Non-empty list/dict `parentUuid` raises uncaught `TypeError` in session chain builders, killing the whole read

Aperta Adatta ai principianti
  • Qualcosa non va?
#1,507 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 2 giorni

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
2/5
Tempo stimato
1-3 ore
Idoneità per principianti
72/100
Tipo di issue
Bug
Chiarezza
Specificata chiaramente
Stato di attività
Attiva
Stack tecnologico
python
Ambito
backend

Direzione di ricerca

Inizia da _build_conversation_chain in src/claude_agent_sdk/_internal/sessions.py (intorno alle righe 960-964), dove parentUuid viene aggiunto a un set, poi controlla _build_subagent_chain vicino alle righe 1507-1508. Esegui il repro della issue con un CLAUDE_CONFIG_DIR temporaneo per vedere il TypeError. È completato quando una trascrizione con un parentUuid non stringa restituisce i messaggi rimanenti e un test di controllo copre un valore lista o dizionario.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

bug good first issue

Summary

The session chain builders assume parentUuid is a hashable string, but neither transcript parser validates parentUuid. A transcript entry with a non-empty list/dict parentUuid passes parsing, then raises an uncaught TypeError: unhashable type from get_session_messages (and the store-backed variants), killing the entire read instead of skipping or tolerating the malformed entry.

This is a correctness/error-handling bug, not a security vulnerability: triggering it requires a transcript file the caller already controls.

Version

  • Repo: anthropics/claude-agent-sdk-python
  • Package: claude-agent-sdk 0.2.181
  • Commit: 22b8eb9c19adfa78759b79e22bd664a57843bb06 (main, 2026-11-12)

Location

src/claude_agent_sdk/_internal/sessions.py:960-964 (_build_conversation_chain):

parent = entry.get("parentUuid")
if parent:
    parent_uuids.add(parent)

set.add on a list/dict raises TypeError: unhashable type. The same unvalidated-parentUuid pattern appears at :1507-1508 in _build_subagent_chain (by_uuid.get(parent)). Neither _parse_transcript_entries (:897-926) nor _filter_transcript_entries (:1814-1829) checks parentUuid — they validate only type and that uuid is a str. get_session_messages has no try/except around the chain build (:1330-1338).

Precise trigger: the parentUuid must be a non-empty list/dict. Falsy []/{} are skipped by if parent: and do not raise (verified as a control case).

Minimal repro

Against a temporary CLAUDE_CONFIG_DIR (never the real ~/.claude), with a transcript whose second entry has parentUuid: ["x"]:

import json, os, tempfile
from pathlib import Path
from claude_agent_sdk._internal import sessions

session_id = "550e8400-e29b-41d4-a716-446655440001"
entries = [
    {"uuid": "u1", "parentUuid": None, "type": "user",
     "message": {"role": "user", "content": "first"}},
    {"uuid": "u2", "parentUuid": ["x"], "type": "user",
     "message": {"role": "user", "content": "second"}},
]

with tempfile.TemporaryDirectory() as tmp:
    project_dir = Path(tmp) / "projects" / "tmp-proj"
    project_dir.mkdir(parents=True)
    (project_dir / f"{session_id}.jsonl").write_text(
        "".join(json.dumps(e) + "\n" for e in entries), encoding="utf-8"
    )
    os.environ["CLAUDE_CONFIG_DIR"] = tmp
    sessions.get_session_messages(session_id)

Observed: TypeError: unhashable type: 'list' propagates out of get_session_messages — the whole read fails, including the well-formed entries.

Expected: the malformed entry is skipped or its non-string parentUuid is treated as absent, and the read returns the remaining messages.

The store-backed variant (_filter_transcript_entries) and the subagent variant (_build_subagent_chain) share the unvalidated-parentUuid pattern by code reading; only the filesystem get_session_messages path was executed. A dict parentUuid (e.g. {"x": 1}) was not separately run — same unhashable mechanism as the list case.

Impact

One malformed entry in a session transcript makes the entire session unreadable via get_session_messages, instead of degrading gracefully. Any consumer reading sessions (resume flows, history views, tooling) hits an unhandled crash on the whole read. Local correctness impact only.

Suggested fix

Validate parentUuid in _parse_transcript_entries and _filter_transcript_entries (treat a non-string parentUuid as absent, or skip the entry), and/or guard the chain builders to ignore unhashable/non-string parent values.

Environment

  • Python 3.12.3, Linux
  • Verified end-to-end through the public get_session_messages() against a temp config dir at the pinned commit above. Baseline: a string-parentUuid chain reads 2 messages; control: falsy parentUuid: [] raises nothing.
Lingua principale
Python
Stelle
8.5k
Fork
1.4k
Merge medio
3g 10h
PR unite (30g)
13

Preparare l'ambiente

Questo progetto non fornisce container di sviluppo, Dockerfile né guida per i contributori, quindi l'ambiente è a tuo carico: parti dal suo README e consulta la nostra guida al primo contributo per i passaggi generali.

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di anthropics/claude-agent-sdk-python

Tutte le issue di anthropics/claude-agent-sdk-python

Issue simili

Altre issue su Python

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.