4 Commits

Include renames

Author	SHA1	Message	Date
dev_agentandClaude Opus 5.5	d11cdbbefb	Keep %#v of every LLM adapter error free of the API key (MQ-03) ... %#v prints struct field names, so a key that spells one (for example "body" on ProviderError) leaked even though Error() was redacted. - llm.ProviderError and llm.RateLimitedError gain GoString returning their already-redacted Error text. - Both adapters' transportFailure now holds its fully redacted text and gains GoString. - The redact backstop now wraps every non-nil error when a key is set, so the returned error and every unwrapped layer print through redactedError.GoString, never a raw struct such as fmt.wrapError. - redactedError.As also refuses a match whose %#v form holds the key. - Contract test in both adapters: field-name keys (body, status, text, RetryAfter, msg, err, key, kind) on HTTP 500 "down" and 429, checking %#v of the returned error, every unwrapped layer and errors.As results. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 08:05:17 -04:00
dev_agentandClaude Opus 5.5	cdf59c4eee	Stop LLM adapters following redirects and cap Retry-After ... MQ-01: the Anthropic adapter used a default http.Client, so a 3xx from the configured endpoint was followed and the x-api-key header resent to the redirect target; net/http strips only its own sensitive headers. Both adapters now use a client whose CheckRedirect returns ErrUseLastResponse, so a 3xx comes back as an llm.ProviderError and nothing is requested again. The OpenAI-compatible adapter gets the same change: it forwards configured extra headers (which may carry a credential and which net/http does not treat as sensitive) across hosts, and net/http keeps Authorization on a same-host https-to-http redirect. MQ-02: a delay-seconds Retry-After too large for time.Duration overflowed into a negative wait. retryAfter now caps the value at the most whole seconds a time.Duration holds (also for values beyond int64) and the response still maps to ErrRateLimited. Tests: TestRedirectIsNotFollowed (302 to a second server, which must get no request) and TestRateLimitedHugeRetryAfterIsCapped in both packages, plus huge-number cases in TestRetryAfter. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 07:57:37 -04:00
dev_agentandClaude Opus 5.5	4f26ea5ad6	Keep the API key out of %#v for redacted LLM errors ... The OpenAI adapter's redactedError had no GoString, so %#v printed its fields, including the raw API key. Add GoString returning the redacted text, matching the Anthropic adapter; redactedJoin inherits it. Add TestRedactedErrorsFormatWithoutKey to both adapters, formatting redactedError, redactedJoin and transportFailure with %v, %+v and %#v. llm.ProviderError and llm.RateLimitedError keep no secret and are already covered by TestTypedErrorsDoNotKeepSecret. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 07:52:04 -04:00
dev_agent	acd29c8221	Feature 08 task 2: OpenAI-compatible adapter (#35) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 07:41:45 -04:00