pytest-wirecheck 0.1.0__tar.gz

pytest_wirecheck-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ishan Yash
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

pytest_wirecheck-0.1.0/PKG-INFO

@@ -0,0 +1,175 @@
+Metadata-Version: 2.4
+Name: pytest-wirecheck
+Version: 0.1.0
+Summary: Record what your code really sends to the Claude API in tests, and fail the build if a request would break under API version 2026-10-21.
+Author: Ishan Yash
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/ishanyash/wirecheck
+Project-URL: Source, https://github.com/ishanyash/wirecheck
+Project-URL: Issues, https://github.com/ishanyash/wirecheck/issues
+Keywords: pytest,anthropic,claude,claude-api,migration,ci,lint
+Classifier: Development Status :: 3 - Alpha
+Classifier: Framework :: Pytest
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Software Development :: Testing
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: pytest>=8.0
+Provides-Extra: test
+Requires-Dist: anthropic>=2.0.0; extra == "test"
+Dynamic: license-file
+
+# WireCheck
+
+**Your tests pass. Your Claude API calls return 400. WireCheck checks what your code really sends to the Claude API in tests, and fails the build if a request would break under API version 2026-10-21.**
+
+![pytest --wirecheck failing on three hidden temperature bugs](https://raw.githubusercontent.com/ishanyash/wirecheck/main/docs/screenshot.png)
+
+[PyPI: pytest-wirecheck](https://pypi.org/project/pytest-wirecheck/) · [GitHub Marketplace: WireCheck for Claude API](https://github.com/marketplace/actions/wirecheck-for-claude-api) · [Demo](demo/)
+
+## Why
+
+On 21 Oct 2026 Anthropic released Claude API version `2026-10-21`. The new SDK majors (Python `anthropic` 2.0.0 and later) send it by default. Under it, a Messages request that sends `temperature`, `top_p` or `top_k` returns **400, even at the default value** ([migration guide](https://platform.claude.com/docs/en/api/migration-2026-10-21)).
+
+Most test suites mock the API, so they never see that 400. And these parameters are hard to grep for. Since `anthropic` 1.0.0, `temperature=` is no longer a keyword of `messages.create` (passing it is a `TypeError`, so tests catch it), and the SDK 1.0 migration guide said to pass it through `extra_body` instead. `extra_body` is merged into the JSON at runtime, so no type checker sees it, and it often sits in a shared wrapper or a defaults dict, far from the call. That is exactly how [Nojoin broke](https://github.com/Valtora/Nojoin/issues/554): a loose version floor pulled in `anthropic` 2.x, a wrapper still sent `temperature: 0.2` through `extra_body`, and the tests mocked the client, so they all passed.
+
+WireCheck looks at the final request as it leaves the HTTP client, after the SDK has merged every wrapper, default and `extra_body`.
+
+## Quick start
+
+```bash
+pip install pytest-wirecheck
+pytest --wirecheck
+```
+
+A test that sends a breaking request now fails, and the run ends with a short report. This is the [demo](demo/) on `anthropic` 2.3.0:
+
+```
+3 requests to the Claude API checked: 3 errors, 0 warnings
+anthropic SDK: 2.3.0; API versions seen: 2026-10-21 x3
+
+RULE   LEVEL  COUNT  TEST                                         CALL SITE                    WHAT
+WC001  error  1      broken/test_broken.py::test_direct_call      broken/app_direct.py:12      temperature
+WC001  error  1      broken/test_broken.py::test_extra_body       broken/app_extra_body.py:18  temperature
+WC001  error  1      broken/test_broken.py::test_wrapper_factory  broken/app_factory.py:21     top_p
+```
+
+Each row shows the rule, the test that sent the request, and the file and line in your code that made the call. Works with `pytest-xdist` too.
+
+### GitHub Action
+
+```yaml
+name: WireCheck
+on: pull_request
+permissions:
+  contents: read
+  pull-requests: write   # to post the findings comment
+jobs:
+  wirecheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+      - run: pip install -e ".[test]"        # your project and its test deps
+      - uses: ishanyash/wirecheck@v0.1.0
+        with:
+          pytest-args: tests/
+```
+
+The Action runs the static scan and your tests with `--wirecheck`, writes the findings to the job summary, and posts **one** pull request comment with a findings table (it updates the same comment on later pushes).
+
+| Input | Default | Meaning |
+|---|---|---|
+| `path` | `.` | Folders for the static scan |
+| `run-pytest` | `true` | Run `pytest --wirecheck` |
+| `pytest-args` | | Extra pytest arguments |
+| `working-directory` | `.` | Where to run |
+| `fail-on` | `error` | `error`, `warn` or `never` |
+| `comment` | `true` | Post the PR comment |
