From e75c8862423b8af3fffe668e062df50980e23de0 Mon Sep 17 00:00:00 2001 From: shad Date: Sun, 14 Jun 2026 17:49:02 +0400 Subject: [PATCH] fix(llm-proxy): sanitise 503 body (no env-var names in network response) Oracle round-8 polish caveat: the 503 body still named OPENAI_API_KEY and ANTHROPIC_API_KEY in the 'hint' field. Buyer-visible in devtools even though no UI renders it. Replaced with the same buyer-safe copy the Agent OFF pill uses: 'natural language replies are not enabled in this environment'. Image bumped to canvas-llm-proxy:sha-002. Live verified. --- llm-proxy/main.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/llm-proxy/main.py b/llm-proxy/main.py index de339f2..67eef53 100644 --- a/llm-proxy/main.py +++ b/llm-proxy/main.py @@ -136,5 +136,5 @@ async def chat(request: Request) -> JSONResponse: return JSONResponse( status_code=503, - content={"error": "no provider configured", "hint": "set OPENAI_API_KEY or ANTHROPIC_API_KEY"}, + content={"error": "natural language replies are not enabled in this environment"}, )