opencode-immune 1.0.38 → 1.0.40

package/dist/plugin.js

@@ -11,7 +11,7 @@ const child_process_1 = require("child_process");
 // ═══════════════════════════════════════════════════════════════════════════════
 // PLUGIN VERSION CHECK
 // ═══════════════════════════════════════════════════════════════════════════════
-const PLUGIN_VERSION = "1.0.38";
+const PLUGIN_VERSION = "1.0.40";
 const PLUGIN_PACKAGE_NAME = "opencode-immune";
 /**
  * Read plugin version from package.json at runtime.
@@ -294,6 +294,13 @@ function isRetryableApiError(error) {
         message.includes("timeout") ||
         message.includes("sse read") ||
         message.includes("stream error") ||
+        // Certificate/TLS provider failures must pass this primary retry gate
+        // before the managed-session fallback model branch can run.
+        message.includes("unknown certificate verification error") ||
+        message.includes("certificate has expired") ||
+        message.includes("certificate verification") ||
+        message.includes("tls") ||
+        message.includes("ssl") ||
         message.includes("connection reset") ||
         message.includes("socket hang up") ||
         message.includes("aborted")) {
@@ -343,6 +350,9 @@ function isCertificateApiError(error) {
         type.includes("tls") ||
         type.includes("ssl"));
 }
+function isProviderRetryBanner(text) {
+    return /(?:<none>\s*)?retrying in \d+s\s*-\s*attempt #\d+/i.test(text);
+}
 async function setSessionFallbackModel(state, sessionID, model) {
     const existing = state.managedUltraworkSessions.get(sessionID);
     if (!existing)
@@ -1463,6 +1473,23 @@ function createTextCompleteHandler(state) {
         const text = output.text ?? "";
         if (!text)
             return;
+        // Some provider/SDK failures render as a retry banner instead of a
+        // session.error event, leaving the UI waiting for long internal backoff.
+        if (isProviderRetryBanner(text) && isManagedUltraworkSession(state, sessionID)) {
+            const managedSession = getManagedSession(state, sessionID);
+            const fallbackModel = managedSession?.kind === "child"
+                ? CHILD_SESSION_FALLBACK_MODEL
+                : RATE_LIMIT_FALLBACK_MODEL;
+            await setSessionFallbackModel(state, sessionID, fallbackModel);
+            scheduleManagedSessionRetry(state, sessionID, {
+                delayMs: 1_000,
+                reason: "provider retry banner fallback",
+                countAgainstBudget: false,
+                abortBeforePrompt: true,
+            });
+            console.log(`[opencode-immune] Provider retry banner detected for session ${sessionID}. ` +
+                `Fallback model pinned to ${fallbackModel.providerID}/${fallbackModel.modelID}.`);
+        }
         // ── ALL_CYCLES_COMPLETE: clear ultrawork marker ──
         if (text.includes(ALL_CYCLES_COMPLETE_MARKER)) {
             await clearUltraworkMarker(state);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-immune",
-  "version": "1.0.38",
+  "version": "1.0.40",
   "description": "OpenCode plugin: session recovery, auto-retry, multi-cycle automation, context monitoring",
   "exports": {
     "./server": "./dist/plugin.js"