@opencode-ai/ai 0.0.0-dev-18049 → 0.0.0-dev-18051

package/dist/protocols/open-responses.d.ts

@@ -434,6 +434,7 @@ export declare const Event: Schema.StructWithRest<Schema.Struct<{
     readonly headers: Schema.optional<Schema.Unknown>;
 }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>;
 export type Event = Schema.Schema.Type<typeof Event>;
+export type ItemKind = "message" | "reasoning" | "function-call" | "reference";
 export interface Extension {
     readonly id: string;
     readonly name: string;
@@ -442,6 +443,7 @@ export interface Extension {
         readonly media: ProviderShared.NormalizedMedia;
         readonly request: LLMRequest;
     }) => MediaInput | undefined;
+    readonly acceptsItemID?: (kind: ItemKind, id: string) => boolean;
 }
 export interface ParserState {
     readonly id: string;

package/dist/protocols/open-responses.js

@@ -245,26 +245,34 @@ export const lowerToolChoice = (protocolName, toolChoice) => ProviderShared.matc
     required: () => "required",
     tool: (toolName) => ({ type: "function", name: toolName }),
 });
+// Servers validate item ids on replayed history, and a malformed or oversized
+// id can fail an otherwise valid request. Only server-issued tokens are worth
+// resending; anything else is treated as absent so the item is resent without
+// an id (or skipped, for items that cannot be expressed without one).
+const ITEM_ID_PATTERN = /^[A-Za-z0-9_-]{1,64}$/;
 const itemID = (providerMetadata, providerMetadataKey) => {
     const metadata = providerMetadata?.[providerMetadataKey];
-    return ProviderShared.isRecord(metadata) && typeof metadata.itemId === "string" && metadata.itemId.length > 0
+    return ProviderShared.isRecord(metadata) &&
+        typeof metadata.itemId === "string" &&
+        ITEM_ID_PATTERN.test(metadata.itemId)
         ? metadata.itemId
         : undefined;
 };
-const lowerToolCall = (part, providerMetadataKey) => {
+const acceptsItemID = (extension, kind, id) => id !== undefined && (extension.acceptsItemID?.(kind, id) ?? true);
+const lowerToolCall = (part, providerMetadataKey, extension) => {
     const id = itemID(part.providerMetadata, providerMetadataKey);
     return {
         type: "function_call",
-        ...(id ? { id } : {}),
+        ...(acceptsItemID(extension, "function-call", id) ? { id } : {}),
         call_id: part.id,
         name: part.name,
         arguments: ProviderShared.encodeJson(part.input),
     };
 };
-const lowerReasoning = (part, providerMetadataKey) => {
+const lowerReasoning = (part, providerMetadataKey, extension) => {
     const metadata = part.providerMetadata?.[providerMetadataKey];
     const id = itemID(part.providerMetadata, providerMetadataKey);
-    if (!ProviderShared.isRecord(metadata) || !id)
+    if (!ProviderShared.isRecord(metadata) || !acceptsItemID(extension, "reasoning", id))
         return undefined;
     const encryptedContent = typeof metadata.reasoningEncryptedContent === "string" || metadata.reasoningEncryptedContent === null
         ? metadata.reasoningEncryptedContent
@@ -359,7 +367,8 @@ const lowerMessages = Effect.fn("OpenResponses.lowerMessages")(function* (reques
                     return;
                 const groups = content.reduce((groups, part) => {
                     const metadata = part.providerMetadata?.[providerMetadataKey];
-                    const id = itemID(part.providerMetadata, providerMetadataKey);
+                    const rawID = itemID(part.providerMetadata, providerMetadataKey);
+                    const id = acceptsItemID(extension, "message", rawID) ? rawID : undefined;
                     const phase = ProviderShared.isRecord(metadata) ? messagePhase(metadata.phase) : undefined;
                     const group = groups.at(-1);
                     if (group && group.id === id && group.phase === phase)
@@ -384,7 +393,7 @@ const lowerMessages = Effect.fn("OpenResponses.lowerMessages")(function* (reques
                 }
                 if (part.type === "reasoning") {
                     flushText();
-                    const reasoning = lowerReasoning(part, providerMetadataKey);
+                    const reasoning = lowerReasoning(part, providerMetadataKey, extension);
                     if (!reasoning)
                         continue;
                     if (store !== false) {
@@ -408,14 +417,15 @@ const lowerMessages = Effect.fn("OpenResponses.lowerMessages")(function* (reques
                     flushText();
                     if (part.providerExecuted === true)
                         continue;
-                    input.push(lowerToolCall(part, providerMetadataKey));
+                    input.push(lowerToolCall(part, providerMetadataKey, extension));
                     continue;
                 }
                 if (part.type === "tool-result" && part.providerExecuted === true) {
                     flushText();
                     const id = itemID(part.providerMetadata, providerMetadataKey);
-                    if (store !== false && id && !hostedToolReferences.has(id))
-                        input.push({ type: "item_reference", id });
+                    const reference = acceptsItemID(extension, "reference", id) ? id : undefined;
+                    if (store !== false && reference && !hostedToolReferences.has(reference))
+                        input.push({ type: "item_reference", id: reference });
                     if (store === false) {
                         // The server is not storing this exchange, so the tool outcome has to
                         // travel in the input. Non-content results degrade to their text form.
@@ -427,8 +437,8 @@ const lowerMessages = Effect.fn("OpenResponses.lowerMessages")(function* (reques
                             content: yield* Effect.forEach(content, (item) => lowerHostedToolResultContentItem(item, request, extension)),
                         });
                     }
-                    if (id)
-                        hostedToolReferences.add(id);
+                    if (reference)
+                        hostedToolReferences.add(reference);
                     continue;
                 }
                 return yield* ProviderShared.unsupportedContent(extension.name, "assistant", [

