fix(core): recover malformed tool input

[opencode-agent]

Summary

• represent malformed tool arguments as a non-executable tool-input-error with stable call identity, authoritative raw input, provider metadata, and hosted-tool identity
• durably fail only the malformed call and its originating Step, then give the model protocol-safe feedback containing the raw arguments
• continue with a new logical recovery Step for at most four automatic retries after the initial malformed response
• preserve and settle valid sibling calls normally instead of discarding their results or risking duplicate side effects
• handle provider-specific stream shapes across OpenAI Chat, OpenAI Responses, Anthropic Messages, Gemini, and Bedrock Converse
• regenerate the current client and legacy JavaScript SDK V2 types for the new public recovery state

Safety

Malformed input is never repaired or executed. Recovery is enabled only for a known, unexecuted tool proposal with stable call identity; generic invalid provider output remains terminal.

Already-started local siblings are awaited and retain their truthful results. Provider-executed identity is preserved from input start through settlement even when later events omit the optional flag, preventing hosted tools from being dispatched locally.

Interrupted streams never enter automatic recovery. Repeated malformed responses stop after five total requests: the initial request plus four recovery retries. Every malformed response remains a durably failed Step rather than being retried as the same physical attempt.

Anthropic hosted-tool recovery lowers synthetic failures to valid tool-specific *_tool_result_error payloads. OpenAI Responses uses the authoritative final arguments even when they differ from streamed deltas or output_item.added is absent.

Tests

• full packages/ai suite: 344 passed, 29 recorded/live cases skipped
• packages/core/test/session-runner.test.ts: 133 passed
• full packages/core suite: 1,341 passed, 6 Mercurial cases skipped
• bun typecheck passed in packages/ai, packages/core, packages/schema, packages/client, packages/sdk/js, packages/protocol, packages/server, packages/cli, packages/tui, packages/app, packages/opencode, and packages/sdk-next
• regenerated packages/client and packages/sdk/js outputs; repeated generation produced stable hashes
• git diff --check

Source discussion: https://slack.com/archives/C0BE69AHCQP/p1784401085221000

Requested by: @StarpTech (Dustin Deus via Slack)

[github-actions]

Automated PR Cleanup

Thank you for contributing to opencode.

Due to the high volume of PRs from users and AI agents, we periodically close older PRs using automated criteria so maintainers can focus review time on the most active and community-supported contributions.

This PR was closed because it matched the following cleanup criteria:

• The PR was created more than 1 month ago
• The PR had fewer than 2 positive reactions
• Positive reactions are counted as thumbs-up, heart, celebration, or rocket reactions on the PR

PRs created within the last month are not affected by this cleanup.

If you believe this PR was closed incorrectly, or if you are still actively working on it, please leave a comment explaining why it should be reopened. A maintainer can review and reopen it if appropriate.

Thanks again for taking the time to contribute.