Fix HTTP diagnostic privacy and release 10.3.10

Author: KSemenenko

AGENTS.md

@@ -12,6 +12,7 @@ If I tell you to remember something, you do the same, update
 - A successful `Result<T>` must always carry a non-null `Value`, matching its `MemberNotNullWhen` annotations. Reject null success payloads at the owning result setter/factory, including nullable type arguments and initializer overrides. Use non-generic `Result.Succeed()` for a success without a payload; never preserve a successful null value to accommodate a consumer null guard.
 - Communication Orleans integration uses native generated Orleans serialization and its typed surrogates only. Do not add Newtonsoft.Json, JSON grain-storage adapters/converters, or automatic JSON storage registrations. Applications own their storage-provider serialization.
 - For failure logging, use Warning with failure details when there is no exception, and Error with the original stack trace when an exception is supplied.
+- Creator-approved HTTP diagnostic exception (2026-10-15): native HTTP resilience operations, HTTP-to-Result converters and HTTP CQRS readers log and trace only safe status, exception types, throw-site stacks and correlation. Exclude exception/inner messages, request/response content, reason phrases and URI user information/path/query. Preserve original transport exceptions, raw responses and exception-based retry decisions. General command/Result logging retains its original exception-object contract; HTTP privacy also applies when tracing is disabled or unsampled.
 - For automatic Result failure telemetry, record the error and original exception immediately in the failure/catch path; never retain an exception reference in Result or Problem for later diagnostics.
 always check all test are passed.
 - Use TUnit with Microsoft.Testing.Platform for all .NET tests; do not add or retain xUnit packages, attributes, fixtures, configuration, or documentation.

Directory.Build.props

@@ -27,8 +27,8 @@
         <RepositoryUrl>https://github.com/managedcode/Communication</RepositoryUrl>
         <PackageProjectUrl>https://github.com/managedcode/Communication</PackageProjectUrl>
         <Product>Managed Code - Communication</Product>
-        <Version>10.3.9</Version>
-        <PackageVersion>10.3.9</PackageVersion>
+        <Version>10.3.10</Version>
+        <PackageVersion>10.3.10</PackageVersion>
 
     </PropertyGroup>
     <PropertyGroup Condition="'$(GITHUB_ACTIONS)' == 'true'">

ManagedCode.Communication.Extensions/Http/CommandResultHttpClientExtensions.cs

@@ -3,6 +3,7 @@
 using System.Threading;
 using System.Threading.Tasks;
 using ManagedCode.Communication.Commands.Execution;
+using ManagedCode.Communication.Telemetry;
 
 namespace ManagedCode.Communication.Extensions.Http;
 
@@ -24,11 +25,11 @@ public static Task<Result<T>> SendForResultAsync<T, TCommand>(
     {
         ArgumentNullException.ThrowIfNull(client);
         ArgumentNullException.ThrowIfNull(requestFactory);
-        return Result<T>.ExecuteAsync(
+        return HttpFailureDiagnostics.ExecuteAsync(() => Result<T>.ExecuteAsync(
             command,
             (current, token) => client.SendForResultAsync<T>(() => requestFactory(current), token),
             runtime,
-            cancellationToken);
+            cancellationToken));
     }
 
     /// <summary>
@@ -46,14 +47,14 @@ public static Task<Result<T>> SendForResultAsync<T, TCommand>(
         ArgumentNullException.ThrowIfNull(client);
         ArgumentNullException.ThrowIfNull(requestFactory);
         ArgumentNullException.ThrowIfNull(readSuccessAsync);
-        return Result<T>.ExecuteAsync(
+        return HttpFailureDiagnostics.ExecuteAsync(() => Result<T>.ExecuteAsync(
             command,
             (current, token) => client.SendForResultAsync(
                 () => requestFactory(current),
                 readSuccessAsync,
                 token),
             runtime,
-            cancellationToken);
+            cancellationToken));
     }
 
     /// <summary>Sends a payload-free response through native command execution.</summary>
@@ -67,10 +68,10 @@ public static Task<Result> SendForResultAsync<TCommand>(
     {
         ArgumentNullException.ThrowIfNull(client);
         ArgumentNullException.ThrowIfNull(requestFactory);
-        return Result.ExecuteAsync(
+        return HttpFailureDiagnostics.ExecuteAsync(() => Result.ExecuteAsync(
             command,
             (current, token) => client.SendForResultAsync(() => requestFactory(current), token),
             runtime,
-            cancellationToken);
+            cancellationToken));
     }
 }

ManagedCode.Communication.Extensions/Http/CommunicationResilienceHandler.cs

@@ -23,7 +23,10 @@ public CommunicationResilienceHandler(CommandHttpClientOptions options, ILogger
         ArgumentNullException.ThrowIfNull(options.ShouldHandle);
 
         _shouldHandle = options.ShouldHandle;
-        _runtime = new CommandExecutionRuntime(options.Execution, logger: logger);
+        _runtime = new CommandExecutionRuntime(options.Execution, logger: logger)
+        {
+            RedactHttpDiagnostics = true
+        };
     }
 
     protected override async Task<HttpResponseMessage> SendAsync(
@@ -141,7 +144,7 @@ private static void PromoteRetryAfter(HttpResponseMessage response, Problem prob
     private static string ResolveAuthority(Uri? requestUri)
     {
         return requestUri is { IsAbsoluteUri: true }
-            ? requestUri.GetLeftPart(UriPartial.Authority)
+            ? requestUri.GetComponents(UriComponents.SchemeAndServer, UriFormat.UriEscaped)
             : HttpCommandExecutionConstants.UnknownAuthority;
     }
 }

ManagedCode.Communication.Extensions/Http/ResultHttpClientExtensions.cs

@@ -30,6 +30,7 @@ public static async Task<Result<T>> SendForResultAsync<T>(
         Func<HttpRequestMessage> requestFactory,
         CancellationToken cancellationToken = default)
     {
+        using var diagnostics = HttpFailureDiagnostics.Begin(true);
         ArgumentNullException.ThrowIfNull(client);
         ArgumentNullException.ThrowIfNull(requestFactory);
 
@@ -67,6 +68,7 @@ public static async Task<Result<T>> SendForResultAsync<T>(
         Func<HttpResponseMessage, CancellationToken, Task<T?>> readSuccessAsync,
         CancellationToken cancellationToken = default)
     {
+        using var diagnostics = HttpFailureDiagnostics.Begin(true);
         ArgumentNullException.ThrowIfNull(client);
         ArgumentNullException.ThrowIfNull(requestFactory);
         ArgumentNullException.ThrowIfNull(readSuccessAsync);
@@ -102,6 +104,7 @@ public static async Task<Result> SendForResultAsync(
         Func<HttpRequestMessage> requestFactory,
         CancellationToken cancellationToken = default)
     {
+        using var diagnostics = HttpFailureDiagnostics.Begin(true);
         ArgumentNullException.ThrowIfNull(client);
         ArgumentNullException.ThrowIfNull(requestFactory);