+
+ `;
+}
diff --git a/web/apps/desk/src/components/quotes/MaterialIntake.test.ts b/web/apps/desk/src/components/quotes/MaterialIntake.test.ts
index 7ebdf3654..da4557d5d 100644
--- a/web/apps/desk/src/components/quotes/MaterialIntake.test.ts
+++ b/web/apps/desk/src/components/quotes/MaterialIntake.test.ts
@@ -143,6 +143,27 @@ describe('MaterialIntake', () => {
expect(el.querySelector('[data-testid="intake-accept-confident"]')).toBeNull()
})
+ it('says the provider refused the saved key, with what to do, and shows no sample list', async () => {
+ const words = 'Anthropic refused the saved key. An administrator can enter it again in Tech Admin, AI Settings.'
+ fetchMock.mockResolvedValueOnce(new Response(
+ JSON.stringify({ error: { code: 'ai_refused', message: words }, meta: { request_id: 'r' } }),
+ { status: 502, headers: { 'Content-Type': 'application/json' } },
+ ))
+ const el = await mount${words}
+${this._error}
` : nothing} + ${this._refused ? html` +
+
+ ` : nothing}
${result ? html`
${result.synthetic ? html`
diff --git a/web/apps/desk/src/lib/aiWords.test.ts b/web/apps/desk/src/lib/aiWords.test.ts
index a3cd0be55..ad58cbb5d 100644
--- a/web/apps/desk/src/lib/aiWords.test.ts
+++ b/web/apps/desk/src/lib/aiWords.test.ts
@@ -5,10 +5,26 @@ import { describe, it, expect } from 'vitest';
import { aiHeadline, aiStatusLine, imageWords, modelLabel, providerLabel } from './aiWords.ts';
describe('aiWords', () => {
- it('names the chosen provider and model when a key is saved', () => {
- expect(aiStatusLine({ provider: 'anthropic', model: 'claude-sonnet-5-5', configured: true })).toBe('AI on: Anthropic, Sonnet 5.5');
- expect(aiStatusLine({ provider: 'anthropic', model: 'claude-opus-5-5', configured: true })).toBe('AI on: Anthropic, Opus 5.5');
- expect(aiStatusLine({ provider: 'openrouter', model: 'claude-sonnet-5-5', configured: true })).toBe('AI on: OpenRouter');
+ it('names the chosen provider and model once the saved key passed its test', () => {
+ const passed = { configured: true, test_status: 'passed' as const };
+ expect(aiStatusLine({ provider: 'anthropic', model: 'claude-sonnet-5-5', ...passed })).toBe('AI on: Anthropic, Sonnet 5.5');
+ expect(aiStatusLine({ provider: 'anthropic', model: 'claude-opus-5-5', ...passed })).toBe('AI on: Anthropic, Opus 5.5');
+ expect(aiStatusLine({ provider: 'openrouter', model: 'claude-sonnet-5-5', ...passed })).toBe('AI on: OpenRouter');
+ });
+
+ it('says AI is off when the provider refused the saved key', () => {
+ const refused = { configured: true, test_status: 'refused' as const };
+ expect(aiStatusLine({ provider: 'anthropic', model: 'claude-sonnet-5-5', ...refused })).toBe('AI off: Anthropic refused the saved key');
+ expect(aiStatusLine({ provider: 'openrouter', model: '', ...refused })).toBe('AI off: OpenRouter refused the saved key');
+ expect(aiHeadline({ provider: 'anthropic', model: '', ...refused })).toBe('AI Features Off');
+ });
+
+ it('says a saved key was not tested yet, and that a failed test is not a pass', () => {
+ const untested = { configured: true, test_status: 'untested' as const };
+ expect(aiStatusLine({ provider: 'anthropic', model: 'claude-sonnet-5-5', ...untested })).toBe('Key saved, not tested yet. Press Test connection to turn AI on.');
+ expect(aiHeadline({ provider: 'anthropic', model: '', ...untested })).toBe('AI Features Not Tested');
+ const failed = { configured: true, test_status: 'failed' as const };
+ expect(aiStatusLine({ provider: 'anthropic', model: 'claude-sonnet-5-5', ...failed })).toBe('AI off: the test of the saved Anthropic key did not pass');
});
it('asks for the chosen provider\'s key, never the other one\'s', () => {
@@ -18,7 +34,7 @@ describe('aiWords', () => {
});
it('reads the headline from the state', () => {
- expect(aiHeadline({ provider: 'anthropic', model: '', configured: true })).toBe('AI Features Active');
+ expect(aiHeadline({ provider: 'anthropic', model: '', configured: true, test_status: 'passed' })).toBe('AI Features Active');
expect(aiHeadline(null)).toBe('AI Features Inactive');
});
@@ -29,6 +45,15 @@ describe('aiWords', () => {
expect(providerLabel('anthropic')).toBe('Anthropic');
});
+ it('never tells a person to try again with a key the provider refused', () => {
+ for (const p of ['anthropic', 'openrouter'] as const) {
+ const w = imageWords(p);
+ expect(w.failed).not.toContain('try again');
+ expect(w.failed).toContain('Tech Admin, AI Settings');
+ expect(w.refused).toBe(`${providerLabel(p)} refused the saved key. An administrator can enter it again in Tech Admin, AI Settings.`);
+ }
+ });
+
it('says which image kind the button makes', () => {
expect(imageWords('anthropic').button).toBe('Generate illustration');
expect(imageWords('anthropic').kind).toBe('illustration');
diff --git a/web/apps/desk/src/lib/aiWords.ts b/web/apps/desk/src/lib/aiWords.ts
index 9d197ec1a..f95e10459 100644
--- a/web/apps/desk/src/lib/aiWords.ts
+++ b/web/apps/desk/src/lib/aiWords.ts
@@ -9,11 +9,16 @@
export type AIProvider = 'openrouter' | 'anthropic';
+/** The last test of the saved key, as the settings document reports it. */
+export type AITestStatus = 'none' | 'untested' | 'passed' | 'refused' | 'failed';
+
/** The slice of the AI settings document the words read. */
export interface AIState {
provider: AIProvider;
model: string;
configured: boolean;
+ /** AI is on only after a passed test; absent reads as untested. */
+ test_status?: AITestStatus;
}
/** "Anthropic" or "OpenRouter". */
@@ -29,17 +34,33 @@ export function modelLabel(model: string): string {
return m[3] !== undefined ? `${family} ${m[2]}.${m[3]}` : `${family} ${m[2]}`;
}
-/** The Tech Admin status line: what is on, or what to enter. */
+/** True only for a saved key whose last test passed: the one state AI is on. */
+export function aiIsOn(s: AIState | null): boolean {
+ return !!s && s.configured && s.test_status === 'passed';
+}
+
+/** The Tech Admin status line: what is on, what was refused, or what to enter. */
export function aiStatusLine(s: AIState | null): string {
if (!s) return 'AI settings are loading.';
const name = providerLabel(s.provider);
if (!s.configured) return `Enter your ${name} API key to enable AI-powered features.`;
- return s.provider === 'anthropic' ? `AI on: ${name}, ${modelLabel(s.model)}` : `AI on: ${name}`;
+ switch (s.test_status) {
+ case 'passed':
+ return s.provider === 'anthropic' ? `AI on: ${name}, ${modelLabel(s.model)}` : `AI on: ${name}`;
+ case 'refused':
+ return `AI off: ${name} refused the saved key`;
+ case 'failed':
+ return `AI off: the test of the saved ${name} key did not pass`;
+ default:
+ return 'Key saved, not tested yet. Press Test connection to turn AI on.';
+ }
}
/** The status card's headline. */
export function aiHeadline(s: AIState | null): string {
- return s?.configured ? 'AI Features Active' : 'AI Features Inactive';
+ if (aiIsOn(s)) return 'AI Features Active';
+ if (!s?.configured) return 'AI Features Inactive';
+ return s.test_status === 'refused' || s.test_status === 'failed' ? 'AI Features Off' : 'AI Features Not Tested';
}
/** What PIM's image generation makes with the chosen provider. */
@@ -51,6 +72,8 @@ export interface ImageWords {
feature: string;
featureDescription: string;
failed: string;
+ /** A generation the provider refused the saved key for: no retry can work. */
+ refused: string;
empty: string;
}
@@ -64,7 +87,8 @@ export function imageWords(provider: AIProvider | null | undefined): ImageWords
heading: 'AI Illustration',
feature: 'Product Illustrations',
featureDescription: 'Claude draws a flat product illustration in the catalog style for each product',
- failed: 'The illustration could not be drawn or was refused. Please try again.',
+ failed: 'The illustration could not be drawn. If it keeps failing, an administrator checks the key in Tech Admin, AI Settings.',
+ refused: 'Anthropic refused the saved key. An administrator can enter it again in Tech Admin, AI Settings.',
empty: 'No images yet. Generate an illustration using AI above.',
};
}
@@ -75,7 +99,8 @@ export function imageWords(provider: AIProvider | null | undefined): ImageWords
heading: 'AI Image Generation',
feature: 'Product Image Generation',
featureDescription: 'Generate professional product images for your catalog',
- failed: 'Image generation failed. Please try again.',
+ failed: 'Image generation failed. If it keeps failing, an administrator checks the key in Tech Admin, AI Settings.',
+ refused: 'OpenRouter refused the saved key. An administrator can enter it again in Tech Admin, AI Settings.',
empty: 'No images yet. Generate one using AI above.',
};
}
diff --git a/web/apps/desk/src/pages/admin/tech_admin/AIProviderWords.test.ts b/web/apps/desk/src/pages/admin/tech_admin/AIProviderWords.test.ts
index 82dd7c561..d179adcbb 100644
--- a/web/apps/desk/src/pages/admin/tech_admin/AIProviderWords.test.ts
+++ b/web/apps/desk/src/pages/admin/tech_admin/AIProviderWords.test.ts
@@ -48,13 +48,42 @@ afterEach(() => {
describe('Tech Admin AI words follow the chosen provider', () => {
it('names Anthropic and the model when its key is saved', async () => {
- serve({ ...BASE, provider: 'anthropic', model: 'claude-sonnet-5-5', configured: true, anthropic_configured: true, anthropic_key_hint: 'sk-a...wxyz', source: 'admin' })
+ serve({ ...BASE, provider: 'anthropic', model: 'claude-sonnet-5-5', configured: true, anthropic_configured: true, anthropic_key_hint: 'sk-a...wxyz', source: 'admin', test_status: 'passed' })
const body = text(await openAITab())
expect(body).toContain('AI on: Anthropic, Sonnet 5.5')
expect(body).toContain('AI Features Active')
expect(body).not.toContain('Enter your OpenRouter API key')
})
+ it('does not say AI is on for a key the provider refused', async () => {
+ serve({ ...BASE, provider: 'anthropic', model: 'claude-sonnet-5-5', configured: true, anthropic_configured: true, anthropic_key_hint: '****dmin', source: 'admin', test_status: 'refused', test_message: 'Anthropic refused the saved key. An administrator can enter it again in Tech Admin, AI Settings.' })
+ const body = text(await openAITab())
+ expect(body).toContain('AI off: Anthropic refused the saved key')
+ expect(body).not.toContain('AI on:')
+ expect(body).not.toContain('AI Features Active')
+ })
+
+ it('dims the features grid for a key the provider refused and lights it for a passed one', async () => {
+ const card = () => {
+ const span = Array.from(document.querySelectorAll('span')).find((s) => text(s) === 'Product Illustrations')
+ return span?.closest('div.border') as HTMLElement
+ }
+ serve({ ...BASE, provider: 'anthropic', model: 'claude-sonnet-5-5', configured: true, anthropic_configured: true, anthropic_key_hint: '****dmin', source: 'admin', test_status: 'refused' })
+ await openAITab()
+ expect(card().className).toContain('opacity-60')
+ document.body.innerHTML = ''
+ serve({ ...BASE, provider: 'anthropic', model: 'claude-sonnet-5-5', configured: true, anthropic_configured: true, anthropic_key_hint: '****dmin', source: 'admin', test_status: 'passed' })
+ await openAITab()
+ expect(card().className).not.toContain('opacity-60')
+ })
+
+ it('says a saved key was not tested yet', async () => {
+ serve({ ...BASE, provider: 'anthropic', model: 'claude-sonnet-5-5', configured: true, anthropic_configured: true, anthropic_key_hint: '****real', source: 'admin', test_status: 'untested' })
+ const body = text(await openAITab())
+ expect(body).toContain('Key saved, not tested yet')
+ expect(body).not.toContain('AI on:')
+ })
+
it('asks for the Anthropic key, not the OpenRouter one, when none is saved', async () => {
serve({ ...BASE, provider: 'anthropic', model: 'claude-sonnet-5-5' })
const body = text(await openAITab())
diff --git a/web/apps/desk/src/pages/admin/tech_admin/TechAdminPage.ts b/web/apps/desk/src/pages/admin/tech_admin/TechAdminPage.ts
index ebc3d3fd7..013edeeb9 100644
--- a/web/apps/desk/src/pages/admin/tech_admin/TechAdminPage.ts
+++ b/web/apps/desk/src/pages/admin/tech_admin/TechAdminPage.ts
@@ -7,7 +7,7 @@ import { icon } from '../../../lib/icons.ts';
import { cn } from '../../../lib/utils.ts';
import './MarketCheckSettings.ts';
import { techAdminService, ediService } from '../../../services/TechAdminService';
-import { aiHeadline, aiStatusLine, imageWords, modelLabel, providerLabel } from '../../../lib/aiWords.ts';
+import { aiHeadline, aiIsOn, aiStatusLine, imageWords, modelLabel, providerLabel } from '../../../lib/aiWords.ts';
import type { APIKey, AISettings, RoutingSettings, EDITradingPartner, StaffMember, ModuleInfo, Readiness } from '../../../services/TechAdminService';
import {
Key, Globe, Activity, Plus, Trash2, Copy, Check, Eye, Sparkles,
@@ -168,8 +168,8 @@ export class TechAdminPage extends LitElement {
this.aiNewKey = '';
this.aiNewBaseUrl = '';
this.aiShowInput = false;
- this.aiSuccess = 'API key saved. All AI features are now active.';
await this._loadAISettings();
+ this._noteSavedKey('API key saved');
} catch (err) {
this.aiError = err instanceof Error ? err.message : 'Failed to save';
} finally {
@@ -184,8 +184,8 @@ export class TechAdminPage extends LitElement {
try {
await techAdminService.saveAIProvider(this.aiProvider, this.aiModel, this.aiAnthropicKey.trim() || undefined);
this.aiAnthropicKey = '';
- this.aiSuccess = 'AI provider saved.';
await this._loadAISettings();
+ this._noteSavedKey('AI provider saved');
} catch (err) {
this.aiError = err instanceof Error ? err.message : 'Failed to save';
} finally {
@@ -193,11 +193,25 @@ export class TechAdminPage extends LitElement {
}
}
+ /** The saved key was tested by the save: say what that test found. */
+ private _noteSavedKey(saved: string) {
+ const s = this.aiSettings;
+ if (s?.test_status === 'passed') {
+ this.aiSuccess = `${saved} and tested. AI is on.`;
+ } else if (s?.test_status === 'refused' || s?.test_status === 'failed') {
+ this.aiSuccess = null;
+ this.aiError = s.test_message || aiStatusLine(s);
+ } else {
+ this.aiSuccess = `${saved}.`;
+ }
+ }
+
private async _handleTestAI() {
this.aiTesting = true;
this.aiTestResult = null;
try {
this.aiTestResult = await techAdminService.testAIConnection();
+ await this._loadAISettings();
} catch (err) {
this.aiTestResult = { ok: false, message: err instanceof Error ? err.message : 'Test failed' };
} finally {
@@ -597,11 +611,11 @@ export class TechAdminPage extends LitElement {
${this._renderProviderCard()}
- ${this._refused}
+Nothing was read from your file. A pasted text list is read without AI.
+
+
-
- ${this.aiSettings?.configured ? icon(Check, 20) : icon(AlertCircle, 20)}
+
` : html`
+ ${aiIsOn(this.aiSettings) ? icon(Check, 20) : icon(AlertCircle, 20)}
@@ -612,6 +626,7 @@ export class TechAdminPage extends LitElement {
Provider: ${providerLabel(savedProvider)}${isAnthropic ? html`, model ${modelLabel(this.aiSettings.model)}` : nothing}
Key: ${isAnthropic ? this.aiSettings.anthropic_key_hint : this.aiSettings.key_hint}
Source: ${this.aiSettings.source === 'admin' ? 'Admin configured' : 'Environment variable'}
+ ${this.aiSettings.test_status === 'refused' || this.aiSettings.test_status === 'failed' ? html`${this.aiSettings.test_message}
` : nothing} ${this.aiSettings.base_url && !isAnthropic ? html`Base URL: ${this.aiSettings.base_url}
${aiStatusLine(this.aiSettings)}
`} @@ -671,9 +686,9 @@ export class TechAdminPage extends LitElement {Features Powered by AI
${features.map((f) => html`
-
+
- ${icon(f.iconData, 16, cn('w-4 h-4', this.aiSettings?.configured ? 'text-violet-400' : 'text-slate-600'))}
+ ${icon(f.iconData, 16, cn('w-4 h-4', aiIsOn(this.aiSettings) ? 'text-violet-400' : 'text-slate-600'))}
${f.name}
${f.description}
diff --git a/web/apps/desk/src/pages/inventory/tabs/ProductCollateralTab.ts b/web/apps/desk/src/pages/inventory/tabs/ProductCollateralTab.ts index 802421008..eb9f20b2d 100644 --- a/web/apps/desk/src/pages/inventory/tabs/ProductCollateralTab.ts +++ b/web/apps/desk/src/pages/inventory/tabs/ProductCollateralTab.ts @@ -8,6 +8,7 @@ import { Sparkles, Trash2, Copy, Loader2, FileText, RefreshCw, AlertTriangle } f import { PIMService } from '../../../services/PIMService.ts'; import { ToastService } from '../../../lib/toast-service.ts'; import type { PIMCollateral, CollateralType } from '../../../types/pim.ts'; +import { aiRefusalWords, renderAiNotice } from '../../../components/inventory/PimAiNotice.ts'; const TYPES: { value: CollateralType; label: string }[] = [ { value: 'sell_sheet', label: 'Sell Sheet' }, @@ -31,6 +32,7 @@ export class GableProductCollateralTab extends LitElement { @state() private tone = 'professional'; @state() private audience = 'contractors and builders'; @state() private generating = false; + @state() private aiNotice: string | null = null; @state() private copiedId: string | null = null; @state() private error: string | null = null; @@ -44,12 +46,15 @@ export class GableProductCollateralTab extends LitElement { private async _handleGenerate() { this.generating = true; this.error = null; + this.aiNotice = null; try { await PIMService.generateCollateral(this.productId, { type: this.type, tone: this.tone, audience: this.audience }); this.dispatchEvent(new CustomEvent('collateral-update', { bubbles: true, composed: true })); } catch (err: unknown) { - const msg = err instanceof Error ? err.message : 'Collateral generation failed'; - this.error = msg; + this.aiNotice = aiRefusalWords(err); + if (!this.aiNotice) { + this.error = err instanceof Error ? err.message : 'Collateral generation failed'; + } } finally { this.generating = false; } @@ -78,6 +83,7 @@ export class GableProductCollateralTab extends LitElement { render() { return html`
+ ${renderAiNotice(this.aiNotice)}
diff --git a/web/apps/desk/src/pages/inventory/tabs/ProductContentTab.test.ts b/web/apps/desk/src/pages/inventory/tabs/ProductContentTab.test.ts
new file mode 100644
index 000000000..9039122c2
--- /dev/null
+++ b/web/apps/desk/src/pages/inventory/tabs/ProductContentTab.test.ts
@@ -0,0 +1,62 @@
+// SPDX-License-Identifier: LicenseRef-OpenLBM-Surface-1.0
+// SPDX-FileCopyrightText: 2026 FutureBuild, Inc. and OpenLBM contributors
+
+/**
+ * When the AI provider refuses the saved key, PIM's Generate shows the
+ * refusal in words on the page, where it stays until the next try; it is not
+ * a toast that leaves nothing behind.
