opencodekit 0.18.19 → 0.18.20

package/dist/index.js

@@ -20,7 +20,7 @@ var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 //#endregion
 //#region package.json
-var version = "0.18.19";
+var version = "0.18.20";
 
 //#endregion
 //#region src/utils/license.ts

package/dist/template/.opencode/plugin/copilot-auth.ts

@@ -360,49 +360,66 @@ function swapModelInBody(
 
 // Maximum length for item IDs in the OpenAI Responses API
 const MAX_RESPONSE_API_ID_LENGTH = 64;
+// OpenAI Responses API only allows: letters, numbers, underscores, dashes
+const INVALID_ID_CHARS = /[^a-zA-Z0-9_-]/g;
+
+/** Check if an ID contains characters not allowed by the Responses API */
+function hasInvalidIdChars(id: string): boolean {
+	// Use a non-global regex for .test() to avoid lastIndex state bug
+	return /[^a-zA-Z0-9_-]/.test(id);
+}
+
 /**
- * Sanitize an ID to fit within the Responses API 64-char limit.
- * GitHub Copilot returns proprietary long IDs (400+ chars) that violate
- * the OpenAI spec. We hash them to a deterministic 64-char string.
- * Preserves the original prefix (e.g., "fc_", "msg_", "call_") so that
- * OpenAI's prefix validation passes.
+ * Sanitize an ID for the Responses API.
+ * Handles three issues from GitHub Copilot:
+ * 1. Invalid characters — Copilot IDs contain +, |, /, = (base64-like encoding)
+ * 2. Wrong prefix — GPT models return "h_" instead of "fc_" for function_call items
+ * 3. Excessive length — Copilot returns 400+ char IDs (max is 64)
+ *
+ * Approach matches anomalyco/opencode: replace invalid chars with "_", preserve prefix,
+ * truncate to 64 chars, strip trailing underscores.
  *
  * @param id - The original ID to sanitize
  * @param forcedPrefix - If provided, use this prefix instead of the detected one.
- *   Used when the original prefix is wrong (e.g., Copilot returns "h_" instead of "fc_").
  * See: https://github.com/vercel/ai/issues/5171
  */
 function sanitizeResponseId(id: string, forcedPrefix?: string): string {
+	if (!id) return id;
+
 	// Detect the original prefix (e.g., "fc_", "msg_", "call_", "resp_", "h_")
 	const prefixMatch = id.match(/^([a-z]+_)/);
 	const detectedPrefix = prefixMatch ? prefixMatch[1] : "";
 	const prefix = forcedPrefix ?? detectedPrefix;
 
-	// If no forced prefix and within length, return as-is
-	if (!forcedPrefix && (!id || id.length <= MAX_RESPONSE_API_ID_LENGTH)) {
-		return id;
-	}
-
 	// Strip the original prefix to get the core ID
-	const coreId = id.slice(detectedPrefix.length);
+	const rawCore = id.slice(detectedPrefix.length);
+	// Replace invalid characters with underscores (same as anomalyco/opencode)
+	const cleanCore = rawCore.replace(INVALID_ID_CHARS, "_").replace(/_+$/g, "");
+
+	// Check if any sanitization is actually needed
+	const needsSanitization = forcedPrefix || hasInvalidIdChars(rawCore) ||
+		id.length > MAX_RESPONSE_API_ID_LENGTH;
+
+	if (!needsSanitization) return id;
 
-	// If just a prefix swap and within length, do a simple replacement
-	if (forcedPrefix && (prefix.length + coreId.length) <= MAX_RESPONSE_API_ID_LENGTH) {
-		return `${prefix}${coreId}`;
+	// If result fits within length and core is non-empty, use cleaned core directly
+	if (cleanCore.length > 0 && (prefix.length + cleanCore.length) <= MAX_RESPONSE_API_ID_LENGTH) {
+		return `${prefix}${cleanCore}`;
 	}
 