+| `install` | `action` | `action` installs WireCheck from the tagged Action source; `skip` if you install it yourself |
+
+## What it checks
+
+Rules come from the [migration guide](https://platform.claude.com/docs/en/api/migration-2026-10-21) and the [release notes](https://platform.claude.com/docs/en/release-notes/overview).
+
+**In the real requests your tests send (`pytest --wirecheck`):**
+
+| Rule | What | Level |
+|---|---|---|
+| WC001 | `temperature`, `top_p` or `top_k` in a Messages, token count or batch request | error on 2026-10-21 |
+| WC002 | `document` block directly in an `assistant` message | error on 2026-10-21 |
+| WC003 | `text` block with non-empty `citations` in a `user` message, including inside `search_result` | error on 2026-10-21 |
+| WC004 | `X-Api-Key` header set by your code. SDK 2.x sends `Authorization: Bearer`, so your key no longer replaces the client key (both are sent) | warning |
+| WC005 | `claude-opus-4-8` with `speed: "fast"` | warning now, error from 2026-11-30 |
+
+**In source (`wirecheck scan`):**
+
+| Rule | What | Level |
+|---|---|---|
+| WCS001 | `MessageParam(...)` / `BetaMessageParam(...)` called or subclassed (TypeError in SDK 2.x) | error |
+| WCS002 | `X-Api-Key` in `extra_headers` / `default_headers` | warning |
+| WCS003 | `ant --api-key` / `ant --auth-token` (removed in the `ant` CLI 2.0.0) | error |
+| WCS004 | Text Completions calls (`client.completions.create`, `/v1/complete`) | error |
+| WCS005 | `temperature` / `top_p` / `top_k` visible in a Messages call (a hint; the runtime check is the real one) | warning |
+
+```bash
+wirecheck scan .                 # text
+wirecheck scan src --format json # or markdown
+```
+
+## Which API version applies
+
+For each request WireCheck reads the `anthropic-version` header. If there is none, it uses the installed SDK (`anthropic` 2.0.0 and later means `2026-10-21`).
+
+- On `2026-10-21`, WC001 to WC003 are **errors** and fail the test that sent the request.
+- On `2023-06-01` (SDK 1.x and older), the same findings are **warnings**. Your code works today and breaks when you upgrade. Use `--wirecheck-fail-on=warn` to fail on them now.
+
+## How it works
+
+When enabled, the plugin wraps `Client.send` and `AsyncClient.send` of `httpx2` (used by `anthropic` 1.x and 2.x) and `httpx` (older SDKs). Every request to `api.anthropic.com`, `$ANTHROPIC_BASE_URL` or a `--wirecheck-base-url` is recorded before it reaches the transport, so it is seen even when the test mocks the response with a mock transport, `respx`, or the `wirecheck_stub` fixture, and even when there is no network. API keys are redacted before anything is stored. The hook is removed when the run ends.
+
+## Options
+
+| Option | Meaning |
+|---|---|
+| `--wirecheck` | Turn it on (or `wirecheck = true` in your pytest ini, or `WIRECHECK=1`) |
+| `--wirecheck-fail-on` | `error` (default), `warn`, or `never` |
+| `--wirecheck-base-url URL` | Also capture a gateway or proxy URL (repeatable) |
+| `--wirecheck-report PATH` | Write findings as JSON |
+| `--wirecheck-markdown PATH` | Write findings as Markdown |
+| `WIRECHECK_TODAY=YYYY-MM-DD` | Pin the date used by date-based rules |
+
+Fixtures and markers:
+
+- `wirecheck_stub` answers every Claude API request in a test with a canned reply, with no network. It mocks the response, not the client, so WireCheck still sees what you send. Set `wirecheck_stub["text"]` to change the reply.
+- `wirecheck_requests` lists the requests the current test sent.
+- `@pytest.mark.wirecheck_skip` ignores requests from one test.
+
+## Known limits
+
+- **It only sees requests that are really built.** If a test replaces `client.messages.create` (or the whole client) with a `MagicMock`, no request exists and WireCheck sees nothing. It prints a hint when a run captured no requests. Mock the HTTP response instead.
+- Python only, and only the `httpx` / `httpx2` HTTP clients (the SDK default). The optional `aiohttp` backend is not hooked.
+- Bedrock and Vertex requests go to other hosts and carry the version differently. Add their URL with `--wirecheck-base-url` if you want them recorded; version detection there falls back to the SDK version.
+- `wirecheck_stub` answers non-streaming calls only.
+- WC003 checks the places the guide names (user `text` blocks and `search_result` blocks). It does not flag bare `text` blocks inside `tool_result`, because the guide does not say.
+- The static scanner is a set of simple patterns. It misses anything assembled at runtime, which is why the pytest plugin exists.
+- No auto-fix and no TypeScript or other SDKs in v0.1.
+
+## Licence
+
+MIT. See [LICENSE](LICENSE).
+
+---
+
+Built by [Ishan Yash](https://ishanyash.com)