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest'
+import './ProductContentTab'
+import './ProductSEOTab'
+import './ProductCollateralTab'
+import type { LitElement } from 'lit'
+import { mount, flush, q, text, update } from '../../../test/dom'
+
+type Tab = LitElement & { productId: string }
+
+const WORDS = 'Anthropic refused the saved key. An administrator can enter it again in Tech Admin, AI Settings.'
+
+beforeEach(() => {
+ localStorage.setItem('token', 'test-token')
+ vi.stubGlobal('fetch', vi.fn(async () => new Response(
+ JSON.stringify({ error: { code: 'ai_refused', message: WORDS }, meta: { request_id: 'r' } }),
+ { status: 502, headers: { 'Content-Type': 'application/json' } },
+ )))
+})
+afterEach(() => {
+ vi.unstubAllGlobals()
+ document.body.innerHTML = ''
+})
+
+function press(el: HTMLElement, label: string) {
+ const button = Array.from(el.querySelectorAll('button')).find((b) => text(b).includes(label))
+ if (!button) throw new Error(`no button ${label}`)
+ button.click()
+}
+
+describe('PIM generate shows a provider refusal on the page', () => {
+ it('on the description tab', async () => {
+ const el = await mount
diff --git a/web/apps/desk/src/pages/inventory/tabs/ProductContentTab.test.ts b/web/apps/desk/src/pages/inventory/tabs/ProductContentTab.test.ts
new file mode 100644
index 000000000..9039122c2
--- /dev/null
+++ b/web/apps/desk/src/pages/inventory/tabs/ProductContentTab.test.ts
@@ -0,0 +1,62 @@
+// SPDX-License-Identifier: LicenseRef-OpenLBM-Surface-1.0
+// SPDX-FileCopyrightText: 2026 FutureBuild, Inc. and OpenLBM contributors
+
+/**
+ * When the AI provider refuses the saved key, PIM's Generate shows the
+ * refusal in words on the page, where it stays until the next try; it is not
+ * a toast that leaves nothing behind.
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest'
+import './ProductContentTab'
+import './ProductSEOTab'
+import './ProductCollateralTab'
+import type { LitElement } from 'lit'
+import { mount, flush, q, text, update } from '../../../test/dom'
+
+type Tab = LitElement & { productId: string }
+
+const WORDS = 'Anthropic refused the saved key. An administrator can enter it again in Tech Admin, AI Settings.'
+
+beforeEach(() => {
+ localStorage.setItem('token', 'test-token')
+ vi.stubGlobal('fetch', vi.fn(async () => new Response(
+ JSON.stringify({ error: { code: 'ai_refused', message: WORDS }, meta: { request_id: 'r' } }),
+ { status: 502, headers: { 'Content-Type': 'application/json' } },
+ )))
+})
+afterEach(() => {
+ vi.unstubAllGlobals()
+ document.body.innerHTML = ''
+})
+
+function press(el: HTMLElement, label: string) {
+ const button = Array.from(el.querySelectorAll('button')).find((b) => text(b).includes(label))
+ if (!button) throw new Error(`no button ${label}`)
+ button.click()
+}
+
+describe('PIM generate shows a provider refusal on the page', () => {
+ it('on the description tab', async () => {
+ const el = await mount('gable-product-content-tab', { productId: 'p1' })
+ press(el, 'Generate')
+ await flush()
+ await update(el, {})
+ expect(text(q(el, '[data-testid="pim-ai-notice"]'))).toContain(WORDS)
+ })
+
+ it('on the SEO tab', async () => {
+ const el = await mount('gable-product-seo-tab', { productId: 'p1' })
+ press(el, 'Generate')
+ await flush()
+ await update(el, {})
+ expect(text(q(el, '[data-testid="pim-ai-notice"]'))).toContain(WORDS)
+ })
+
+ it('on the collateral tab', async () => {
+ const el = await mount('gable-product-collateral-tab', { productId: 'p1' })
+ press(el, 'Generate')
+ await flush()
+ await update(el, {})
+ expect(text(q(el, '[data-testid="pim-ai-notice"]'))).toContain(WORDS)
+ })
+})
diff --git a/web/apps/desk/src/pages/inventory/tabs/ProductContentTab.ts b/web/apps/desk/src/pages/inventory/tabs/ProductContentTab.ts
index 2e1a444e6..c07f27cd1 100644
--- a/web/apps/desk/src/pages/inventory/tabs/ProductContentTab.ts
+++ b/web/apps/desk/src/pages/inventory/tabs/ProductContentTab.ts
@@ -9,6 +9,7 @@ import { PIMService } from '../../../services/PIMService.ts';
import { ToastService } from '../../../lib/toast-service.ts';
import { apiErrorMessage } from '../../../services/apiError';
import type { PIMContent } from '../../../types/pim.ts';
+import { aiRefusalWords, renderAiNotice } from '../../../components/inventory/PimAiNotice.ts';
const TONES = ['professional', 'casual', 'technical', 'persuasive'];
const AUDIENCES = ['contractors and builders', 'DIY homeowners', 'architects and designers', 'wholesale buyers'];
@@ -23,6 +24,7 @@ export class GableProductContentTab extends LitElement {
@state() private tone = 'professional';
@state() private audience = 'contractors and builders';
@state() private generating = false;
+ @state() private aiNotice: string | null = null;
@state() private saving = false;
@state() private shortDesc = '';
@state() private longDesc = '';
@@ -43,12 +45,14 @@ export class GableProductContentTab extends LitElement {
private async _handleGenerate() {
this.generating = true;
+ this.aiNotice = null;
try {
const result = await PIMService.generateDescriptions(this.productId, { tone: this.tone, audience: this.audience });
this.dispatchEvent(new CustomEvent('content-update', { detail: result, bubbles: true, composed: true }));
} catch (err) {
console.error('Generate failed:', err);
- ToastService.show(apiErrorMessage(err, 'Failed to generate content'), 'error');
+ this.aiNotice = aiRefusalWords(err);
+ if (!this.aiNotice) ToastService.show(apiErrorMessage(err, 'Failed to generate content'), 'error');
} finally {
this.generating = false;
}
@@ -97,6 +101,7 @@ export class GableProductContentTab extends LitElement {
render() {
return html`
+ ${renderAiNotice(this.aiNotice)}
diff --git a/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.test.ts b/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.test.ts
index 6f77a2fec..825f90878 100644
--- a/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.test.ts
+++ b/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.test.ts
@@ -11,6 +11,7 @@ import { describe, it, expect, afterEach, vi } from 'vitest'
import './ProductMediaTab'
import type { GableProductMediaTab } from './ProductMediaTab'
import { mountAsync, text } from '../../../test/dom'
+import type { PIMMedia } from '../../../types/pim'
function stubSettings(provider: 'openrouter' | 'anthropic' | null) {
vi.stubGlobal('fetch', vi.fn(async (input: RequestInfo | URL) => {
@@ -50,4 +51,42 @@ describe('the product media tab generation words', () => {
const el = await mountAsync('gable-product-media-tab', { productId: 'p1' })
expect(text(el)).toContain('Generate image')
})
+
+ it('says in words that the provider refused the key when an image row settled refused', async () => {
+ stubSettings('anthropic')
+ const refused = { id: 'm1', product_id: 'p1', media_type: 'hero', url: '', alt_text: '', status: 'refused', is_primary: false } as unknown as PIMMedia
+ const el = await mountAsync('gable-product-media-tab', { productId: 'p1', media: [refused] })
+ const notice = el.querySelector('[data-testid="pim-ai-notice"]')
+ expect(text(notice)).toContain('Anthropic refused the saved key')
+ expect(text(notice)).toContain('Tech Admin, AI Settings')
+ expect(text(el)).not.toContain('Please try again')
+ })
+
+ it('shows the refusal notice only while the newest attempt is refused', async () => {
+ stubSettings('anthropic')
+ const row = (id: string, status: string, created: string) =>
+ ({ id, product_id: 'p1', media_type: 'hero', url: status === 'ready' ? 'data:image/svg+xml;base64,AA==' : '', alt_text: '', status, is_primary: false, created_at: created, updated_at: created }) as unknown as PIMMedia
+ // An old refused row, then a newer one that was drawn once the key was fixed.