-	// Hash the full original ID for deterministic uniqueness
+	// Hash the full original ID for deterministic uniqueness when truncating
 	let hash = 0;
 	for (let i = 0; i < id.length; i++) {
 		hash = ((hash << 5) - hash + id.charCodeAt(i)) | 0;
 	}
 	const hashStr = Math.abs(hash).toString(36);
-	// Take some chars from the core for additional uniqueness
 	const maxMiddleLen =
 		MAX_RESPONSE_API_ID_LENGTH - prefix.length - hashStr.length - 1;
-	const middle = coreId.slice(0, Math.max(0, maxMiddleLen));
+	const middle = cleanCore.slice(0, Math.max(0, maxMiddleLen));
 	// Format: prefix + middle + "_" + hash (ensure total <= 64)
-	return `${prefix}${middle}_${hashStr}`.slice(0, MAX_RESPONSE_API_ID_LENGTH);
+	const result = `${prefix}${middle}_${hashStr}`.slice(0, MAX_RESPONSE_API_ID_LENGTH);
+	// Strip trailing underscores from truncation
+	return result.replace(/_+$/, "");
 }
 
 /**
@@ -419,16 +436,21 @@ function getExpectedPrefix(item: any): string | null {
 	return null;
 }
 
+/** Check if a string ID needs sanitization (invalid chars or too long) */
+function idNeedsSanitization(id: string): boolean {
+	return id.length > MAX_RESPONSE_API_ID_LENGTH || hasInvalidIdChars(id);
+}
+
 /**
  * Sanitize all IDs in a Responses API input array.
  *
- * Handles TWO classes of invalid IDs:
- * 1. Wrong prefix — Copilot GPT models return IDs like "h_xxx" instead of "fc_xxx"
- *    for function_call items. These are short but have the wrong prefix.
- * 2. Excessive length — Copilot returns 400+ char IDs that exceed the 64-char limit.
+ * Handles THREE classes of invalid IDs:
+ * 1. Invalid characters — Copilot IDs contain +, |, /, = (only [a-zA-Z0-9_-] allowed)
+ * 2. Wrong prefix — Copilot GPT models return IDs like "h_xxx" instead of "fc_xxx"
+ * 3. Excessive length — Copilot returns 400+ char IDs that exceed the 64-char limit.
  *
  * Uses a two-pass approach:
- * - Pass 1: Build an ID remap for all invalid IDs (both prefix and length issues)
+ * - Pass 1: Build an ID remap for all invalid IDs
  * - Pass 2: Apply the remap to both `id` and `call_id` fields consistently,
  *   so function_call_output.call_id stays in sync with function_call.id
  */
@@ -448,10 +470,10 @@ function sanitizeResponseInputIds(input: any[]): any[] {
 			}
 		}
 
-		// Check for excessive length on id
+		// Check for invalid chars or excessive length on id
 		if (
 			typeof item.id === "string" &&
-			item.id.length > MAX_RESPONSE_API_ID_LENGTH &&
+			idNeedsSanitization(item.id) &&
 			!idRemap.has(item.id)
 		) {
 			idRemap.set(item.id, sanitizeResponseId(item.id));
@@ -471,10 +493,10 @@ function sanitizeResponseInputIds(input: any[]): any[] {
 			}
 		}
 
-		// Check for excessive length on call_id
+		// Check for invalid chars or excessive length on call_id
 		if (
 			typeof item.call_id === "string" &&
-			item.call_id.length > MAX_RESPONSE_API_ID_LENGTH &&
+			idNeedsSanitization(item.call_id) &&
 			!idRemap.has(item.call_id)
 		) {
 			idRemap.set(item.call_id, sanitizeResponseId(item.call_id));

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "opencodekit",
-	"version": "0.18.19",
+	"version": "0.18.20",
 	"description": "CLI tool for bootstrapping and managing OpenCodeKit projects",
 	"keywords": [
 		"agents",