Hide internal backend errors from API responses

[Copilot]

Outcome

API routes no longer expose backend hostnames, proxy details, stack traces, or raw provider errors to clients. Detailed failures remain server-side for diagnostics.

Scope

• Included:
  • Sanitized agent, event extraction, training, and video search error responses.
  • Removed raw upload/trigger exception details.
  • Added agent-route regression coverage.
• Explicitly excluded:
  • Internal logging behavior and success responses.
  • Unrelated API routes.

Risk

• Risk level: low
• Failure mode: Clients receive stable generic errors instead of diagnostic exception text.
• Rollback: Revert the current commit.

Verification

Current head: e3e8a32

• Focused tests
• Required CI
• Review threads resolved

Production evidence

Not applicable; this change affects response sanitization and has no deployment-specific behavior.

Agent handoff

• One canonical issue is linked
• No competing PR implements the same issue
• Acceptance criteria are satisfied
• Required checks pass on the current head
• Human decision is requested only for product, security, irreversible infrastructure, or production approval

• Fixes Re-cut work orphaned by the secret-purge force-push (26 PRs) #1378

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
v0-uvai	Ready	Preview, v0	Sep 8, 2026 11:13pm UTC