pytest_wirecheck-0.1.0/README.md

@@ -0,0 +1,145 @@
+# WireCheck
+
+**Your tests pass. Your Claude API calls return 400. WireCheck checks what your code really sends to the Claude API in tests, and fails the build if a request would break under API version 2026-10-21.**
+
+![pytest --wirecheck failing on three hidden temperature bugs](https://raw.githubusercontent.com/ishanyash/wirecheck/main/docs/screenshot.png)
+
+[PyPI: pytest-wirecheck](https://pypi.org/project/pytest-wirecheck/) · [GitHub Marketplace: WireCheck for Claude API](https://github.com/marketplace/actions/wirecheck-for-claude-api) · [Demo](demo/)
+
+## Why
+
+On 21 Oct 2026 Anthropic released Claude API version `2026-10-21`. The new SDK majors (Python `anthropic` 2.0.0 and later) send it by default. Under it, a Messages request that sends `temperature`, `top_p` or `top_k` returns **400, even at the default value** ([migration guide](https://platform.claude.com/docs/en/api/migration-2026-10-21)).
+
+Most test suites mock the API, so they never see that 400. And these parameters are hard to grep for. Since `anthropic` 1.0.0, `temperature=` is no longer a keyword of `messages.create` (passing it is a `TypeError`, so tests catch it), and the SDK 1.0 migration guide said to pass it through `extra_body` instead. `extra_body` is merged into the JSON at runtime, so no type checker sees it, and it often sits in a shared wrapper or a defaults dict, far from the call. That is exactly how [Nojoin broke](https://github.com/Valtora/Nojoin/issues/554): a loose version floor pulled in `anthropic` 2.x, a wrapper still sent `temperature: 0.2` through `extra_body`, and the tests mocked the client, so they all passed.
+
+WireCheck looks at the final request as it leaves the HTTP client, after the SDK has merged every wrapper, default and `extra_body`.
+
+## Quick start
+
+```bash
+pip install pytest-wirecheck
+pytest --wirecheck
+```
+
+A test that sends a breaking request now fails, and the run ends with a short report. This is the [demo](demo/) on `anthropic` 2.3.0:
+
+```
+3 requests to the Claude API checked: 3 errors, 0 warnings
+anthropic SDK: 2.3.0; API versions seen: 2026-10-21 x3
+
+RULE   LEVEL  COUNT  TEST                                         CALL SITE                    WHAT
+WC001  error  1      broken/test_broken.py::test_direct_call      broken/app_direct.py:12      temperature
+WC001  error  1      broken/test_broken.py::test_extra_body       broken/app_extra_body.py:18  temperature
+WC001  error  1      broken/test_broken.py::test_wrapper_factory  broken/app_factory.py:21     top_p
+```
+
+Each row shows the rule, the test that sent the request, and the file and line in your code that made the call. Works with `pytest-xdist` too.
+
+### GitHub Action
+
+```yaml
+name: WireCheck
+on: pull_request
+permissions:
+  contents: read
+  pull-requests: write   # to post the findings comment
+jobs:
+  wirecheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+      - run: pip install -e ".[test]"        # your project and its test deps
+      - uses: ishanyash/wirecheck@v0.1.0
+        with:
+          pytest-args: tests/
+```
+
+The Action runs the static scan and your tests with `--wirecheck`, writes the findings to the job summary, and posts **one** pull request comment with a findings table (it updates the same comment on later pushes).
+
+| Input | Default | Meaning |
+|---|---|---|
+| `path` | `.` | Folders for the static scan |
+| `run-pytest` | `true` | Run `pytest --wirecheck` |
+| `pytest-args` | | Extra pytest arguments |
+| `working-directory` | `.` | Where to run |
+| `fail-on` | `error` | `error`, `warn` or `never` |
+| `comment` | `true` | Post the PR comment |
+| `install` | `action` | `action` installs WireCheck from the tagged Action source; `skip` if you install it yourself |
+
+## What it checks
+
+Rules come from the [migration guide](https://platform.claude.com/docs/en/api/migration-2026-10-21) and the [release notes](https://platform.claude.com/docs/en/release-notes/overview).
+
+**In the real requests your tests send (`pytest --wirecheck`):**
+
+| Rule | What | Level |
+|---|---|---|
+| WC001 | `temperature`, `top_p` or `top_k` in a Messages, token count or batch request | error on 2026-10-21 |
