Distillation

Date: Sep 16, 2026

• 🔴 (22:46) Repository directory /home/byk/Code/opencode-lore-provider-error/scripts contains exactly 12 entries: bump-version.sh, cch-scan.c, check-cc-version.ts, check-docs-links.mjs, check-patches.ts, check-preview-links.mjs, check-social-meta.mjs, extract-cch-seed.ts, generate-config-docs.ts, generate-env-docs.ts, generate-release-checksums.mjs, and smoke-install.mjs.
• 🔴 (22:47) Start-of-review integrity evidence showed a clean working copy at empty child qnmstlolnsoz / commit 248b42ffd04c, parent qzwttkwltwzr / commit 493b0655a388, with conflict=false.
• 🔴 (22:47) Jujutsu warned that bookmark fix/responses-private-references has conflicts, while the inspected working-copy commit and candidate commit themselves reported conflict=false.
• 🔴 (22:47) Candidate qzwttkwltwzr / 493b0655a388 has description fix(responses): isolate failure telemetry; its parent is lpmvqrurxwlm / 0dd569b520ba, description fix(responses): unify provider failure handling.
• 🔴 (22:47) The verified candidate diff names exactly six files: packages/gateway/src/pipeline.ts, packages/gateway/src/stream/openai-responses.ts, packages/gateway/test/openai-responses-recall-aware-stream.test.ts, packages/gateway/test/openai-responses-stream.test.ts, packages/gateway/test/pipeline-streaming.test.ts, and packages/gateway/test/recall-codex-stream.test.ts.
• 🔴 (22:47) The verified cumulative plain-diff SHA-256 is exactly 93617337752dee74776c2fb173d829f37c6616727fa72268f07c8c8f2f195422.
• 🔴 (22:47) Candidate diff statistics are exactly 6 files changed, 3,687 insertions, and 500 deletions: packages/gateway/src/pipeline.ts 369 lines in the compact stat; packages/gateway/src/stream/openai-responses.ts 1,099; packages/gateway/test/openai-responses-recall-aware-stream.test.ts 1,440; packages/gateway/test/openai-responses-stream.test.ts 1,129; packages/gateway/test/pipeline-streaming.test.ts 147; and packages/gateway/test/recall-codex-stream.test.ts 3.
• 🔴 (22:47) Candidate ancestry from base to head is: pxrvwsvvkmpo / 2cbf40060c67 (feat(cch): add seeds for Claude Code up to 2.1.272 (#1780)); prpmozzzqvkt / d385b39653b0 (fix(responses): sanitize provider failures); qnlnmzlxyynv / 29dee093d7ce (fix(responses): bind sanitized failures to trusted state); xqmskzvmnqkr / b1bc7cd46c4e (fix(responses): complete provider failure sanitization); skwrwnvkvulp / 01a6e06b08ba (fix(responses): make provider failure settlement atomic); plzxzousrzuv / a1020a45be13 (fix(responses): preserve trusted failure metadata); wswlsmrnuzlq / 24880457763b (fix(responses): reject non-monotonic provider failures); lpmvqrurxwlm / 0dd569b520ba (fix(responses): unify provider failure handling); and qzwttkwltwzr / 493b0655a388 (fix(responses): isolate failure telemetry).
• 🔴 (22:47) packages/gateway/src/pipeline.ts now imports cloneResponsesAccState and finalizeUnsuccessfulResponsesAcc from the Responses stream implementation and adds provider-failure handling involving deferred events, terminal state/recall snapshots, continuation-provider failures, validation modes including "public" and "codex", and resetting transactionProviderUsage to { ...ZERO_USAGE }.
• 🔴 (22:47) packages/gateway/src/stream/openai-responses.ts extends ResponsesAccState with created: boolean, optional createdAt?: number, and optional lastAcceptedSequenceNumber?: number; makeResponsesAccState() initializes created to false.
• 🔴 (22:47) packages/gateway/src/stream/openai-responses.ts adds cloneResponsesAccState(state), implemented with structuredClone(state), and restoreResponsesAccState(state, snapshot), which deletes keys absent from the snapshot and restores values with Object.assign(state, snapshot).
• 🔴 (22:47) Provider-failure public sanitization in packages/gateway/src/stream/openai-responses.ts uses the fixed message Gateway request failed via PUBLIC_GATEWAY_ERROR.
• 🔴 (22:47) Provider-failure diagnostics in packages/gateway/src/stream/openai-responses.ts use exported constant RESPONSES_PROVIDER_FAILURE_LOG = "openai-responses provider failure" and exported function reportResponsesProviderFailure().
• 🔴 (22:47) User/project directive for provider-failure diagnostics: “Never recurse with a sink-controlled error.” Logging in reportResponsesProviderFailure() is best-effort and wrapped so a logging-sink exception cannot alter or recursively re-enter failure handling.
• 🔴 (22:47) User/project directive for failed provider output: it is “never authoritative and must not reach accounting hooks.”
• 🔴 (22:47) User/project directive for failure settlement: “Failed usage/accounting never depends on client demand.”
• 🔴 (22:47) Responses stream validation now checks that sequence_number is a safe integer through Number.isSafeInteger(parsed.sequence_number) and tracks the last accepted sequence in lastAcceptedSequenceNumber.
• 🔴 (22:47) The Responses changes include fixed malformed-input rejection paths using exact errors malformed Responses stream event and malformed Responses terminal event, terminal-status validation through validatedTerminalStatus, and unfinished-item checks before accepting terminal completion.