v1.0.2

Fixed

• Provider errors never carry your account token, in more cases. 1.0.1 removed the token from provider errors. This release covers the remaining ways a provider or proxy could repeat it:
  • a streamed error from a response that isn't labelled as a stream, which OpenCode 1, OpenCode 2 and Pi all still read;
  • a token hidden in a duplicated field, written with escapes, or split across lines;
  • an error raised while a failed response is being read;
  • keep-warm requests, which now scrub their errors the same way as normal requests.
• Errors keep what you need, and only that. An error now leaves the plugin as a fresh copy carrying only its message, status, code, retry timing and the provider's request ID. OpenCode makes the same retry decisions as before. Large error bodies are cut down to the details those decisions use.

Successful responses pass through unchanged. No upgrade steps are needed.

Full Changelog: v1.0.1...v1.0.2