+| WC002 | `document` block directly in an `assistant` message | error on 2026-10-21 |
+| WC003 | `text` block with non-empty `citations` in a `user` message, including inside `search_result` | error on 2026-10-21 |
+| WC004 | `X-Api-Key` header set by your code. SDK 2.x sends `Authorization: Bearer`, so your key no longer replaces the client key (both are sent) | warning |
+| WC005 | `claude-opus-4-8` with `speed: "fast"` | warning now, error from 2026-11-30 |
+
+**In source (`wirecheck scan`):**
+
+| Rule | What | Level |
+|---|---|---|
+| WCS001 | `MessageParam(...)` / `BetaMessageParam(...)` called or subclassed (TypeError in SDK 2.x) | error |
+| WCS002 | `X-Api-Key` in `extra_headers` / `default_headers` | warning |
+| WCS003 | `ant --api-key` / `ant --auth-token` (removed in the `ant` CLI 2.0.0) | error |
+| WCS004 | Text Completions calls (`client.completions.create`, `/v1/complete`) | error |
+| WCS005 | `temperature` / `top_p` / `top_k` visible in a Messages call (a hint; the runtime check is the real one) | warning |
+
+```bash
+wirecheck scan .                 # text
+wirecheck scan src --format json # or markdown
+```
+
+## Which API version applies
+
+For each request WireCheck reads the `anthropic-version` header. If there is none, it uses the installed SDK (`anthropic` 2.0.0 and later means `2026-10-21`).
+
+- On `2026-10-21`, WC001 to WC003 are **errors** and fail the test that sent the request.
+- On `2023-06-01` (SDK 1.x and older), the same findings are **warnings**. Your code works today and breaks when you upgrade. Use `--wirecheck-fail-on=warn` to fail on them now.
+
+## How it works
+
+When enabled, the plugin wraps `Client.send` and `AsyncClient.send` of `httpx2` (used by `anthropic` 1.x and 2.x) and `httpx` (older SDKs). Every request to `api.anthropic.com`, `$ANTHROPIC_BASE_URL` or a `--wirecheck-base-url` is recorded before it reaches the transport, so it is seen even when the test mocks the response with a mock transport, `respx`, or the `wirecheck_stub` fixture, and even when there is no network. API keys are redacted before anything is stored. The hook is removed when the run ends.
+
+## Options
+
+| Option | Meaning |
+|---|---|
+| `--wirecheck` | Turn it on (or `wirecheck = true` in your pytest ini, or `WIRECHECK=1`) |
+| `--wirecheck-fail-on` | `error` (default), `warn`, or `never` |
+| `--wirecheck-base-url URL` | Also capture a gateway or proxy URL (repeatable) |
+| `--wirecheck-report PATH` | Write findings as JSON |
+| `--wirecheck-markdown PATH` | Write findings as Markdown |
+| `WIRECHECK_TODAY=YYYY-MM-DD` | Pin the date used by date-based rules |
+
+Fixtures and markers:
+
+- `wirecheck_stub` answers every Claude API request in a test with a canned reply, with no network. It mocks the response, not the client, so WireCheck still sees what you send. Set `wirecheck_stub["text"]` to change the reply.
+- `wirecheck_requests` lists the requests the current test sent.
+- `@pytest.mark.wirecheck_skip` ignores requests from one test.
+
+## Known limits
+
+- **It only sees requests that are really built.** If a test replaces `client.messages.create` (or the whole client) with a `MagicMock`, no request exists and WireCheck sees nothing. It prints a hint when a run captured no requests. Mock the HTTP response instead.
+- Python only, and only the `httpx` / `httpx2` HTTP clients (the SDK default). The optional `aiohttp` backend is not hooked.
+- Bedrock and Vertex requests go to other hosts and carry the version differently. Add their URL with `--wirecheck-base-url` if you want them recorded; version detection there falls back to the SDK version.
+- `wirecheck_stub` answers non-streaming calls only.
+- WC003 checks the places the guide names (user `text` blocks and `search_result` blocks). It does not flag bare `text` blocks inside `tool_result`, because the guide does not say.
+- The static scanner is a set of simple patterns. It misses anything assembled at runtime, which is why the pytest plugin exists.
+- No auto-fix and no TypeScript or other SDKs in v0.1.
+
+## Licence
+
+MIT. See [LICENSE](LICENSE).
+
+---
+
+Built by [Ishan Yash](https://ishanyash.com)