+ const fixed = await mountAsync('gable-product-media-tab', {
+ productId: 'p1', media: [row('new', 'ready', '2026-02-01T00:00:00Z'), row('old', 'refused', '2026-01-01T00:00:00Z')],
+ })
+ expect(fixed.querySelector('[data-testid="pim-ai-notice"]')).toBeNull()
+ document.body.innerHTML = ''
+ // The newest attempt refused: the notice stands.
+ const refused = await mountAsync('gable-product-media-tab', {
+ productId: 'p1', media: [row('old', 'ready', '2026-01-01T00:00:00Z'), row('new', 'refused', '2026-02-01T00:00:00Z')],
+ })
+ expect(text(refused.querySelector('[data-testid="pim-ai-notice"]'))).toContain('refused the saved key')
+ })
+
+ it('orders attempts by the moment, not the text, when one falls on a whole second', async () => {
+ stubSettings('anthropic')
+ const row = (id: string, status: string, created: string) =>
+ ({ id, product_id: 'p1', media_type: 'hero', url: '', alt_text: '', status, is_primary: false, created_at: created, updated_at: created }) as unknown as PIMMedia
+ // The refused attempt is half a second AFTER the ready one, though its text sorts before it.
+ const el = await mountAsync('gable-product-media-tab', {
+ productId: 'p1', media: [row('a', 'ready', '2026-02-01T00:00:00Z'), row('b', 'refused', '2026-02-01T00:00:00.500Z')],
+ })
+ expect(text(el.querySelector('[data-testid="pim-ai-notice"]'))).toContain('refused the saved key')
+ })
})
diff --git a/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.ts b/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.ts
index 031700cb0..08b8505b9 100644
--- a/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.ts
+++ b/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.ts
@@ -10,6 +10,7 @@ import { ToastService } from '../../../lib/toast-service.ts';
import type { PIMMedia } from '../../../types/pim.ts';
import { techAdminService } from '../../../services/TechAdminService';
import { imageWords, type AIProvider } from '../../../lib/aiWords.ts';
+import { renderAiNotice } from '../../../components/inventory/PimAiNotice.ts';
const STYLES = ['', 'photographic', 'digital-art', 'cinematic', '3d-model', 'isometric'];
@@ -70,6 +71,17 @@ export class GableProductMediaTab extends LitElement {
}
}
+ /** The refusal notice stands only while the newest attempt is the refused one. */
+ private _newestRefused(): boolean {
+ const settled = this.media.filter(m => m.status !== 'generating');
+ if (settled.length === 0) return false;
+ // Compare the moments: timestamps that fall on a whole second omit the fraction,
+ // and their text sorts after a later moment that carries one.
+ const at = (m: PIMMedia) => Date.parse(m.created_at) || 0;
+ const newest = settled.reduce((a, b) => (at(b) > at(a) ? b : a));
+ return newest.status === 'refused';
+ }
+
private async _handleDelete(mediaId: string) {
try {
await PIMService.deleteMedia(this.productId, mediaId);
@@ -94,6 +106,7 @@ export class GableProductMediaTab extends LitElement {
const words = imageWords(this.provider);
return html`
+ ${renderAiNotice(this._newestRefused() ? words.refused : null)}
@@ -160,10 +173,10 @@ export class GableProductMediaTab extends LitElement {
${icon(Loader2, 28, 'w-7 h-7 animate-spin text-amber-400')}
Generating…
`
- : m.status === 'failed'
+ : m.status === 'failed' || m.status === 'refused'
? html`
${icon(AlertTriangle, 28, 'w-7 h-7')}
- Generation failed
+ ${m.status === 'refused' ? 'Key refused' : 'Generation failed'}
`
: html`
`
}
@@ -176,7 +189,7 @@ export class GableProductMediaTab extends LitElement {
${m.status !== 'generating' ? html`
- ${!m.is_primary && m.status !== 'failed' ? html`
+ ${!m.is_primary && m.status !== 'failed' && m.status !== 'refused' ? html`
diff --git a/web/apps/desk/src/pages/inventory/tabs/ProductSEOTab.ts b/web/apps/desk/src/pages/inventory/tabs/ProductSEOTab.ts
index b31668c83..1818f860e 100644
--- a/web/apps/desk/src/pages/inventory/tabs/ProductSEOTab.ts
+++ b/web/apps/desk/src/pages/inventory/tabs/ProductSEOTab.ts
@@ -9,6 +9,7 @@ import { PIMService } from '../../../services/PIMService.ts';
import { ToastService } from '../../../lib/toast-service.ts';
import { apiErrorMessage } from '../../../services/apiError';
import type { PIMContent } from '../../../types/pim.ts';
+import { aiRefusalWords, renderAiNotice } from '../../../components/inventory/PimAiNotice.ts';
@customElement('gable-product-seo-tab')
export class GableProductSEOTab extends LitElement {
@@ -18,6 +19,7 @@ export class GableProductSEOTab extends LitElement {
@property({ attribute: false }) content: PIMContent | null = null;
@state() private generating = false;
+ @state() private aiNotice: string | null = null;
@state() private saving = false;
@state() private _seoTitle = '';
@state() private _seoDescription = '';
@@ -39,12 +41,14 @@ export class GableProductSEOTab extends LitElement {
private async _handleGenerate() {
this.generating = true;
+ this.aiNotice = null;
try {
const result = await PIMService.generateSEO(this.productId, { target_keywords: this.keywords.length > 0 ? this.keywords : [] });
this.dispatchEvent(new CustomEvent('content-update', { detail: result, bubbles: true, composed: true }));
