fix(claude): decloak tool names in same-format streaming passthrough
translateResponse() short-circuited untouched on claude->claude streaming, so OAuth-cloaked tool names (CLAUDE_TOOL_SUFFIX) leaked to the client and every tool call was rejected as unknown. Add decloakStreamChunk(), the streaming counterpart of decloakToolNames(), and call it on the same-format path using the already-plumbed state.toolNameMap.
This commit is contained in:
49
tests/translator/claude-claude-stream-decloak.test.js
Normal file
49
tests/translator/claude-claude-stream-decloak.test.js
Normal file
@@ -0,0 +1,49 @@
|
||||
// Regression test: claude → claude streaming passthrough must still decloak
|
||||
// tool names. translateRequest() cloaks client tool names with CLAUDE_TOOL_SUFFIX
|
||||
// for OAuth-cloaked Claude providers (cloakToolsOnOAuth) even when source and
|
||||
// target formats match; the same-format fast path in translateResponse() used
|
||||
// to return chunks untouched, leaking the suffixed name (e.g. "run_code_ide")
|
||||
// to the client, which then rejected the call as an unknown tool.
|
||||
import { describe, it, expect } from "vitest";
|
||||
import "./registerAll.js";
|
||||
import { translateResponse } from "../../open-sse/translator/index.js";
|
||||
import { FORMATS } from "../../open-sse/translator/formats.js";
|
||||
import { CLAUDE_TOOL_SUFFIX } from "../../open-sse/config/appConstants.js";
|
||||
|
||||
const CLOAKED = "run_code" + CLAUDE_TOOL_SUFFIX;
|
||||
|
||||
const toolUseStart = (name) => ({
|
||||
type: "content_block_start",
|
||||
index: 1,
|
||||
content_block: { type: "tool_use", id: "toolu_01XYZ", name, input: {} }
|
||||
});
|
||||
|
||||
describe("Claude → Claude streaming passthrough (OAuth tool cloak)", () => {
|
||||
const state = { toolNameMap: new Map([[CLOAKED, "run_code"]]) };
|
||||
|
||||
it("restores the original tool name on tool_use content_block_start", () => {
|
||||
const [out] = translateResponse(FORMATS.CLAUDE, FORMATS.CLAUDE, toolUseStart(CLOAKED), state);
|
||||
expect(out.content_block.name).toBe("run_code");
|
||||
});
|
||||
|
||||
it("leaves uncloaked chunks untouched (identity passthrough)", () => {
|
||||
const chunk = toolUseStart("Bash"); // decoy name, not in the map
|
||||
const [out] = translateResponse(FORMATS.CLAUDE, FORMATS.CLAUDE, chunk, state);
|
||||
expect(out).toBe(chunk);
|
||||
|
||||
const textChunk = { type: "content_block_delta", index: 0, delta: { type: "text_delta", text: "hi" } };
|
||||
const [outText] = translateResponse(FORMATS.CLAUDE, FORMATS.CLAUDE, textChunk, state);
|
||||
expect(outText).toBe(textChunk);
|
||||
});
|
||||
|
||||
it("is a no-op when no cloak map is present", () => {
|
||||
const chunk = toolUseStart(CLOAKED);
|
||||
const [out] = translateResponse(FORMATS.CLAUDE, FORMATS.CLAUDE, chunk, {});
|
||||
expect(out).toBe(chunk);
|
||||
});
|
||||
|
||||
it("tolerates the null flush chunk", () => {
|
||||
const [out] = translateResponse(FORMATS.CLAUDE, FORMATS.CLAUDE, null, state);
|
||||
expect(out).toBeNull();
|
||||
});
|
||||
});
|
||||
Reference in New Issue
Block a user