@miller-tech/uap 2.1.5 → 2.1.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miller-tech/uap",
-  "version": "2.1.5",
+  "version": "2.1.6",
   "description": "Autonomous AI agent memory system with CLAUDE.md protocol enforcement",
   "type": "module",
   "main": "dist/index.js",
@@ -21,7 +21,7 @@
     "start": "node dist/bin/cli.js",
     "test": "vitest",
     "test:ci": "vitest run",
-    "test:enforcers": "UAP_PROXY_ENV_AUTOLOAD=0 python3 -m unittest tools.agents.tests.test_enforcement_self_protect tools.agents.tests.test_conditional_destructive_verbs tools.agents.tests.test_live_deliver_kill tools.agents.tests.test_schema_diff_gate tools.agents.tests.test_schema_diff_inline tools.agents.tests.test_stream_telemetry tools.agents.tests.test_project_telemetry_events tools.agents.tests.test_workdir_scope_enforcer tools.agents.tests.test_gate_evidence tools.agents.tests.test_repeat_call_guard tools.agents.tests.test_repeat_guard tools.agents.tests.test_gate_integrity tools.agents.tests.test_gate_failclosed_indirection tools.agents.tests.test_gate_failclosed_schema_diff tools.agents.tests.test_expert_review_pr_scope tools.agents.tests.test_path_containment tools.agents.tests.test_path_normalizer_hardened tools.agents.tests.test_sandbox_tool_strip tools.agents.tests.test_proxy_env_loader tools.agents.tests.test_stream_required_tool tools.agents.tests.test_tool_call_wrapper_profiles tools.agents.tests.test_tool_convert_cache tools.agents.tests.test_doubling_break tools.agents.tests.test_error_loop_ignores_correctives tools.agents.tests.test_anthropic_proxy_tool_arg_types tools.agents.tests.test_attractor_detection tools.agents.tests.test_client_disconnect tools.agents.tests.test_confidence_escalation tools.agents.tests.test_coordination_ban tools.agents.tests.test_coordination_early_ban tools.agents.tests.test_cycle_break_exploration tools.agents.tests.test_deferral_break tools.agents.tests.test_deliver_autoroute tools.agents.tests.test_delivery_enforcement_all_langs tools.agents.tests.test_delivery_enforcement_exemptions tools.agents.tests.test_delivery_enforcement_filepath tools.agents.tests.test_delivery_enforcement_write_complexity tools.agents.tests.test_fastpath_config tools.agents.tests.test_delivery_enforcement_web_and_bash tools.agents.tests.test_disconnect_watcher tools.agents.tests.test_empty_maxtokens_recovery tools.agents.tests.test_empty_tool_loop_break tools.agents.tests.test_enforcer_escape_hatches tools.agents.tests.test_error_loop_break tools.agents.tests.test_finalize_suppression tools.agents.tests.test_malformed_unclosed_think tools.agents.tests.test_mandate_beats_recon tools.agents.tests.test_mandate_deliver tools.agents.tests.test_overflow_truncate_count_tokens tools.agents.tests.test_passthrough_oauth tools.agents.tests.test_project_telemetry tools.agents.tests.test_proxy_auth_headers tools.agents.tests.test_prune_preserve_force_write tools.agents.tests.test_recon_deliver_gate tools.agents.tests.test_session_admission tools.agents.tests.test_stream_heartbeat tools.agents.tests.test_stuck_break_reattach tools.agents.tests.test_stuck_break_hard tools.agents.tests.test_turn_count_breaker_periodic tools.agents.tests.test_upstream_chokepoint tools.agents.tests.test_vision_passthrough tools.agents.tests.test_worktree_required tools.agents.tests.test_enforcer_suite_coverage tools.agents.tests.test_validate_plan_gate tools.agents.tests.test_validate_plan_inside_project tools.agents.tests.test_anthropic_proxy_streaming tools.agents.tests.test_non_stream_resp_log tools.agents.tests.test_delivery_enforcement_worktree tools.agents.tests.test_output_token_ceilings tools.agents.tests.test_tool_narrowing_core tools.agents.tests.test_models_context_window tools.agents.tests.test_thinking_template_kwargs tools.agents.tests.test_cycle_break_wait_poll tools.agents.tests.test_upstream_model_aliases tools.agents.tests.test_stream_thinking_deltas",
+    "test:enforcers": "UAP_PROXY_ENV_AUTOLOAD=0 python3 -m unittest tools.agents.tests.test_enforcement_self_protect tools.agents.tests.test_conditional_destructive_verbs tools.agents.tests.test_live_deliver_kill tools.agents.tests.test_schema_diff_gate tools.agents.tests.test_schema_diff_inline tools.agents.tests.test_stream_telemetry tools.agents.tests.test_project_telemetry_events tools.agents.tests.test_workdir_scope_enforcer tools.agents.tests.test_gate_evidence tools.agents.tests.test_repeat_call_guard tools.agents.tests.test_repeat_guard tools.agents.tests.test_gate_integrity tools.agents.tests.test_gate_failclosed_indirection tools.agents.tests.test_gate_failclosed_schema_diff tools.agents.tests.test_expert_review_pr_scope tools.agents.tests.test_path_containment tools.agents.tests.test_path_normalizer_hardened tools.agents.tests.test_sandbox_tool_strip tools.agents.tests.test_proxy_env_loader tools.agents.tests.test_stream_required_tool tools.agents.tests.test_tool_call_wrapper_profiles tools.agents.tests.test_tool_convert_cache tools.agents.tests.test_doubling_break tools.agents.tests.test_error_loop_ignores_correctives tools.agents.tests.test_anthropic_proxy_tool_arg_types tools.agents.tests.test_anthropic_sse_schema tools.agents.tests.test_attractor_detection tools.agents.tests.test_client_disconnect tools.agents.tests.test_confidence_escalation tools.agents.tests.test_coordination_ban tools.agents.tests.test_coordination_early_ban tools.agents.tests.test_cycle_break_exploration tools.agents.tests.test_deferral_break tools.agents.tests.test_deliver_autoroute tools.agents.tests.test_delivery_enforcement_all_langs tools.agents.tests.test_delivery_enforcement_exemptions tools.agents.tests.test_delivery_enforcement_filepath tools.agents.tests.test_delivery_enforcement_write_complexity tools.agents.tests.test_fastpath_config tools.agents.tests.test_delivery_enforcement_web_and_bash tools.agents.tests.test_disconnect_watcher tools.agents.tests.test_empty_maxtokens_recovery tools.agents.tests.test_empty_tool_loop_break tools.agents.tests.test_enforcer_escape_hatches tools.agents.tests.test_error_loop_break tools.agents.tests.test_finalize_suppression tools.agents.tests.test_malformed_unclosed_think tools.agents.tests.test_mandate_beats_recon tools.agents.tests.test_mandate_deliver tools.agents.tests.test_overflow_truncate_count_tokens tools.agents.tests.test_passthrough_oauth tools.agents.tests.test_project_telemetry tools.agents.tests.test_proxy_auth_headers tools.agents.tests.test_prune_preserve_force_write tools.agents.tests.test_recon_deliver_gate tools.agents.tests.test_session_admission tools.agents.tests.test_stream_heartbeat tools.agents.tests.test_stuck_break_reattach tools.agents.tests.test_stuck_break_hard tools.agents.tests.test_turn_count_breaker_periodic tools.agents.tests.test_upstream_chokepoint tools.agents.tests.test_vision_passthrough tools.agents.tests.test_worktree_required tools.agents.tests.test_enforcer_suite_coverage tools.agents.tests.test_validate_plan_gate tools.agents.tests.test_validate_plan_inside_project tools.agents.tests.test_anthropic_proxy_streaming tools.agents.tests.test_non_stream_resp_log tools.agents.tests.test_delivery_enforcement_worktree tools.agents.tests.test_output_token_ceilings tools.agents.tests.test_tool_narrowing_core tools.agents.tests.test_models_context_window tools.agents.tests.test_thinking_template_kwargs tools.agents.tests.test_cycle_break_wait_poll tools.agents.tests.test_upstream_model_aliases tools.agents.tests.test_stream_thinking_deltas",
     "test:coverage": "vitest --coverage",
     "bench": "vitest --config vitest.bench.config.ts",
     "lint": "eslint src --ext .ts",

