fix(responses): align codex responses events and routing

Split chat and responses boundaries more clearly, emit responses failed/reasoning/custom tool events in the OpenAI responses path, and update websocket plus route tests to keep Codex-compatible behavior stable.

Author: NGLSL

cmd/server/main.go

@@ -36,7 +36,7 @@ import (
 )
 
 var (
-	Version           = "v6.9.42"
+	Version           = "v6.9.43"
 	Commit            = "none"
 	BuildDate         = "unknown"
 	DefaultConfigPath = ""

internal/api/modules/amp/routes_test.go

@@ -113,6 +113,7 @@ func TestRegisterProviderAliases_AllProvidersRegistered(t *testing.T) {
 		{"/api/provider/google/models", http.MethodGet},
 		{"/api/provider/groq/models", http.MethodGet},
 		{"/api/provider/openai/chat/completions", http.MethodPost},
+		{"/api/provider/openai/responses", http.MethodPost},
 		{"/api/provider/anthropic/v1/messages", http.MethodPost},
 		{"/api/provider/google/v1beta/models", http.MethodGet},
 	}
@@ -179,6 +180,7 @@ func TestRegisterProviderAliases_V1Routes(t *testing.T) {
 		{"/api/provider/openai/v1/models", http.MethodGet},
 		{"/api/provider/openai/v1/chat/completions", http.MethodPost},
 		{"/api/provider/openai/v1/completions", http.MethodPost},
+		{"/api/provider/openai/v1/responses", http.MethodPost},
 		{"/api/provider/anthropic/v1/messages", http.MethodPost},
 		{"/api/provider/anthropic/v1/messages/count_tokens", http.MethodPost},
 	}

internal/api/server_test.go

@@ -200,6 +200,32 @@ func TestAmpProviderModelRoutes(t *testing.T) {
 	}
 }
 
+func TestServerRegistersProtectedOpenAIRoutes(t *testing.T) {
+	server := newTestServer(t)
+
+	protectedPaths := []struct {
+		name   string
+		method string
+		path   string
+	}{
+		{name: "chat completions", method: http.MethodPost, path: "/v1/chat/completions"},
+		{name: "responses", method: http.MethodPost, path: "/v1/responses"},
+		{name: "responses compact", method: http.MethodPost, path: "/v1/responses/compact"},
+	}
+
+	for _, tc := range protectedPaths {
+		t.Run(tc.name, func(t *testing.T) {
+			req := httptest.NewRequest(tc.method, tc.path, strings.NewReader(`{}`))
+			req.Header.Set("Content-Type", "application/json")
+			rr := httptest.NewRecorder()
+			server.engine.ServeHTTP(rr, req)
+			if rr.Code != http.StatusUnauthorized {
+				t.Fatalf("unexpected status code for %s: got %d want %d; body=%s", tc.path, rr.Code, http.StatusUnauthorized, rr.Body.String())
+			}
+		})
+	}
+}
+
 func TestDefaultRequestLoggerFactory_UsesResolvedLogDirectory(t *testing.T) {
 	t.Setenv("WRITABLE_PATH", "")
 	t.Setenv("writable_path", "")

internal/buildinfo/buildinfo.go

@@ -5,7 +5,7 @@ package buildinfo
 // Defaults cover local development builds.
 var (
 	// Version is the semantic version or git describe output of the binary.
-	Version = "v6.9.42"
+	Version = "v6.9.43"
 
 	// Commit is the git commit SHA baked into the binary.
 	Commit = "none"