from app.ports.model_providers import ModelProviderError, ProviderErrorKind
from app.tools.provider_smoke import failed_probe


def test_failed_probe_only_exposes_sanitized_provider_fields() -> None:
    error = ModelProviderError(
        operation="embedding.create",
        kind=ProviderErrorKind.AUTHENTICATION,
        status_code=401,
        provider_code="invalid_api_key",
        request_id="req-safe-1",
    )

    result = failed_probe("embedding", error)

    assert result.error_kind == "authentication"
    assert result.status_code == 401
    assert result.request_id == "req-safe-1"
    assert "invalid_api_key" not in repr(result)


def test_unexpected_error_is_reduced_to_fixed_category() -> None:
    result = failed_probe("chat", RuntimeError("sensitive content"))

    assert result.error_kind == "internal_contract_error"
    assert "sensitive content" not in repr(result)