pytest_wirecheck-0.1.0/pyproject.toml

@@ -0,0 +1,50 @@
+[build-system]
+requires = ["setuptools>=77"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "pytest-wirecheck"
+version = "0.1.0"
+description = "Record what your code really sends to the Claude API in tests, and fail the build if a request would break under API version 2026-10-21."
+readme = "README.md"
+requires-python = ">=3.10"
+license = "MIT"
+license-files = ["LICENSE"]
+authors = [{ name = "Ishan Yash" }]
+keywords = ["pytest", "anthropic", "claude", "claude-api", "migration", "ci", "lint"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Framework :: Pytest",
+    "Intended Audience :: Developers",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3 :: Only",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
+    "Topic :: Software Development :: Quality Assurance",
+    "Topic :: Software Development :: Testing",
+]
+dependencies = ["pytest>=8.0"]
+
+[project.optional-dependencies]
+test = ["anthropic>=2.0.0"]
+
+[project.urls]
+Homepage = "https://github.com/ishanyash/wirecheck"
+Source = "https://github.com/ishanyash/wirecheck"
+Issues = "https://github.com/ishanyash/wirecheck/issues"
+
+[project.scripts]
+wirecheck = "wirecheck.cli:main"
+
+[project.entry-points.pytest11]
+wirecheck = "wirecheck.plugin"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = "-p pytester"