package/tools/agents/scripts/anthropic_proxy.py

@@ -12218,7 +12218,7 @@ async def stream_anthropic_message(
             tool_input = json.dumps(block.get("input", {}), separators=(",", ":"))
             yield (
                 "event: content_block_start\n"
-                f"data: {json.dumps({'type': 'content_block_start', 'index': block_index, 'content_block': {'type': 'tool_use', 'id': tool_id, 'name': tool_name}})}\n\n"
+                f"data: {json.dumps({'type': 'content_block_start', 'index': block_index, 'content_block': {'type': 'tool_use', 'id': tool_id, 'name': tool_name, 'input': {}}})}\n\n"
             )
             if tool_input:
                 yield (
@@ -12507,7 +12507,7 @@ async def stream_anthropic_response(
                         # Emit content_block_start for this tool_use
                         yield (
                             f"event: content_block_start\n"
-                            f"data: {json.dumps({'type': 'content_block_start', 'index': this_block_index, 'content_block': {'type': 'tool_use', 'id': tc_id, 'name': fn.get('name', '')}})}\n\n"
+                            f"data: {json.dumps({'type': 'content_block_start', 'index': this_block_index, 'content_block': {'type': 'tool_use', 'id': tc_id, 'name': fn.get('name', ''), 'input': {}}})}\n\n"
                         )
 
