mlsmaycon 1949a234e7 [proxy] Mirror LLM denials in the caller's provider error shape ...

A budget stop, a blocked model or an unroutable model all rendered as the
NetBird deny envelope alone. LLM clients only parse their own provider's
error shape, so the reason never reached the user: Claude Code showed an
unexplained API error where it could have shown the policy message.

Carry the resolved surface on the deny reason and add the vendor's error
object next to the existing fields. The body stays a superset of what it
was, so anything reading code, message, details or middleware is
unaffected. Status codes are unchanged here: mapping window caps to 429
needs the window reset plumbed through the limits response before a
correct Retry-After can be sent.

2026-08-22 21:14:05 +02:00

..

factory.go

[management, proxy] scope agent-network model allowlist per policy/group and provider (#6905)

2026-07-27 20:43:59 +02:00

middleware_test.go

[management, proxy] scope agent-network model allowlist per policy/group and provider (#6905)

2026-07-27 20:43:59 +02:00

middleware.go

[proxy] Mirror LLM denials in the caller's provider error shape

2026-08-22 21:14:05 +02:00

redact_test.go

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00

redact.go

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00