pytest_wirecheck-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

pytest_wirecheck-0.1.0/src/pytest_wirecheck.egg-info/PKG-INFO

@@ -0,0 +1,175 @@
+Metadata-Version: 2.4
+Name: pytest-wirecheck
+Version: 0.1.0
+Summary: Record what your code really sends to the Claude API in tests, and fail the build if a request would break under API version 2026-10-21.
+Author: Ishan Yash
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/ishanyash/wirecheck
+Project-URL: Source, https://github.com/ishanyash/wirecheck
+Project-URL: Issues, https://github.com/ishanyash/wirecheck/issues
+Keywords: pytest,anthropic,claude,claude-api,migration,ci,lint
+Classifier: Development Status :: 3 - Alpha
+Classifier: Framework :: Pytest
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Software Development :: Testing
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: pytest>=8.0
+Provides-Extra: test
+Requires-Dist: anthropic>=2.0.0; extra == "test"
+Dynamic: license-file
+
+# WireCheck
+
+**Your tests pass. Your Claude API calls return 400. WireCheck checks what your code really sends to the Claude API in tests, and fails the build if a request would break under API version 2026-10-21.**
+
+![pytest --wirecheck failing on three hidden temperature bugs](https://raw.githubusercontent.com/ishanyash/wirecheck/main/docs/screenshot.png)
+
+[PyPI: pytest-wirecheck](https://pypi.org/project/pytest-wirecheck/) · [GitHub Marketplace: WireCheck for Claude API](https://github.com/marketplace/actions/wirecheck-for-claude-api) · [Demo](demo/)
+
+## Why
+
+On 21 Oct 2026 Anthropic released Claude API version `2026-10-21`. The new SDK majors (Python `anthropic` 2.0.0 and later) send it by default. Under it, a Messages request that sends `temperature`, `top_p` or `top_k` returns **400, even at the default value** ([migration guide](https://platform.claude.com/docs/en/api/migration-2026-10-21)).
+
+Most test suites mock the API, so they never see that 400. And these parameters are hard to grep for. Since `anthropic` 1.0.0, `temperature=` is no longer a keyword of `messages.create` (passing it is a `TypeError`, so tests catch it), and the SDK 1.0 migration guide said to pass it through `extra_body` instead. `extra_body` is merged into the JSON at runtime, so no type checker sees it, and it often sits in a shared wrapper or a defaults dict, far from the call. That is exactly how [Nojoin broke](https://github.com/Valtora/Nojoin/issues/554): a loose version floor pulled in `anthropic` 2.x, a wrapper still sent `temperature: 0.2` through `extra_body`, and the tests mocked the client, so they all passed.
+
+WireCheck looks at the final request as it leaves the HTTP client, after the SDK has merged every wrapper, default and `extra_body`.
+
+## Quick start
+
+```bash
+pip install pytest-wirecheck
+pytest --wirecheck
+```
+
+A test that sends a breaking request now fails, and the run ends with a short report. This is the [demo](demo/) on `anthropic` 2.3.0:
+
+```
+3 requests to the Claude API checked: 3 errors, 0 warnings
+anthropic SDK: 2.3.0; API versions seen: 2026-10-21 x3
+
+RULE   LEVEL  COUNT  TEST                                         CALL SITE                    WHAT
+WC001  error  1      broken/test_broken.py::test_direct_call      broken/app_direct.py:12      temperature
+WC001  error  1      broken/test_broken.py::test_extra_body       broken/app_extra_body.py:18  temperature
+WC001  error  1      broken/test_broken.py::test_wrapper_factory  broken/app_factory.py:21     top_p
+```
+
+Each row shows the rule, the test that sent the request, and the file and line in your code that made the call. Works with `pytest-xdist` too.
+
+### GitHub Action
+
+```yaml
+name: WireCheck
+on: pull_request
+permissions:
+  contents: read
+  pull-requests: write   # to post the findings comment
+jobs:
+  wirecheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+      - run: pip install -e ".[test]"        # your project and its test deps
+      - uses: ishanyash/wirecheck@v0.1.0
+        with:
+          pytest-args: tests/
+```
+
+The Action runs the static scan and your tests with `--wirecheck`, writes the findings to the job summary, and posts **one** pull request comment with a findings table (it updates the same comment on later pushes).
+
+| Input | Default | Meaning |
+|---|---|---|
+| `path` | `.` | Folders for the static scan |
+| `run-pytest` | `true` | Run `pytest --wirecheck` |
+| `pytest-args` | | Extra pytest arguments |
+| `working-directory` | `.` | Where to run |
+| `fail-on` | `error` | `error`, `warn` or `never` |
+| `comment` | `true` | Post the PR comment |