} catch (err) {
console.error('Generate SEO failed:', err);
- ToastService.show(apiErrorMessage(err, 'Failed to generate SEO content'), 'error');
+ this.aiNotice = aiRefusalWords(err);
+ if (!this.aiNotice) ToastService.show(apiErrorMessage(err, 'Failed to generate SEO content'), 'error');
} finally {
this.generating = false;
}
@@ -83,6 +87,7 @@ export class GableProductSEOTab extends LitElement {
render() {
return html`
+ ${renderAiNotice(this.aiNotice)}
diff --git a/web/apps/desk/src/services/TechAdminService.ts b/web/apps/desk/src/services/TechAdminService.ts
index accd585da..3da39f2e1 100644
--- a/web/apps/desk/src/services/TechAdminService.ts
+++ b/web/apps/desk/src/services/TechAdminService.ts
@@ -38,11 +38,15 @@ export interface AISettings {
anthropic_configured: boolean;
anthropic_key_hint: string | null;
vault_present: boolean;
+ /** The last test of the saved key; a save runs the test. */
+ test_status: 'none' | 'untested' | 'passed' | 'refused' | 'failed';
+ test_message?: string;
}
export interface AITestResult {
ok: boolean;
message: string;
+ status?: 'passed' | 'refused' | 'failed';
}
export interface RoutingSettings {
diff --git a/web/apps/desk/src/services/parsing.service.ts b/web/apps/desk/src/services/parsing.service.ts
index 6ca015f1f..43e42667a 100644
--- a/web/apps/desk/src/services/parsing.service.ts
+++ b/web/apps/desk/src/services/parsing.service.ts
@@ -3,6 +3,7 @@
import type { ParseResponse } from '../types/parsing';
import { fetchWithAuth } from './fetchClient';
+import { parseApiError } from './apiError';
const API_URL = import.meta.env.VITE_API_URL || '';
@@ -24,18 +25,9 @@ export const ParsingService = {
timeout: AI_PARSE_TIMEOUT,
});
- if (!response.ok) {
- const errorText = await response.text();
- // The wire error envelope carries the words a person reads.
- let words = '';
- try {
- const body = JSON.parse(errorText) as { error?: { message?: string } };
- words = body.error?.message ?? '';
- } catch {
- words = errorText;
- }
- throw new Error(words || 'Failed to parse material list');
- }
+ // The wire error envelope carries the words a person reads and the
+ // code a caller branches on (ai_refused, unsupported_type).
+ if (!response.ok) throw await parseApiError(response, 'Failed to parse material list');
return response.json();
},
diff --git a/web/apps/desk/src/test/e2eNoNetwork.test.ts b/web/apps/desk/src/test/e2eNoNetwork.test.ts
new file mode 100644
index 000000000..d13e6c994
--- /dev/null
+++ b/web/apps/desk/src/test/e2eNoNetwork.test.ts
@@ -0,0 +1,28 @@
+// SPDX-License-Identifier: LicenseRef-OpenLBM-Surface-1.0
+// SPDX-FileCopyrightText: 2026 FutureBuild, Inc. and OpenLBM contributors
+
+/**
+ * No end to end spec sends a request to a third party address (item 130,
+ * round 1): a base URL or link a spec types must be loopback or a reserved
+ * example domain, so CI never reaches a provider on the network.
+ */
+import { describe, it, expect } from 'vitest'
+import { readdirSync, readFileSync } from 'node:fs'
+import { join, resolve } from 'node:path'
+
+// The desk workspace is the working directory of its tests: the specs are two folders up.
+const E2E = resolve(process.cwd(), '../../e2e')
+const ALLOWED = /^(127\.0\.0\.1|localhost|host\.docker\.internal|www\.w3\.org|([a-z0-9-]+\.)*example(\.com|\.org|\.net)?|[a-z0-9.-]*\.example|[a-z0-9.-]*\.invalid)$/i
+
+describe('end to end specs', () => {
+ it('name no third party host', () => {
+ const offenders: string[] = []
+ for (const name of readdirSync(E2E).filter((f) => f.endsWith('.ts'))) {
+ const body = readFileSync(join(E2E, name), 'utf8')
+ for (const m of body.matchAll(/https?:\/\/([a-z0-9.-]+)/gi)) {
+ if (!ALLOWED.test(m[1])) offenders.push(`${name}: ${m[1]}`)
+ }
+ }
+ expect(offenders).toEqual([])
+ })
+})
diff --git a/web/apps/desk/src/types/pim.ts b/web/apps/desk/src/types/pim.ts
index 2dce4f9d9..a20fa625c 100644
--- a/web/apps/desk/src/types/pim.ts
+++ b/web/apps/desk/src/types/pim.ts
@@ -29,7 +29,7 @@ export interface PIMMedia {
alt_text: string;
sort_order: number;
is_primary: boolean;
- status: 'generating' | 'ready' | 'failed';
+ status: 'generating' | 'ready' | 'failed' | 'refused';
gen_model: string;
gen_prompt: string;
gen_style: string;
diff --git a/web/e2e/admin.spec.ts b/web/e2e/admin.spec.ts
index c7eb07246..71b818196 100644
--- a/web/e2e/admin.spec.ts
+++ b/web/e2e/admin.spec.ts
@@ -70,14 +70,17 @@ test.describe('Tech admin flow on the new contract', () => {
await page.getByRole('button', { name: /add key|update key/i }).click();
await page.getByPlaceholder('sk-or-...').fill(`sk-or-e2e-${RUN}`);
- await page.getByPlaceholder(/openrouter\.ai/).fill('https://openrouter.ai/api/v1');
+ await page.getByPlaceholder(/openrouter\.ai/).fill('http://127.0.0.1:9/api/v1');
await page.screenshot({ path: path.join(SHOTS_DIR, 'admin-ai-save.png') });
await page.getByRole('button', { name: 'Save Key' }).click();
// The saved state shows the admin override with its masked hint and the
// base URL it stored; the save carried the revision it read, so it
- // cannot have clobbered a second editor's write.
