fix: redact provider credentials from repr (#285)

Author: lfnovo

CHANGELOG.md

@@ -26,6 +26,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   `anthropic` provider at MiniMax's Anthropic-protocol API via `base_url`, with
   the regional (international / mainland China) URLs. (#278)
 
+### Fixed
+
+- **Provider credentials are redacted from object representations.** API keys
+  and configuration dictionaries no longer appear in dataclass `repr` output,
+  preventing failed requests and test tracebacks from leaking credentials.
+
 ## [2.26.0] - 2026-07-29
 
 ### Added

src/esperanto/providers/embedding/base.py

@@ -23,12 +23,12 @@ class EmbeddingModel(HttpConnectionMixin, ABC):
     # breaks otherwise-correct user code (ARCHITECTURE.md "Hot-Swap-First Defaults").
     MAX_BATCH_SIZE: ClassVar[int] = 0
 
-    api_key: Optional[str] = None
+    api_key: Optional[str] = field(default=None, repr=False)
     base_url: Optional[str] = None
     model_name: Optional[str] = None
     organization: Optional[str] = None
-    config: Optional[Dict[str, Any]] = None
-    _config: Dict[str, Any] = field(default_factory=dict)
+    config: Optional[Dict[str, Any]] = field(default=None, repr=False)
+    _config: Dict[str, Any] = field(default_factory=dict, repr=False)
 
     def __post_init__(self):
         """Initialize configuration after dataclass initialization."""

src/esperanto/providers/embedding/openrouter.py

@@ -1,7 +1,7 @@
 """OpenRouter embedding model implementation."""
 
 import os
-from dataclasses import dataclass
+from dataclasses import dataclass, field
 from typing import ClassVar, Dict, List, Optional
 
 from esperanto.common_types import Model
@@ -16,7 +16,7 @@ class OpenRouterEmbeddingModel(OpenAIEmbeddingModel):
     MAX_BATCH_SIZE: ClassVar[int] = 96
 
     base_url: Optional[str] = None
-    api_key: Optional[str] = None
+    api_key: Optional[str] = field(default=None, repr=False)
 
     def __post_init__(self):
         """Initialize OpenRouter-specific configuration."""

src/esperanto/providers/llm/base.py

@@ -13,7 +13,7 @@
 class LanguageModel(HttpConnectionMixin, ABC):
     """Base class for all language models."""
 
-    api_key: Optional[str] = None
+    api_key: Optional[str] = field(default=None, repr=False)
     base_url: Optional[str] = None
     model_name: Optional[str] = None
     max_tokens: int = 850
@@ -22,12 +22,12 @@ class LanguageModel(HttpConnectionMixin, ABC):
     top_p: float = 0.9
     structured: Optional[Dict[str, Any]] = None
     organization: Optional[str] = None
-    config: Optional[Dict[str, Any]] = None
+    config: Optional[Dict[str, Any]] = field(default=None, repr=False)
     # Tool-related fields
     tools: Optional[List[Tool]] = None
     tool_choice: Optional[Union[str, Dict[str, Any]]] = None
     parallel_tool_calls: Optional[bool] = None
-    _config: Dict[str, Any] = field(default_factory=dict)
+    _config: Dict[str, Any] = field(default_factory=dict, repr=False)
 
     @property
     def models(self) -> List[Model]:

src/esperanto/providers/llm/openai_compatible.py

@@ -1,6 +1,6 @@
 """OpenAI-compatible language model implementation."""
 
-from dataclasses import dataclass
+from dataclasses import dataclass, field
 from typing import (
     TYPE_CHECKING,
     Any,
@@ -39,7 +39,7 @@ class OpenAICompatibleLanguageModel(ProfileAwareMixin, OpenAILanguageModel):
     """OpenAI-compatible language model implementation for custom endpoints."""
 
     base_url: Optional[str] = None
-    api_key: Optional[str] = None
+    api_key: Optional[str] = field(default=None, repr=False)
 
     def __post_init__(self):
         """Initialize OpenAI-compatible configuration."""

src/esperanto/providers/llm/openrouter.py

@@ -1,7 +1,7 @@
 """OpenRouter language model implementation."""
 
 import os
-from dataclasses import dataclass
+from dataclasses import dataclass, field
 from typing import (
     TYPE_CHECKING,
     Any,
@@ -39,7 +39,7 @@ class OpenRouterLanguageModel(OpenAILanguageModel):
     """OpenRouter language model implementation using OpenAI-compatible API."""
 
     base_url: Optional[str] = None  # Changed type hint
-    api_key: Optional[str] = None  # Changed type hint
+    api_key: Optional[str] = field(default=None, repr=False)
 
     def __post_init__(self):
         # Extract api_key and base_url from config dict first (before parent sets OpenAI defaults)

src/esperanto/providers/llm/perplexity.py

@@ -48,7 +48,7 @@ class PerplexityLanguageModel(LanguageModel):
     """Perplexity AI language model implementation using httpx."""
 
     base_url: Optional[str] = None
-    api_key: Optional[str] = None
+    api_key: Optional[str] = field(default=None, repr=False)
     search_domain_filter: Optional[List[str]] = field(default=None)
     return_images: Optional[bool] = field(default=None)
     return_related_questions: Optional[bool] = field(default=None)

src/esperanto/providers/reranker/base.py

@@ -14,11 +14,11 @@
 class RerankerModel(HttpConnectionMixin, ABC):
     """Base class for all reranker providers."""
 
-    api_key: Optional[str] = None
+    api_key: Optional[str] = field(default=None, repr=False)
     base_url: Optional[str] = None
     model_name: Optional[str] = None
-    config: Optional[Dict[str, Any]] = None
-    _config: Dict[str, Any] = field(default_factory=dict)
+    config: Optional[Dict[str, Any]] = field(default=None, repr=False)
+    _config: Dict[str, Any] = field(default_factory=dict, repr=False)
 
     def __post_init__(self):
         """Initialize configuration after dataclass initialization."""
@@ -221,4 +221,4 @@ def _clean_config(self, config: Dict[str, Any]) -> Dict[str, Any]:
         Returns:
             Cleaned configuration dictionary.
         """
-        return {k: v for k, v in config.items() if v is not None}
+        return {k: v for k, v in config.items() if v is not None}

src/esperanto/providers/stt/base.py

@@ -147,9 +147,9 @@ class SpeechToTextModel(HttpConnectionMixin, ABC):
     """
 
     model_name: Optional[str] = None
-    api_key: Optional[str] = None
+    api_key: Optional[str] = field(default=None, repr=False)
     base_url: Optional[str] = None
-    config: Optional[Dict[str, Any]] = None
+    config: Optional[Dict[str, Any]] = field(default=None, repr=False)
     timeout: Optional[float] = None
     _config: Dict[str, Any] = field(init=False, repr=False)
 

src/esperanto/providers/tts/base.py

@@ -24,9 +24,9 @@ class TextToSpeechModel(HttpConnectionMixin, ABC):
     """
 
     model_name: Optional[str] = None
-    api_key: Optional[str] = None
+    api_key: Optional[str] = field(default=None, repr=False)
     base_url: Optional[str] = None
-    config: Optional[Dict[str, Any]] = None
+    config: Optional[Dict[str, Any]] = field(default=None, repr=False)
     timeout: Optional[float] = None
     _config: Dict[str, Any] = field(init=False, repr=False)