+| `install` | `action` | `action` installs WireCheck from the tagged Action source; `skip` if you install it yourself |
+
+## What it checks
+
+Rules come from the [migration guide](https://platform.claude.com/docs/en/api/migration-2026-10-21) and the [release notes](https://platform.claude.com/docs/en/release-notes/overview).
+
+**In the real requests your tests send (`pytest --wirecheck`):**
+
+| Rule | What | Level |
+|---|---|---|
+| WC001 | `temperature`, `top_p` or `top_k` in a Messages, token count or batch request | error on 2026-10-21 |
+| WC002 | `document` block directly in an `assistant` message | error on 2026-10-21 |
+| WC003 | `text` block with non-empty `citations` in a `user` message, including inside `search_result` | error on 2026-10-21 |
+| WC004 | `X-Api-Key` header set by your code. SDK 2.x sends `Authorization: Bearer`, so your key no longer replaces the client key (both are sent) | warning |
+| WC005 | `claude-opus-4-8` with `speed: "fast"` | warning now, error from 2026-11-30 |
+
+**In source (`wirecheck scan`):**
+
+| Rule | What | Level |
+|---|---|---|
+| WCS001 | `MessageParam(...)` / `BetaMessageParam(...)` called or subclassed (TypeError in SDK 2.x) | error |
+| WCS002 | `X-Api-Key` in `extra_headers` / `default_headers` | warning |
+| WCS003 | `ant --api-key` / `ant --auth-token` (removed in the `ant` CLI 2.0.0) | error |
+| WCS004 | Text Completions calls (`client.completions.create`, `/v1/complete`) | error |
+| WCS005 | `temperature` / `top_p` / `top_k` visible in a Messages call (a hint; the runtime check is the real one) | warning |
+
+```bash
+wirecheck scan .                 # text
+wirecheck scan src --format json # or markdown
+```
+
+## Which API version applies
+
+For each request WireCheck reads the `anthropic-version` header. If there is none, it uses the installed SDK (`anthropic` 2.0.0 and later means `2026-10-21`).
+
+- On `2026-10-21`, WC001 to WC003 are **errors** and fail the test that sent the request.
+- On `2023-06-01` (SDK 1.x and older), the same findings are **warnings**. Your code works today and breaks when you upgrade. Use `--wirecheck-fail-on=warn` to fail on them now.
+
+## How it works
+
+When enabled, the plugin wraps `Client.send` and `AsyncClient.send` of `httpx2` (used by `anthropic` 1.x and 2.x) and `httpx` (older SDKs). Every request to `api.anthropic.com`, `$ANTHROPIC_BASE_URL` or a `--wirecheck-base-url` is recorded before it reaches the transport, so it is seen even when the test mocks the response with a mock transport, `respx`, or the `wirecheck_stub` fixture, and even when there is no network. API keys are redacted before anything is stored. The hook is removed when the run ends.
+
+## Options
+
+| Option | Meaning |
+|---|---|
+| `--wirecheck` | Turn it on (or `wirecheck = true` in your pytest ini, or `WIRECHECK=1`) |
+| `--wirecheck-fail-on` | `error` (default), `warn`, or `never` |
+| `--wirecheck-base-url URL` | Also capture a gateway or proxy URL (repeatable) |
+| `--wirecheck-report PATH` | Write findings as JSON |
+| `--wirecheck-markdown PATH` | Write findings as Markdown |
+| `WIRECHECK_TODAY=YYYY-MM-DD` | Pin the date used by date-based rules |
+
+Fixtures and markers:
+
+- `wirecheck_stub` answers every Claude API request in a test with a canned reply, with no network. It mocks the response, not the client, so WireCheck still sees what you send. Set `wirecheck_stub["text"]` to change the reply.
+- `wirecheck_requests` lists the requests the current test sent.
+- `@pytest.mark.wirecheck_skip` ignores requests from one test.
+
+## Known limits
+
+- **It only sees requests that are really built.** If a test replaces `client.messages.create` (or the whole client) with a `MagicMock`, no request exists and WireCheck sees nothing. It prints a hint when a run captured no requests. Mock the HTTP response instead.
+- Python only, and only the `httpx` / `httpx2` HTTP clients (the SDK default). The optional `aiohttp` backend is not hooked.
+- Bedrock and Vertex requests go to other hosts and carry the version differently. Add their URL with `--wirecheck-base-url` if you want them recorded; version detection there falls back to the SDK version.
+- `wirecheck_stub` answers non-streaming calls only.
+- WC003 checks the places the guide names (user `text` blocks and `search_result` blocks). It does not flag bare `text` blocks inside `tool_result`, because the guide does not say.
+- The static scanner is a set of simple patterns. It misses anything assembled at runtime, which is why the pytest plugin exists.
+- No auto-fix and no TypeScript or other SDKs in v0.1.
+
+## Licence
+
+MIT. See [LICENSE](LICENSE).
+
+---
+
+Built by [Ishan Yash](https://ishanyash.com)

