feat(instrument): Error-aware event emission on framework exceptions across 10 lighter adapters (cross-poll #2)

[mmercuri]

Summary

Cross-pollination wave #2 from A:/tmp/adapter-cross-pollination-audit.md §2.3.

Mature adapters (LangChain on_*_error, AutoGen wrappers.py:94-108, Agentforce trust layer) emit a structured event when framework callbacks raise — so the trace dashboard shows a real failure with exception type, message, and bounded traceback, instead of a hung "start" event with no matching "end". This PR ports that contract to all 10 lighter runtime adapters: agno, openai_agents, llama_index, google_adk, strands, pydantic_ai, smolagents, bedrock_agents, ms_agent_framework, embedding.

What's in the PR

Shared helper

• src/layerlens/instrument/adapters/_base/errors.py — emit_error_event(adapter, exc, context, severity, event_type, org_id) with:
  • PII-safe message truncation (500 chars) + traceback truncation (8 frames / 4000 chars)
  • Secret-pattern scrubbing (api_key=, Bearer …, sk-…)
  • Allow-listed SAFE_CONTEXT_KEYS — only framework attribution keys propagate; PII-shaped keys are dropped
  • Multi-tenant org_id automatically resolved from adapter._stratix.org_id (or tenant_id); explicit override supported
  • Best-effort emission inside BaseAdapter.emit_dict_event — errors in error-handling never mask the original framework error
  • Preserves re-raise semantics — caller is responsible for raise
• _base/capture.py — adds agent.error / tool.error / model.error to ALWAYS_ENABLED_EVENT_TYPES so error events are never silently dropped by capture-config gating
• _base/__init__.py — re-exports the public surface

Per-adapter wiring (all 10 targets)

• agno: both traced_run (async) + traced_run_sync; on_tool_use(error=…)
• openai_agents: span-end handlers detect span.error on agent / generation / function spans (shared _emit_span_error helper); on_run_end / on_tool_use
• llama_index: _handle_event checks event.exception on every routed event and emits model.error / tool.error / agent.error based on event-type prefix; on_agent_end / on_tool_use
• google_adk: new _maybe_emit_callback_error helper inspects error / exception / error_message on callback context, llm_response, and tool_output; on_agent_end / on_tool_use
• strands: _create_traced_call and on_tool_use
• pydantic_ai: both async and sync run wrappers, plus on_tool_use
• smolagents: _create_traced_run and on_tool_use
• bedrock_agents: new _maybe_emit_invoke_error reads parsed.trace.failureTrace.failureReason and top-level errorMessage / errorCode; on_invoke_end / on_tool_use
• ms_agent_framework: both traced_invoke (async generator) and traced_invoke_stream; on_tool_use
• embedding: all three provider wrappers (OpenAI, Cohere, SentenceTransformer) catch upstream exceptions and re-raise

Tests

• tests/instrument/adapters/_base/test_errors.py — 28 helper tests (default event type, exception metadata, org_id propagation/override/omission, message + traceback truncation, context-key filtering, secret redaction in message + tb, idempotency, re-raise pattern, custom event type, broken __str__ defense, no-traceback defense, circuit-breaker respect, trace-buffer participation, build_error_payload immutability, empty-framework defense, SAFE_CONTEXT_KEYS lint, internal-helper white-box)
• 10 per-adapter test extensions + new test_embedding_adapter.py — 29 new tests covering both framework-callback and explicit on_* lifecycle paths, asserting event type / framework / phase / exception_type fields

CLAUDE.md commercial-grade compliance

• No TODOs
• All 10 adapters wired (no "planned backlog")
• Errors RE-RAISED after emit
• PII-safe (truncation + secret scrub + key allow-list)
• Multi-tenant (org_id on every event)
• No co-author trailers

Test plan

• pytest tests/instrument/adapters/_base/test_errors.py -x — 28/28 pass
• pytest tests/instrument/adapters/frameworks/ -x — 149/149 pass (no regression on 120 baseline + 29 new)
• mypy --strict src/layerlens/instrument/adapters/_base/errors.py — clean
• ruff check src/layerlens/instrument/adapters/ tests/instrument/adapters/ — clean
• Reviewer @m-peko: confirm error-event payload schema matches policy.violation consumer expectations on the atlas-app side
• Reviewer: confirm SAFE_CONTEXT_KEYS allow-list does not need additions for any tenant-specific adapter the team has internally

Cross-references

• Audit item: A:/tmp/adapter-cross-pollination-audit.md §2.3 (origin: AutoGen wrappers.py:94-108, LangChain callbacks.py:402-436)
• Sister PRs from the same wave (handoff std, importer hardening, SSE parser, manifest tier fix) are independent and can land in any order

Notes for reviewer

• This PR is targeted at development (not main) since main does not yet contain src/layerlens/instrument/. Same base as the other adapter PRs.