fix: sanitize server error responses to prevent internal detail leaks

backend/main.py

@@ -221,13 +221,16 @@ async def analyze_crop_image(
     except HTTPException:
         raise
     except ValueError as ve:
-        logger.error(f"Image processing validation error: {ve}")
-        raise HTTPException(status_code=status.HTTP_422_UNPROCESSABLE_ENTITY, detail=str(ve))
+        logger.error(f"Image processing error: {ve}")
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail="Server Error. Please try again later."
+        )
     except Exception as e:
-        logger.exception(f"Gemini inference failure: {e}")
+        logger.exception(f"Inference failure: {e}")
         raise HTTPException(
             status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
-            detail=f"Gemini analysis service encountered an error: {str(e)}"
+            detail="Server Error. Please try again later."
         )
 
 

backend/pipeline.py

@@ -209,10 +209,8 @@ class PureGeminiInferenceEngine:
                 return cached_resp
 
         if not self.is_configured():
-            raise ValueError(
-                "Hugging Face Cloud Server par Google Gemini Vision AI Key कॉन्फ़िगर नहीं है। "
-                "कृपया Hugging Face Space Settings -> Secrets में GEMINI_API_KEY सेट करें ताकि ऑनलाइन AI Vision सक्रिय हो सके।"
-            )
+            logger.error("Gemini API Key is not configured on the backend server.")
+            raise RuntimeError("Server Error. Please try again later.")
 
         payload = {
             "contents": [
@@ -295,9 +293,8 @@ class PureGeminiInferenceEngine:
 
         # 4. If all models failed or busy
         if raw_text is None:
-            raise RuntimeError(
-                f"Google Gemini AI Vision सर्वर अभी अत्यधिक व्यस्त है ({last_error})। कृपया 10-15 सेकंड बाद पुनः प्रयास करें।"
-            )
+            logger.error(f"All Gemini models exhausted or timed out ({last_error})")
+            raise RuntimeError("Server Error. Please try again later.")
 
         # 5. Robust Self-Healing JSON parsing
         try: