOpenCodeSessionMessages(openCodeClient, { sessionId, limit: 50 }).catch(() => beforeMessages);
-    const retrySendResult = await sendSessionEvent(openCodeClient, { sessionId, agent, text, directory, opencodeBaseUrl, direct: true, legacyOnly: Boolean(admissionVerification) });
-    try {
-      admissionVerification = openCodePromptAdmissionVerification(retrySendResult, sessionId);
-    } catch (error) {
-      verification = { ok: false, reason: error.message };
-    }
-    verification = await verifySessionEventDelivery(openCodeClient, { sessionId, beforeMessages: retryBeforeMessages, expectedText: text, markers: eventMarkers });
-    if (verification?.ok) return { ok: true, verification, admissionVerification, fallback: true };
-    if (verification?.reason === "message_verification_unavailable" && !admissionVerification) {
-      return { ok: true, verification: { ok: true, method: "legacy_prompt_accepted", skipped: true }, fallback: true };
-    }
-  }
-  const reason = verification?.reason || "message_delivery_failed";
-  appendClickUpWebhookLocalLog(worktree, { type: "message_delivery_failed", taskId, sessionId, reason, fallbackAttempted: canFallbackDirect });
-  if (!applyBlockerOnFailure) return { ok: false, action: "message_delivery_failed", reason, taskId, sessionId, fallbackAttempted: canFallbackDirect };
-  const blocker = await applyClickUpBlockerTag({ clickupClient, worktree, taskId, reason, source: canFallbackDirect ? "delivery_fallback_failed" : "delivery_verification_failed" });
-  return { ok: false, action: "message_delivery_failed", reason, taskId, sessionId, fallbackAttempted: canFallbackDirect, blockerTag: blocker };
+  const reason = verification?.reason || (admissionVerification ? "prompt_admission_not_delivered" : "message_delivery_failed");
+  appendClickUpWebhookLocalLog(worktree, { type: "message_delivery_failed", taskId, sessionId, reason, fallbackAttempted: false, httpFallbackDisabled: Boolean(opencodeBaseUrl) });
+  if (!applyBlockerOnFailure) return { ok: false, action: "message_delivery_failed", reason, taskId, sessionId, fallbackAttempted: false };
+  const blocker = await applyClickUpBlockerTag({ clickupClient, worktree, taskId, reason, source: "delivery_verification_failed" });
+  return { ok: false, action: "message_delivery_failed", reason, taskId, sessionId, fallbackAttempted: false, blockerTag: blocker };
 }
 async function recoverClickUpPmSession({ openCodeClient, sendSessionEvent, clickupClient, worktree, taskId, staleSessionId, sessionTitle, taskRoute, metadataWithRouting, config, prompt, eventMarkers = [], deliveryEvidencePath, evidencePath, eventKey, createSession, verifySessionEventDelivery } = {}) {
   appendClickUpWebhookLocalLog(worktree, { type: "pm_session_recovery_started", taskId, staleSessionId, worktree: taskRoute?.worktree });

package/dist/sanitize_cli.js

@@ -9726,7 +9726,13 @@ async function readOpenCodeJsonResponse(response, endpointName) {
     return { raw };
   }
 }
-async function sendOpenCodeSessionEventDirect({ baseUrl, sessionId, text, agent, fetchImpl = globalThis.fetch, legacyOnly = false } = {}) {
+function appendDirectoryQuery(url, directory) {
+  const value = String(directory || "").trim();
+  if (!value) return url;
+  const separator = url.includes("?") ? "&" : "?";
+  return `${url}${separator}directory=${encodeURIComponent(value)}`;
+}
+async function sendOpenCodeSessionEventDirect({ baseUrl, sessionId, text, agent, directory, fetchImpl = globalThis.fetch, legacyOnly = false } = {}) {
   if (typeof fetchImpl !== "function") throw new Error("OpenCode direct prompt delivery requires fetch.");
   const root = normalizeOpenCodeBaseUrl(baseUrl, "");
   if (!root) throw new Error("OpenCode direct prompt delivery requires a base URL.");
@@ -9734,7 +9740,7 @@ async function sendOpenCodeSessionEventDirect({ baseUrl, sessionId, text, agent,
   const attempts = [
     legacyOnly ? null : {
       name: "v2 prompt",
-      url: `${root}/api/session/${encodedSession}/prompt`,
+      url: appendDirectoryQuery(`${root}/api/session/${encodedSession}/prompt`, directory),
       body: { prompt: { text }, delivery: "queue", resume: true },
       accept: (response, data) => {
         if (!response.ok) return null;
@@ -9744,7 +9750,7 @@ async function sendOpenCodeSessionEventDirect({ baseUrl, sessionId, text, agent,
     },
     {
       name: "legacy async prompt",
-      url: `${root}/session/${encodedSession}/prompt_async`,
+      url: appendDirectoryQuery(`${root}/session/${encodedSession}/prompt_async`, directory),
       body: { agent, parts: [{ type: "text", text }] },
       accept: (response, data) => {
         if (response.status !== 204 && !response.ok) return null;
@@ -9768,7 +9774,17 @@ async function sendOpenCodeSessionEventDirect({ baseUrl, sessionId, text, agent,
   }
   throw firstError || new Error("OpenCode direct prompt delivery failed.");
 }
-async function callOpenCodePromptWithFallbacks(method, sessionId, flatPayload, structuredPayload) {
+function tagOpenCodePromptResult(result, deliveryMethod) {
+  if (result && typeof result === "object") {
+    try {
+      Object.defineProperty(result, "__optimaPromptDelivery", { value: deliveryMethod, enumerable: false, configurable: true });
+    } catch {
+      return { result, __optimaPromptDelivery: deliveryMethod };
+    }
+  }
+  return result;
+}
+async function callOpenCodePromptWithFallbacks(method, sessionId, flatPayload, structuredPayload, deliveryMethod) {
   const attempts = [
     { ...structuredPayload, path: { id: sessionId } },
     { ...structuredPayload, path: { sessionID: sessionId } },
@@ -9778,14 +9794,14 @@ async function callOpenCodePromptWithFallbacks(method, sessionId, flatPayload, s
   let firstError = null;
   for (const attempt of attempts) {
     try {
-      return assertOpenCodePromptAccepted(await method(attempt));
+      return tagOpenCodePromptResult(assertOpenCodePromptAccepted(await method(attempt)), deliveryMethod);
     } catch (error) {
       firstError ??= error;
     }
   }
   throw firstError;
 }
-async function sendOpenCodeSessionEvent(client, { sessionId, agent, text, directory, opencodeBaseUrl, baseUrl, fetchImpl, direct = false, legacyOnly = false } = {}) {
+async function sendOpenCodeSessionEvent(client, { sessionId, agent, text, directory, opencodeBaseUrl, baseUrl, fetchImpl, direct = false, legacyOnly = false, allowDirectFallback = true } = {}) {
   const directBaseUrl = opencodeBaseUrl || baseUrl;
   const parts = [{ type: "text", text }];
   const flatPayload = { directory, agent, parts };
@@ -9795,21 +9811,21 @@ async function sendOpenCodeSessionEvent(client, { sessionId, agent, text, direct
     body: { agent, parts }
   };
   let firstError = null;
-  if (!direct && typeof client?.session?.promptAsync === "function") {
+  if (!direct && typeof client?.session?.prompt === "function") {
     try {
-      return await callOpenCodePromptWithFallbacks(client.session.promptAsync.bind(client.session), sessionId, flatPayload, structuredPayload);
+      return await callOpenCodePromptWithFallbacks(client.session.prompt.bind(client.session), sessionId, flatPayload, structuredPayload, "prompt");
     } catch (error) {
       firstError ??= error;
     }
   }
-  if (!direct && typeof client?.session?.prompt === "function") {
+  if (!direct && typeof client?.session?.promptAsync === "function") {
     try {
-      return await callOpenCodePromptWithFallbacks(client.session.prompt.bind(client.session), sessionId, flatPayload, structuredPayload);
+      return await callOpenCodePromptWithFallbacks(client.session.promptAsync.bind(client.session), sessionId, flatPayload, structuredPayload, "prompt_async");
     } catch (error) {
       firstError ??= error;
     }
   }
-  if (directBaseUrl) return sendOpenCodeSessionEventDirect({ baseUrl: directBaseUrl, sessionId, text, agent, fetchImpl, legacyOnly });
+  if (allowDirectFallback && directBaseUrl) return sendOpenCodeSessionEventDirect({ baseUrl: directBaseUrl, sessionId, text, agent, directory, fetchImpl, legacyOnly });
   if (firstError) throw firstError;
   throw new Error("OpenCode client does not expose session.prompt or session.promptAsync.");
 }
@@ -9844,6 +9860,11 @@ function openCodeMessageText(message) {
   for (const part of partList) parts.push(part?.text, part?.content);
   return parts.filter((value) => typeof value === "string").join("\n");
 }
+function openCodeMessageStableKey(message, index = 0) {
+  const id = message?.id || message?.messageID || message?.messageId || message?.data?.id || null;
+  if (id) return `id:${id}`;
+  return `idx:${index}:text:${openCodeMessageText(message)}`;
+}
 async function verifyOpenCodeSessionEventDelivery(client, { sessionId, beforeMessages = null, expectedText = "", markers = [], attempts = 8, delayMs = 250 } = {}) {
   let lastError = "message_verification_unavailable";
   for (let attempt = 0; attempt < Math.max(1, attempts); attempt += 1) {
