From 36f7a9f440735d741737b05ef7d0f710e9fd324a Mon Sep 17 00:00:00 2001
From: grabowski <berwn@buildfor.life>
Date: Fri, 23 Oct 2026 19:57:29 +0700
Subject: [PATCH] agent window: plain message when the endpoint wants a key
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A 401/403 with an HTML error page (nginx) showed as "HTTP 401: 401
Authorization Required 401 Authorization Required nginx". Now: "The endpoint
wants an API key: enter it in ⚙" before one is set, "The endpoint refused
the API key (...)" after.
---
 studio/agent.js       | 9 +++++++--
 tools/agent_checks.py | 3 ++-
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/studio/agent.js b/studio/agent.js
index 971f8cb..29d35d5 100644
--- a/studio/agent.js
+++ b/studio/agent.js
@@ -91,8 +91,13 @@
       var m = t;
       try { var x = JSON.parse(t); m = (x.error && (x.error.message || x.error)) || x.message || x.detail || t; } catch (e) { /* plain text */ }
       if (typeof m !== "string") m = JSON.stringify(m);
-      m = m.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
-      var hint = r.status === 401 || r.status === 403 ? " Check the API key (⚙)." : r.status === 404 ? " Check the endpoint: most servers want the URL ending in /v1." : "";
+      if (/^\s*</.test(m)) m = ""; // an HTML error page says no more than the status
+      m = m.replace(/\s+/g, " ").trim();
+      if (r.status === 401 || r.status === 403) {
+        return new Error(A.cfg.has_key ? "The endpoint refused the API key (HTTP " + r.status + (m ? ": " + clip(m, 200) : "") + "). Check it in ⚙."
+          : "The endpoint wants an API key: enter it in ⚙ (HTTP " + r.status + ").");
+      }
+      var hint = r.status === 404 ? " Check the endpoint: most servers want the URL ending in /v1." : "";
       return new Error("HTTP " + r.status + (m ? ": " + clip(m, 300) : "") + hint);
     });
   }
diff --git a/tools/agent_checks.py b/tools/agent_checks.py
index 4666196..1fc0240 100644
--- a/tools/agent_checks.py
+++ b/tools/agent_checks.py
@@ -121,7 +121,8 @@ def run(pg, objects, shot, check, can_set_key):
         settings()
         pg.locator("#agkey").fill("wrong-key")
         save()
-        check("401" in pg.locator("#agsetmsg").inner_text(), "a wrong key shows the endpoint's refusal: " + pg.locator("#agsetmsg").inner_text())
+        check("refused the API key" in pg.locator("#agsetmsg").inner_text() and "invalid api key" in pg.locator("#agsetmsg").inner_text(),
+              "a wrong key shows the endpoint's refusal: " + pg.locator("#agsetmsg").inner_text())
         check(pg.locator("#agwho .ag-off").count() == 1, "the status dot turns red")
         shot("agent-badkey.jpg")
         pg.locator("#agkey").fill("test-key")