5 Commits

Include renames

Author	SHA1	Message	Date
dev_agentandClaude Opus 5.5	fba7667949	Keep only redacted text in typed errors, not the credential ... ProviderError and RateLimitedError now build their redacted Error text when constructed and do not store the secret, so formatting the value with %#v or %+v cannot print it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 07:38:03 -04:00
dev_agentandClaude Opus 5.5	893e00d14e	Strip the API key from fixed error text and keep typed matches ... ProviderError and the new NewRateLimitedError constructor now keep the credential and remove it from their complete Error() text, including fixed words such as "HTTP" and "rate", so errors.As to them succeeds through the adapter's redaction stand-in instead of being refused. The openai adapter builds RateLimitedError with the key. Tests cover the keys "HTTP" (500), "rate" (429) and "openai" (401 and no model), checking Error(), Body(), every unwrap layer, errors.Is and errors.As. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 07:36:56 -04:00
dev_agentandClaude Opus 5.5	68391d14c8	Never insert a redaction marker that itself holds the API key ... llm.Redact is now the single redaction rule for ProviderError bodies and the openai backstop. Each occurrence of the key becomes "[REDACTED]" only when the result then holds no key; otherwise occurrences are deleted until none remains, which also covers a marker that joins with its neighbours to form the key. NewProviderError redacts again after truncation so the "…" mark cannot complete the key. The openai adapter drops its own redactKey and the withheld-text fallback, which itself could hold a short key. redactedError.As now refuses a match whose text holds the key, so errors.As cannot reach an unredacted error. Tests cover the key "REDACTED" in a 500 body (ProviderError.Body and Error after errors.As) and the key "A" in a malformed JSON body (every unwrapped layer and every errors.As result). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 07:32:34 -04:00
dev_agentandClaude Opus 5.5	1f4356cd17	Keep base URL out of config errors and always keep a bounded error excerpt ... New no longer echoes the supplied base URL in any configuration error, so a credential in a rejected URL's query or fragment cannot leak. llm.NewProviderError now takes the single credential sent with the request ("" when none) and always keeps a body excerpt bounded to MaxBodyExcerpt bytes, redacting the credential first. Keyless Ollama errors therefore keep the vendor's explanation, e.g. model not found. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-03 16:28:21 -04:00
dev_agent	72042516e2	Feature 08 task 1: Provider interface, typed errors and Fake provider (#33) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 16:14:12 -04:00