Repository navigation
fix: bounded Responses replay refusal diagnostics - #449
Merged
Merged
Conversation
cloga
force-pushed
the
cloga-responses-replay-diagnostics
branch
from
October 25, 2026 10:06
669f932 to
ba9738a
Compare
Carry forward safe structural refusal evidence and current pinned SDK regression coverage without changing replay acceptance or durable history. Assisted-by: GitHub Copilot Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Align required same-Core candidate metadata without authorizing tag, merge, publication or installation. Assisted-by: GitHub Copilot Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
cloga
force-pushed
the
cloga-responses-replay-diagnostics
branch
from
October 25, 2026 10:46
ba9738a to
973052e
Compare
cloga
marked this pull request as ready for review
October 25, 2026 10:54
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Fixes #446. Carries forward the independent diagnostic value of closed draft #218 against the current pinned pi-ai 1.1.0 / DSH 0.2.1-rc.3, rather than cherry-picking its obsolete implementation. #218 was closed as migration/handoff, not as an implementation-completion claim; its original branch remains preserved.
Adds fixed structural refusal codes, zero-based input positions, allowlisted type/status and field-presence booleans to the existing message-only native INVALID_REQUEST surface. Diagnostics exclude IDs, summaries, tool arguments/results, unknown discriminator values, and encrypted bytes. Existing replay acceptance, recovery consent, cancellation/account isolation, and stored-history ownership remain unchanged.
Adds hostile-input regressions, actual pinned-SDK synthetic two-turn SSE rejection and terminal-encryption-backfill controls, managed provider/route assertions, and matching English/Chinese documentation. Prepares same-Core
0.1.0-alpha.4.dsh.0.2.1.rc.3metadata required by unchanged release policy, retaining alpha.3 history. No dependency, lockfile, CI policy, or Core changes.Validation
Authoritative exact-head CI passed at
973052e82a951ae19c8257a0473200ca718d0b19: https://github.com/cloga/dsh-github-copilot/actions/runs/40186158312mainatedca08c65d6b7682aa5b5bdc6b4edf104ac9f198(includes merged feat(tooling): enforce explicit environments and exact-head CI evidence #452 and test: verify packed plugin installation and pinned-host loading #450); rebase completed without conflicts.pnpm verify, build, all tests, package smoke, pack/tarball verification, and the merged installation smoke through the pinned Core host.Local results are auxiliary; GitHub CI is authoritative. No real credentials or live model calls were used. Synthetic fixtures do not establish live provider acceptance.
Scope and delivery
Plugin-only change. No Core patch, new retry, history deletion, automatic model switch, or installation-tool changes. This PR is ready for review, but has not been merged. Merge, tag, publication, profile installation, restart, and live model calls are not authorized by this task.