@miller-tech/uap 2.36.1 → 2.36.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miller-tech/uap",
-  "version": "2.36.1",
+  "version": "2.36.4",
   "description": "Autonomous AI agent memory system with CLAUDE.md protocol enforcement",
   "type": "module",
   "main": "dist/index.js",

package/tools/agents/scripts/anthropic_proxy.py

@@ -697,6 +697,24 @@ _FAILURE_DECLARATION_RE = re.compile(
     re.IGNORECASE,
 )
 
+# The harness's own zero-exit envelope: the tool CALL succeeded, whatever the
+# output QUOTES. Droid/BYOK appends "[Process exited with code N]" to every
+# Execute result; other harnesses print their own form. Decisive in the
+# flag-ABSENT path only (a client that declares is_error True still wins):
+# 2026-10-26, cognition-engine fdc94474 -- two ERROR-LOOP hard stops were
+# served on SIX successful state-checks whose `git diff` output quoted the
+# session's own in-flight `eprintln!("pg-server: metrics: failed to bind
+# ...")` line; the keyword sniff turned each clean diff into the same
+# "failure" signature and the streak escalated to a 400.
+_ZERO_EXIT_ENVELOPE_RE = re.compile(
+    r"\[process exited with code 0\]"  # Droid / BYOK Execute result footer
+    r"|\bexited with code 0\b"         # generic harness prose
+    r"|\bexit (?:code|status)\s*[:=]?\s*0\b"  # 'exit code 0' / 'exit status: 0'
+    r"|\bexit_code=0\b"                # python subprocess env style
+    r"|\bEXIT=0\b",                   # shell-echoed status
+    re.IGNORECASE,
+)
+
 
 def _is_successful_result(text: str) -> bool:
     """True when the payload structurally declares success.
@@ -867,10 +885,25 @@ def _error_signature_for_result(text: str, result_error: bool | None = None) ->
                         (_first_meaningful_signature), so an unfamiliar error
                         shape still forms a streak; a wrapper-only payload
                         stays unnameable -- DOUBLING-DOWN owns that shape.
-      absent         -> fall back to the keyword heuristics as before.
+      absent         -> keyword heuristics as before, EXCEPT a payload that
+                        carries the harness's zero-exit envelope
+                        (_ZERO_EXIT_ENVELOPE_RE): the call succeeded, so
+                        failure-shaped words it merely QUOTES (a git diff of
+                        in-flight edits, a grep over source) cannot anchor a
+                        streak. 2026-10-26: two ERROR-LOOP hard stops on six
+                        clean state-checks whose git-diff output quoted the
+                        session's own `eprintln!("...failed to bind...")`
+                        source line; a declared True flag still wins over
+                        the envelope.
     """
     if result_error is False:
         return ""
+    if result_error is None and _ZERO_EXIT_ENVELOPE_RE.search(text or ""):
+        # Flag-ABSENT and the harness's own footer says the call exited 0:
+        # the result is clean whatever the bytes quote. Only the heuristic
+        # path is narrowed -- is_error True/False keep their declared
+        # precedence above.
+        return ""
     sig = _error_signature(text)
     if sig or result_error is not True:
         return sig

package/tools/agents/tests/test_signature_quality.py

@@ -55,6 +55,20 @@ WORKTREE_STATUS = (
 SHELL_SOURCE_READ = "die() { printf 'fatal: %s\\n' \"$*\" >&2; exit 1; }\n"
 
 
+# 2026-10-26, cognition-engine fdc94474: state-check output that QUOTES the
+# session's own in-flight source (a numbered read of the metrics region,
+# a git diff of the wedge fix) plus the harness's zero-exit footer. Six
+# flag-absent results of this shape manufactured both ERROR-LOOP hard stops.
+DIFF_QUOTING_SOURCE = (
+    " M src/rust-pg-ext/Cargo.toml\n"
+    " M src/rust-pg-ext/src/bin/pg-server.rs\n"
+    "2784→            eprintln!(\"pg-server: metrics: failed to bind {addr}: {e}"
+    " — metrics endpoint disabled\");\n"
+    "+            return None;\n"
+    "\n[Process exited with code 0]"
+)
+
+
 class TracebackAnchoringTests(unittest.TestCase):
     def test_decisive_line_anchors_not_the_header(self):
         sig = proxy._error_signature(TRACEBACK_FULL)
@@ -225,6 +239,43 @@ class ReadOnlyContentTests(unittest.TestCase):
         self.assertEqual(len(body["messages"]), 1)
 
 
+class ZeroExitEnvelopeTests(unittest.TestCase):
+    """A flag-ABSENT Execute result carrying the harness's zero-exit
+    envelope is a SUCCESS, whatever failure-shaped text its output QUOTES
+    (ledger 2026-10-26: two ERROR-LOOP hard stops served on six clean
+    state-checks whose output quoted an in-flight eprintln! source line)."""
+
+    def test_quoted_source_with_exit_zero_forms_no_signature(self):
+        m = proxy.SessionMonitor()
+        for _ in range(6):
+            m.note_tool_result_error(DIFF_QUOTING_SOURCE, None, tool_names=["execute"])
+        self.assertEqual(m.error_signature_streak, 0)
+        self.assertEqual(m.last_error_signature, "")
+
+    def test_exit_zero_streak_never_arms_the_guard(self):
+        m = proxy.SessionMonitor()
+        for _ in range(6):
+            m.note_tool_result_error(DIFF_QUOTING_SOURCE, None, tool_names=["execute"])
+        body = {"messages": [{"role": "user", "content": "go"}], "tool_choice": "auto"}
+        proxy._maybe_inject_error_loop_break(body, m)
+        self.assertEqual(m.error_loop_fires, 0)
+        self.assertEqual(len(body["messages"]), 1)
+
+    def test_nonzero_exit_still_keeps_heuristics(self):
+        payload = DIFF_QUOTING_SOURCE.replace(
+            "exited with code 0", "exited with code 1"
+        )
+        m = proxy.SessionMonitor()
+        m.note_tool_result_error(payload, None, tool_names=["execute"])
+        self.assertEqual(m.error_signature_streak, 1)
+        self.assertNotEqual(m.last_error_signature, "")
+
+    def test_declared_error_flag_beats_the_zero_exit_envelope(self):
+        m = proxy.SessionMonitor()
+        m.note_tool_result_error(DIFF_QUOTING_SOURCE, True, tool_names=["execute"])
+        self.assertEqual(m.error_signature_streak, 1)
+
+
 class KnownFixCoverageTests(unittest.TestCase):
     """The uncovered ledger classes now carry a KNOWN FIX."""