What problem does it solve? Changes to GAIA's LemonadeClient ripple through providers, VLMClient, UI routers, and the base Agent class, and subtle mistakes (missed HTTP call sites, wrong patch targets, leaked API keys in error messages) cause regressions and security issues. This Skill encodes the patterns and gotchas needed to thread changes through the codebase correctly. ## Core Features & Use Cases - HTTP call-site enumeration: Ensures changes like auth headers reach every outbound call, including direct requests.post sites that bypass _send_request. - Security conventions: Enforces fixed-string 401 errors and correct OpenAI SDK exception ordering so API keys never leak into logs or CLI output. - Testing guidance: Covers responses vs httpx mocking, deferred-import patch targets, SSE test termination, and verifying failures against main. - Use Case: When adding a new LemonadeClient.__init__ parameter, follow the Skill to update the factory, the provider's backend_kwargs forwarding, and all affected tests. ## Quick Start Apply the lemonade-client-patterns skill to add an auth header to every Lemonade HTTP call site in lemonade_client.py.