@@ -9851,13 +9872,15 @@ async function verifyOpenCodeSessionEventDelivery(client, { sessionId, beforeMes
       const afterMessages = await readOpenCodeSessionMessages(client, { sessionId, limit: 50 });
       if (!afterMessages) return { ok: false, reason: "message_verification_unavailable" };
       const beforeCount = Array.isArray(beforeMessages) ? beforeMessages.length : null;
-      const lastMessage = afterMessages.at(-1) || null;
+      const beforeKeys = Array.isArray(beforeMessages) ? new Set(beforeMessages.map(openCodeMessageStableKey)) : null;
+      const newMessages = beforeKeys ? afterMessages.filter((message, index) => !beforeKeys.has(openCodeMessageStableKey(message, index))) : afterMessages;
+      const lastMessage = newMessages.at(-1) || afterMessages.at(-1) || null;
       const lastMessageId = lastMessage?.id || lastMessage?.messageID || lastMessage?.messageId || null;
       if (beforeCount !== null && afterMessages.length > beforeCount) return { ok: true, method: "message_count", beforeCount, afterCount: afterMessages.length, lastMessageId };
       const textNeedles = [expectedText, ...markers].map((value) => String(value || "").trim()).filter(Boolean);
-      const haystack = afterMessages.slice(-20).map(openCodeMessageText).join("\n");
+      const haystack = newMessages.slice(-20).map(openCodeMessageText).join("\n");
       const matched = textNeedles.find((needle) => haystack.includes(needle));
-      if (matched) return { ok: true, method: "message_text", marker: matched, beforeCount, afterCount: afterMessages.length, lastMessageId };
+      if (matched && (!beforeKeys || newMessages.length > 0)) return { ok: true, method: "message_text", marker: matched, beforeCount, afterCount: afterMessages.length, lastMessageId };
       lastError = "message_not_visible";
     } catch (error) {
       lastError = error.message || "message_verification_failed";
@@ -9880,46 +9903,44 @@ async function applyClickUpBlockerTag({ clickupClient, worktree, taskId, reason,
     return { ok: false, error: error.message, tagName };
   }
 }
+function openCodeBlockingPromptVerification(result, sessionId) {
+  if (result?.__optimaPromptDelivery !== "prompt") return null;
+  const response = result?.response ?? result;
+  const data = response?.data ?? result?.data ?? null;
+  const parts = normalizePromptResponseParts(result);
+  const messageId = data?.id ?? response?.id ?? result?.id ?? data?.messageID ?? response?.messageID ?? result?.messageID;
+  const deliveredSessionId = response?.sessionID ?? response?.sessionId ?? data?.sessionID ?? data?.sessionId ?? result?.sessionID ?? result?.sessionId;
+  if (deliveredSessionId && String(deliveredSessionId) !== String(sessionId)) {
+    throw new Error(`OpenCode blocking prompt targeted foreign session ${deliveredSessionId}.`);
+  }
+  if (parts.length > 0 || messageId) return { ok: true, method: parts.length > 0 ? "blocking_prompt_parts" : "blocking_prompt_message", messageId: messageId ? String(messageId) : null, sessionId: deliveredSessionId ? String(deliveredSessionId) : String(sessionId), parts: parts.length };
+  return null;
+}
 async function deliverClickUpSessionEventWithVerification({ openCodeClient, sendSessionEvent, clickupClient, worktree, taskId, sessionId, agent, text, directory, opencodeBaseUrl, eventMarkers = [], verifySessionEventDelivery = verifyOpenCodeSessionEventDelivery, applyBlockerOnFailure = true } = {}) {
   const beforeMessages = await readOpenCodeSessionMessages(openCodeClient, { sessionId, limit: 50 }).catch(() => null);
-  const sendResult = await sendSessionEvent(openCodeClient, { sessionId, agent, text, directory, opencodeBaseUrl });
+  const sendResult = await sendSessionEvent(openCodeClient, { sessionId, agent, text, directory, opencodeBaseUrl, allowDirectFallback: false });
+  let blockingPromptVerification = null;
   let admissionVerification = null;
   try {
-    admissionVerification = openCodePromptAdmissionVerification(sendResult, sessionId);
+    blockingPromptVerification = openCodeBlockingPromptVerification(sendResult, sessionId);
+    if (!blockingPromptVerification) admissionVerification = openCodePromptAdmissionVerification(sendResult, sessionId);
   } catch (error) {
     appendClickUpWebhookLocalLog(worktree, { type: "message_delivery_failed", taskId, sessionId, reason: error.message, fallbackAttempted: false });