pytest_wirecheck-0.1.0/src/pytest_wirecheck.egg-info/SOURCES.txt

@@ -0,0 +1,25 @@
+LICENSE
+README.md
+pyproject.toml
+src/pytest_wirecheck.egg-info/PKG-INFO
+src/pytest_wirecheck.egg-info/SOURCES.txt
+src/pytest_wirecheck.egg-info/dependency_links.txt
+src/pytest_wirecheck.egg-info/entry_points.txt
+src/pytest_wirecheck.egg-info/requires.txt
+src/pytest_wirecheck.egg-info/top_level.txt
+src/wirecheck/__init__.py
+src/wirecheck/__main__.py
+src/wirecheck/capture.py
+src/wirecheck/cli.py
+src/wirecheck/clock.py
+src/wirecheck/plugin.py
+src/wirecheck/report.py
+src/wirecheck/rules.py
+src/wirecheck/scan.py
+src/wirecheck/versions.py
+tests/test_capture.py
+tests/test_plugin.py
+tests/test_rules.py
+tests/test_scan.py
+tests/test_sdk.py
+tests/test_versions.py

pytest_wirecheck-0.1.0/src/pytest_wirecheck.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

pytest_wirecheck-0.1.0/src/pytest_wirecheck.egg-info/entry_points.txt

@@ -0,0 +1,5 @@
+[console_scripts]
+wirecheck = wirecheck.cli:main
+
+[pytest11]
+wirecheck = wirecheck.plugin

pytest_wirecheck-0.1.0/src/pytest_wirecheck.egg-info/requires.txt

@@ -0,0 +1,4 @@
+pytest>=8.0
+
+[test]
+anthropic>=2.0.0

pytest_wirecheck-0.1.0/src/pytest_wirecheck.egg-info/top_level.txt

@@ -0,0 +1 @@
+wirecheck

pytest_wirecheck-0.1.0/src/wirecheck/__init__.py

@@ -0,0 +1,3 @@
+"""WireCheck: check what your code really sends to the Claude API."""
+
+__version__ = "0.1.0"

pytest_wirecheck-0.1.0/src/wirecheck/__main__.py

@@ -0,0 +1,3 @@
+from .cli import main
+
+raise SystemExit(main())