                         # Emit initial arguments fragment (e.g. "{") that
@@ -12749,7 +12749,7 @@ async def stream_anthropic_response(
                 }
                 yield (
                     f"event: content_block_start\n"
-                    f"data: {json.dumps({'type': 'content_block_start', 'index': idx, 'content_block': {'type': 'tool_use', 'id': tc_id, 'name': tc_name}})}\n\n"
+                    f"data: {json.dumps({'type': 'content_block_start', 'index': idx, 'content_block': {'type': 'tool_use', 'id': tc_id, 'name': tc_name, 'input': {}}})}\n\n"
                 )
                 yield (
                     f"event: content_block_delta\n"

package/tools/agents/tests/test_anthropic_sse_schema.py

@@ -0,0 +1,102 @@
+#!/usr/bin/env python3
+"""Every SSE event the proxy emits must satisfy the Anthropic wire schema.
+
+2026-09-13. The proxy emitted `content_block_start` for a tool_use WITHOUT the
+`input` field:
+
+    {"type":"content_block_start","index":1,
+     "content_block":{"type":"tool_use","id":"...","name":"Read"}}
+
+That is not valid per the Anthropic API, whose SDKs are generated from the same
+schema — so Factory Droid (TypeScript SDK) rejected one event per tool-use turn
+with "[DroidClient] Dropping malformed event" (measured: 42 drops against 45
+tool-call responses). The client still recovered the call from the following
+input_json_delta, but the start event — carrying the tool id and name — was lost.
+
+These tests validate against the installed `anthropic` SDK's own pydantic models
+rather than a hand-written expectation, so they track the real schema.
+"""
+
+import json
+import re
+import unittest
+
+try:
+    from anthropic.types.raw_content_block_start_event import RawContentBlockStartEvent
+    _HAVE_SDK = True
+except Exception:  # pragma: no cover - SDK not installed in this environment
+    _HAVE_SDK = False
+
+
+TOOL_USE_START_RE = re.compile(
+    r"'content_block': \{'type': 'tool_use'[^}]*\}", re.S
+)
+
+
+def _proxy_source() -> str:
+    from pathlib import Path
+
+    return (
+        Path(__file__).resolve().parents[1] / "scripts" / "anthropic_proxy.py"
+    ).read_text()
+
+
+class TestToolUseStartEventShape(unittest.TestCase):
+    def test_every_tool_use_start_site_sets_input(self):
+        """Static guard: a new emission site must not reintroduce the omission."""
+        src = _proxy_source()
+        sites = [
+            m.group(0)
+            for m in re.finditer(r"\{'type': 'tool_use',[^}]*\}", src)
+            if "content_block_start" in src[max(0, m.start() - 400):m.start()]
+        ]
+        self.assertGreater(len(sites), 0, "no tool_use content_block_start sites found")
+        missing = [s for s in sites if "'input'" not in s]
+        self.assertEqual(
+            missing,
+            [],
+            "tool_use content_block_start without `input` (clients drop it): "
+            f"{missing}",
+        )
+
+    @unittest.skipUnless(_HAVE_SDK, "anthropic SDK not installed")
+    def test_payload_without_input_is_rejected_by_the_real_schema(self):
+        """Documents *why* the field is required — this is the observed bug."""
+        bad = {
+            "type": "content_block_start",
+            "index": 1,
+            "content_block": {"type": "tool_use", "id": "abc", "name": "Read"},
+        }
+        with self.assertRaises(Exception):
+            RawContentBlockStartEvent.model_validate(bad)
+
+    @unittest.skipUnless(_HAVE_SDK, "anthropic SDK not installed")
+    def test_payload_with_input_validates(self):
+        good = {
+            "type": "content_block_start",
+            "index": 1,
+            "content_block": {
+                "type": "tool_use",
+                "id": "abc",
+                "name": "Read",
+                "input": {},
+            },
+        }
+        ev = RawContentBlockStartEvent.model_validate(good)
+        self.assertEqual(ev.content_block.type, "tool_use")
+
+    @unittest.skipUnless(_HAVE_SDK, "anthropic SDK not installed")
+    def test_thinking_and_text_start_events_validate(self):
+        """The other two block kinds the proxy opens must stay valid too."""
+        for cb in (
+            {"type": "thinking", "thinking": "", "signature": ""},
+            {"type": "text", "text": ""},
+        ):
+            with self.subTest(block=cb["type"]):
+                RawContentBlockStartEvent.model_validate(
+                    {"type": "content_block_start", "index": 0, "content_block": cb}
+                )
+
+
+if __name__ == "__main__":
+    unittest.main()