openzoo 0.48.66 → 0.48.68

package/lib/anthropic.js

@@ -96,7 +96,21 @@ export function anthropicToOpenAI(body) {
       }));
     if (!out.tools.length) delete out.tools;
   }
-  if (body.tool_choice?.type === 'auto') out.tool_choice = 'auto';
+  // TOOL_CHOICE MAY NOT OUTLIVE TOOLS.
+  //
+  // The block above DROPS any tool without a name+input_schema — which is every
+  // server-side tool (web_search, computer, bash), because those carry no schema
+  // in the Anthropic shape. When that empties the list, `out.tools` is deleted.
+  // But tool_choice was set unconditionally, so the body went upstream with a
+  // choice and nothing to choose from.
+  //
+  // OBSERVED on grok-4.6: a Claude Code Web Search 400'd with "A tool_choice was
+  // set on the request but no tools were specified." Every provider rejects this
+  // shape; it just words it differently. Gate the choice on tools surviving.
+  const hasTools = Array.isArray(out.tools) && out.tools.length > 0;
+  if (!hasTools) {
+    delete out.tool_choice;
+  } else if (body.tool_choice?.type === 'auto') out.tool_choice = 'auto';
   else if (body.tool_choice?.type === 'any') out.tool_choice = 'required';
   else if (body.tool_choice?.type === 'tool') {
     out.tool_choice = { type: 'function', function: { name: body.tool_choice.name } };
@@ -115,6 +129,12 @@ export function openAIToAnthropic(data, requestedModel) {
   const msg = choice.message ?? {};
   const content = [];
   if (msg.content) content.push({ type: 'text', text: msg.content });
+  // Same reason as the streaming path: a refusal arrives with `content: null`
+  // and the sentence in `refusal`, so dropping it yields an empty message that
+  // reads as a broken model rather than as the answer it is.
+  else if (typeof msg.refusal === 'string' && msg.refusal.length) {
+    content.push({ type: 'text', text: msg.refusal });
+  }
   for (const t of msg.tool_calls ?? []) {
     let input = {};
     try { input = JSON.parse(t.function?.arguments || '{}'); } catch { input = {}; }
@@ -257,9 +277,31 @@ export function streamOpenAIToAnthropic(res, upstream, requestedModel, onReceipt
     // `ping` is in Anthropic's own SSE grammar and carries no content, so a
     // client either ignores it or treats it as liveness — never as text.
     if (!(typeof delta.content === 'string' && delta.content.length)
-        && !(delta.tool_calls ?? []).length) {
+        && !(delta.tool_calls ?? []).length
+        && !(typeof delta.refusal === 'string' && delta.refusal.length)) {
       ev('ping', {});
     }
+    // A REFUSAL IS A RESPONSE. SHOW IT.
+    //
+    // Upstream returns refusals out-of-band: `finish_reason: "content_filter"`,
+    // `content: null`, and the actual sentence in `refusal`. We only ever read
+    // `delta.content`, so the whole turn translated to a VALID, EMPTY stream —
+    // message_start, message_stop, output_tokens 0 — and rendered as silence.
+    //
+    // OBSERVED: a security audit of the user's OWN exploited protocol returning
+    // nothing at all, repeatedly, and reading as "fable is broken" when the
+    // provider had in fact answered: "This request triggered restrictions on
+    // violative cyber content and was blocked under Anthropic's Usage Policy."
+    // Being told you were refused is actionable — you can rephrase, or route to
+    // another model. Being shown an empty box is not.
+    if (typeof delta.refusal === 'string' && delta.refusal.length) {
+      if (textIndex < 0) {
+        textIndex = nextIndex++;
+        ev('content_block_start', { index: textIndex, content_block: { type: 'text', text: '' } });
+        open.add(textIndex);
+      }
+      ev('content_block_delta', { index: textIndex, delta: { type: 'text_delta', text: delta.refusal } });
+    }
     if (typeof delta.content === 'string' && delta.content.length) {
       if (textIndex < 0) {
         textIndex = nextIndex++;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.48.66",
+  "version": "0.48.68",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",