Added
- Rate-limited and transient upstream failures are now retried with exponential backoff, honouring
Retry-Afterin both its forms and clamping it either way. Previously a single429failed the tool call outright and the question had to be asked again.
Only 429, the vendor-specific 430 and transient 5xx are retried — a 401 will not fix itself, and asking again just burns the budget that caused the problem. A thrown error is deliberately not retried: when fetch rejects we cannot know whether the request landed, and login mints a token valid ~180 days with no revocation path.
Changed
- ADR 0004 supersedes half of ADR 0003. Long-term history via Nightscout, if built, becomes a separate project rather than a second source here — the tool surface cannot state one honest horizon for two sources with different limits.
Not a medical device. Known gaps unchanged: TrendArrow untranslated, history caps at ~12 h.