- await expect(page.getByText('AI Features Active')).toBeVisible();
+ // cannot have clobbered a second editor's write. The save tested the
+ // key against the loopback address typed above, which nothing answers, so
+ // the test failed at once (item 130, N7) and the card reads off rather
+ // than active. No request left the machine.
+ await expect(page.getByText('AI Features Off')).toBeVisible();
await expect(page.getByText('Admin configured')).toBeVisible();
await page.screenshot({ path: path.join(SHOTS_DIR, 'admin-ai-saved.png') });
diff --git a/web/packages/api-client/src/schema.d.ts b/web/packages/api-client/src/schema.d.ts
index 84c3cf3fc..c31f506c0 100644
--- a/web/packages/api-client/src/schema.d.ts
+++ b/web/packages/api-client/src/schema.d.ts
@@ -7487,11 +7487,20 @@ export interface components {
anthropic_configured: boolean;
anthropic_key_hint: string | null;
vault_present: boolean;
+ /**
+ * @description The last test of the saved key: none with no key saved, untested for a key never tested, passed, refused (the provider refused the key) or failed (the test could not finish). A save runs the test.
+ * @enum {string}
+ */
+ test_status: "none" | "untested" | "passed" | "refused" | "failed";
+ /** @description The plain sentence for refused and failed; absent otherwise. */
+ test_message?: string;
};
/** @description Go type techadmin.TestResult. A provider failure is ok false with its words, never the key. */
AdminTestAIResult: {
ok: boolean;
message: string;
+ /** @enum {string} */
+ status: "passed" | "refused" | "failed";
};
/** @description Go type techadmin.RoutingSettings, the AI settings' shape without the base URL. */
RoutingSettings: {
@@ -13367,8 +13376,11 @@ export interface components {
alt_text: string;
sort_order: number;
is_primary: boolean;
- /** @enum {string} */
- status: "generating" | "ready" | "failed";
+ /**
+ * @description refused is a generation the provider refused for the saved key (a retry cannot work; an administrator enters the key again in Tech Admin, AI Settings).
+ * @enum {string}
+ */
+ status: "generating" | "ready" | "failed" | "refused";
gen_model: string;
gen_prompt: string;
gen_style: string;
@@ -14669,6 +14681,15 @@ export interface components {
"application/json": components["schemas"]["WireError"];
};
};
+ /** @description The AI provider refused the saved key (code ai_refused; a 401 or 403 from the provider). It is not AI off: a key is saved and was not accepted. The message names the provider and says an administrator can enter the key again in Tech Admin, AI Settings. Nothing answers a canned result for it. ADR 0001 envelope. */
+ AIRefused: {
+ headers: {
+ [name: string]: unknown;
+ };
+ content: {
+ "application/json": components["schemas"]["WireError"];
+ };
+ };
/** @description AI is off (code ai_off): no key for the chosen provider, a stored key the vault cannot open, or a feature the chosen provider does not offer. The message says that an administrator turns it on in Tech Admin, AI. Or the idempotency layer reports the Idempotency-Key in progress (code idempotency_in_progress). Both are the ADR 0001 envelope. */
AIOffEither: {
headers: {
@@ -23297,6 +23318,7 @@ export interface operations {
415: components["responses"]["UnsupportedType"];
422: components["responses"]["UnprocessableEntity"];
500: components["responses"]["InternalError"];
+ 502: components["responses"]["AIRefused"];
};
};
partnerDashboard: {
@@ -26891,6 +26913,7 @@ export interface operations {
413: components["responses"]["PayloadTooLarge"];
422: components["responses"]["UnprocessableEntity"];
500: components["responses"]["InternalError"];
+ 502: components["responses"]["AIRefused"];
};
};
productPimGenerateDescriptions: {
@@ -26929,6 +26952,7 @@ export interface operations {
413: components["responses"]["PayloadTooLarge"];
422: components["responses"]["UnprocessableEntity"];
500: components["responses"]["InternalError"];
+ 502: components["responses"]["AIRefused"];
};
};
productPimGenerateImage: {
@@ -27005,6 +27029,7 @@ export interface operations {
413: components["responses"]["PayloadTooLarge"];
422: components["responses"]["UnprocessableEntity"];
500: components["responses"]["InternalError"];
+ 502: components["responses"]["AIRefused"];
};
};
productUpdateMargins: {
@@ -27731,6 +27756,7 @@ export interface operations {
415: components["responses"]["UnsupportedType"];
422: components["responses"]["UnprocessableEntity"];
500: components["responses"]["InternalError"];
+ 502: components["responses"]["AIRefused"];
};
};
purchaseOrderFreightApply: {
+ ${renderAiNotice(this.aiNotice)}
diff --git a/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.test.ts b/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.test.ts
index 6f77a2fec..825f90878 100644
--- a/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.test.ts
+++ b/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.test.ts
@@ -11,6 +11,7 @@ import { describe, it, expect, afterEach, vi } from 'vitest'
import './ProductMediaTab'
import type { GableProductMediaTab } from './ProductMediaTab'
import { mountAsync, text } from '../../../test/dom'
+import type { PIMMedia } from '../../../types/pim'
function stubSettings(provider: 'openrouter' | 'anthropic' | null) {
vi.stubGlobal('fetch', vi.fn(async (input: RequestInfo | URL) => {
@@ -50,4 +51,42 @@ describe('the product media tab generation words', () => {
const el = await mountAsync('gable-product-media-tab', { productId: 'p1' })
expect(text(el)).toContain('Generate image')
})
+
+ it('says in words that the provider refused the key when an image row settled refused', async () => {
+ stubSettings('anthropic')
+ const refused = { id: 'm1', product_id: 'p1', media_type: 'hero', url: '', alt_text: '', status: 'refused', is_primary: false } as unknown as PIMMedia
+ const el = await mountAsync('gable-product-media-tab', { productId: 'p1', media: [refused] })
+ const notice = el.querySelector('[data-testid="pim-ai-notice"]')
+ expect(text(notice)).toContain('Anthropic refused the saved key')
+ expect(text(notice)).toContain('Tech Admin, AI Settings')
+ expect(text(el)).not.toContain('Please try again')
+ })
+
+ it('shows the refusal notice only while the newest attempt is refused', async () => {
+ stubSettings('anthropic')
+ const row = (id: string, status: string, created: string) =>
+ ({ id, product_id: 'p1', media_type: 'hero', url: status === 'ready' ? 'data:image/svg+xml;base64,AA==' : '', alt_text: '', status, is_primary: false, created_at: created, updated_at: created }) as unknown as PIMMedia
+ // An old refused row, then a newer one that was drawn once the key was fixed.