     if (!applyBlockerOnFailure) return { ok: false, action: "message_delivery_failed", reason: error.message, taskId, sessionId, fallbackAttempted: false };
     const blocker2 = await applyClickUpBlockerTag({ clickupClient, worktree, taskId, reason: error.message, source: "delivery_admission_failed" });
     return { ok: false, action: "message_delivery_failed", reason: error.message, taskId, sessionId, fallbackAttempted: false, blockerTag: blocker2 };
   }
+  if (blockingPromptVerification) return { ok: true, verification: blockingPromptVerification, admissionVerification: null, fallback: false };
   let verification = await verifySessionEventDelivery(openCodeClient, { sessionId, beforeMessages, expectedText: text, markers: eventMarkers });
   if (verification?.ok) return { ok: true, verification, admissionVerification, fallback: false };
-  if (verification?.reason === "message_verification_unavailable" && !admissionVerification) {
-    return { ok: true, verification: { ok: true, method: "legacy_prompt_accepted", skipped: true }, fallback: false };
-  }
   if (admissionVerification) {
     appendClickUpWebhookLocalLog(worktree, { type: "message_delivery_admitted_but_invisible", taskId, sessionId, admission: admissionVerification, reason: verification?.reason || "message_not_visible" });
   }
-  const canFallbackDirect = Boolean(opencodeBaseUrl);
-  if (canFallbackDirect) {
-    const retryBeforeMessages = await readOpenCodeSessionMessages(openCodeClient, { sessionId, limit: 50 }).catch(() => beforeMessages);
-    const retrySendResult = await sendSessionEvent(openCodeClient, { sessionId, agent, text, directory, opencodeBaseUrl, direct: true, legacyOnly: Boolean(admissionVerification) });
-    try {
-      admissionVerification = openCodePromptAdmissionVerification(retrySendResult, sessionId);
-    } catch (error) {
-      verification = { ok: false, reason: error.message };
-    }
-    verification = await verifySessionEventDelivery(openCodeClient, { sessionId, beforeMessages: retryBeforeMessages, expectedText: text, markers: eventMarkers });
-    if (verification?.ok) return { ok: true, verification, admissionVerification, fallback: true };
-    if (verification?.reason === "message_verification_unavailable" && !admissionVerification) {
-      return { ok: true, verification: { ok: true, method: "legacy_prompt_accepted", skipped: true }, fallback: true };
-    }
-  }
-  const reason = verification?.reason || "message_delivery_failed";
-  appendClickUpWebhookLocalLog(worktree, { type: "message_delivery_failed", taskId, sessionId, reason, fallbackAttempted: canFallbackDirect });
-  if (!applyBlockerOnFailure) return { ok: false, action: "message_delivery_failed", reason, taskId, sessionId, fallbackAttempted: canFallbackDirect };
-  const blocker = await applyClickUpBlockerTag({ clickupClient, worktree, taskId, reason, source: canFallbackDirect ? "delivery_fallback_failed" : "delivery_verification_failed" });
-  return { ok: false, action: "message_delivery_failed", reason, taskId, sessionId, fallbackAttempted: canFallbackDirect, blockerTag: blocker };
+  const reason = verification?.reason || (admissionVerification ? "prompt_admission_not_delivered" : "message_delivery_failed");
+  appendClickUpWebhookLocalLog(worktree, { type: "message_delivery_failed", taskId, sessionId, reason, fallbackAttempted: false, httpFallbackDisabled: Boolean(opencodeBaseUrl) });
+  if (!applyBlockerOnFailure) return { ok: false, action: "message_delivery_failed", reason, taskId, sessionId, fallbackAttempted: false };
+  const blocker = await applyClickUpBlockerTag({ clickupClient, worktree, taskId, reason, source: "delivery_verification_failed" });
+  return { ok: false, action: "message_delivery_failed", reason, taskId, sessionId, fallbackAttempted: false, blockerTag: blocker };
 }
 async function recoverClickUpPmSession({ openCodeClient, sendSessionEvent, clickupClient, worktree, taskId, staleSessionId, sessionTitle, taskRoute, metadataWithRouting, config, prompt, eventMarkers = [], deliveryEvidencePath, evidencePath, eventKey, createSession, verifySessionEventDelivery } = {}) {
   appendClickUpWebhookLocalLog(worktree, { type: "pm_session_recovery_started", taskId, staleSessionId, worktree: taskRoute?.worktree });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@defend-tech/opencode-optima",
-  "version": "0.1.50",
+  "version": "0.1.52",
   "repository": {
     "type": "git",
     "url": "git+ssh://git@github.com/defend-tech/opencode-optima.git"