package/dist/protocols/openai-responses.js

@@ -43,9 +43,27 @@ const OpenAIResponsesBody = Schema.Struct({
     ...OpenAIResponsesCoreFields,
     stream: Schema.Literal(true),
 });
+// Replayed items are paired with stored server state by id, so a foreign or
+// synthetic token can fail request validation even when `call_id` pairing is
+// intact. Only resend ids in each item kind's own grammar; hosted tool
+// references keep generic validation because every hosted tool mints its own
+// prefix. The same allowlist approach codex uses before resending history
+// (codex-rs core/src/client.rs, `prepare_response_items_for_request`).
+const ITEM_ID_PREFIXES = {
+    message: ["msg_"],
+    reasoning: ["rs_"],
+    "function-call": ["fc_"],
+    // Every hosted tool mints its own id prefix, so references keep generic
+    // validation only.
+    reference: [],
+};
 const extension = {
     id: ADAPTER,
     name: NAME,
+    acceptsItemID: (kind, id) => {
+        const prefixes = ITEM_ID_PREFIXES[kind];
+        return prefixes.length === 0 || prefixes.some((prefix) => id.startsWith(prefix));
+    },
 };
 const nativeImageToolInput = (tool) => {
     const native = tool.native?.openai;

package/package.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
-  "version": "0.0.0-dev-18049",
+  "version": "0.0.0-dev-18051",
   "name": "@opencode-ai/ai",
   "type": "module",
   "license": "MIT",
@@ -30,7 +30,7 @@
   "devDependencies": {
     "@clack/prompts": "1.0.0-alpha.1",
     "@effect/platform-node": "4.0.0-rc.111",
-    "@opencode-ai/http-recorder": "0.0.0-dev-18049",
+    "@opencode-ai/http-recorder": "0.0.0-dev-18051",
     "@tsconfig/bun": "1.0.9",
     "@types/bun": "1.3.13",
     "@typescript/native-preview": "7.0.0-dev.20251207.1",
@@ -39,7 +39,7 @@
   "dependencies": {
     "@smithy/eventstream-codec": "4.2.14",
     "@smithy/util-utf8": "4.2.2",
-    "@opencode-ai/schema": "0.0.0-dev-18049",
+    "@opencode-ai/schema": "0.0.0-dev-18051",
     "aws4fetch": "1.0.20",
     "effect": "4.0.0-rc.111",
     "google-auth-library": "10.5.0"