+ const fixed = await mountAsync('gable-product-media-tab', {
+ productId: 'p1', media: [row('new', 'ready', '2026-02-01T00:00:00Z'), row('old', 'refused', '2026-01-01T00:00:00Z')],
+ })
+ expect(fixed.querySelector('[data-testid="pim-ai-notice"]')).toBeNull()
+ document.body.innerHTML = ''
+ // The newest attempt refused: the notice stands.
+ const refused = await mountAsync('gable-product-media-tab', {
+ productId: 'p1', media: [row('old', 'ready', '2026-01-01T00:00:00Z'), row('new', 'refused', '2026-02-01T00:00:00Z')],
+ })
+ expect(text(refused.querySelector('[data-testid="pim-ai-notice"]'))).toContain('refused the saved key')
+ })
+
+ it('orders attempts by the moment, not the text, when one falls on a whole second', async () => {
+ stubSettings('anthropic')
+ const row = (id: string, status: string, created: string) =>
+ ({ id, product_id: 'p1', media_type: 'hero', url: '', alt_text: '', status, is_primary: false, created_at: created, updated_at: created }) as unknown as PIMMedia
+ // The refused attempt is half a second AFTER the ready one, though its text sorts before it.
+ const el = await mountAsync('gable-product-media-tab', {
+ productId: 'p1', media: [row('a', 'ready', '2026-02-01T00:00:00Z'), row('b', 'refused', '2026-02-01T00:00:00.500Z')],
+ })
+ expect(text(el.querySelector('[data-testid="pim-ai-notice"]'))).toContain('refused the saved key')
+ })
})
diff --git a/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.ts b/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.ts
index 031700cb0..08b8505b9 100644
--- a/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.ts
+++ b/web/apps/desk/src/pages/inventory/tabs/ProductMediaTab.ts
@@ -10,6 +10,7 @@ import { ToastService } from '../../../lib/toast-service.ts';
import type { PIMMedia } from '../../../types/pim.ts';
import { techAdminService } from '../../../services/TechAdminService';
import { imageWords, type AIProvider } from '../../../lib/aiWords.ts';
+import { renderAiNotice } from '../../../components/inventory/PimAiNotice.ts';
const STYLES = ['', 'photographic', 'digital-art', 'cinematic', '3d-model', 'isometric'];
@@ -70,6 +71,17 @@ export class GableProductMediaTab extends LitElement {
}
}
+ /** The refusal notice stands only while the newest attempt is the refused one. */
+ private _newestRefused(): boolean {
+ const settled = this.media.filter(m => m.status !== 'generating');
+ if (settled.length === 0) return false;
+ // Compare the moments: timestamps that fall on a whole second omit the fraction,
+ // and their text sorts after a later moment that carries one.
+ const at = (m: PIMMedia) => Date.parse(m.created_at) || 0;
+ const newest = settled.reduce((a, b) => (at(b) > at(a) ? b : a));
+ return newest.status === 'refused';
+ }
+
private async _handleDelete(mediaId: string) {
try {
await PIMService.deleteMedia(this.productId, mediaId);
@@ -94,6 +106,7 @@ export class GableProductMediaTab extends LitElement {
const words = imageWords(this.provider);
return html`
+ ${renderAiNotice(this._newestRefused() ? words.refused : null)}
`
- : m.status === 'failed'
+ : m.status === 'failed' || m.status === 'refused'
? html``
}
@@ -176,7 +189,7 @@ export class GableProductMediaTab extends LitElement {
${m.status !== 'generating' ? html`
@@ -160,10 +173,10 @@ export class GableProductMediaTab extends LitElement { ${icon(Loader2, 28, 'w-7 h-7 animate-spin text-amber-400')} Generating…
${icon(AlertTriangle, 28, 'w-7 h-7')}
- Generation failed
+ ${m.status === 'refused' ? 'Key refused' : 'Generation failed'}
`
: html`
- ${!m.is_primary && m.status !== 'failed' ? html`
+ ${!m.is_primary && m.status !== 'failed' && m.status !== 'refused' ? html`
diff --git a/web/apps/desk/src/pages/inventory/tabs/ProductSEOTab.ts b/web/apps/desk/src/pages/inventory/tabs/ProductSEOTab.ts
index b31668c83..1818f860e 100644
--- a/web/apps/desk/src/pages/inventory/tabs/ProductSEOTab.ts
+++ b/web/apps/desk/src/pages/inventory/tabs/ProductSEOTab.ts
@@ -9,6 +9,7 @@ import { PIMService } from '../../../services/PIMService.ts';
import { ToastService } from '../../../lib/toast-service.ts';
import { apiErrorMessage } from '../../../services/apiError';
import type { PIMContent } from '../../../types/pim.ts';
+import { aiRefusalWords, renderAiNotice } from '../../../components/inventory/PimAiNotice.ts';
@customElement('gable-product-seo-tab')
export class GableProductSEOTab extends LitElement {
@@ -18,6 +19,7 @@ export class GableProductSEOTab extends LitElement {
@property({ attribute: false }) content: PIMContent | null = null;
@state() private generating = false;
+ @state() private aiNotice: string | null = null;
@state() private saving = false;
@state() private _seoTitle = '';
@state() private _seoDescription = '';
@@ -39,12 +41,14 @@ export class GableProductSEOTab extends LitElement {
private async _handleGenerate() {
this.generating = true;
+ this.aiNotice = null;
try {
const result = await PIMService.generateSEO(this.productId, { target_keywords: this.keywords.length > 0 ? this.keywords : [] });
this.dispatchEvent(new CustomEvent('content-update', { detail: result, bubbles: true, composed: true }));
} catch (err) {
console.error('Generate SEO failed:', err);
- ToastService.show(apiErrorMessage(err, 'Failed to generate SEO content'), 'error');
+ this.aiNotice = aiRefusalWords(err);
+ if (!this.aiNotice) ToastService.show(apiErrorMessage(err, 'Failed to generate SEO content'), 'error');
} finally {
this.generating = false;
}
@@ -83,6 +87,7 @@ export class GableProductSEOTab extends LitElement {
render() {
return html`
+ ${renderAiNotice(this.aiNotice)}
diff --git a/web/apps/desk/src/services/TechAdminService.ts b/web/apps/desk/src/services/TechAdminService.ts
index accd585da..3da39f2e1 100644
--- a/web/apps/desk/src/services/TechAdminService.ts
+++ b/web/apps/desk/src/services/TechAdminService.ts
@@ -38,11 +38,15 @@ export interface AISettings {
anthropic_configured: boolean;
anthropic_key_hint: string | null;
vault_present: boolean;
+ /** The last test of the saved key; a save runs the test. */
+ test_status: 'none' | 'untested' | 'passed' | 'refused' | 'failed';
+ test_message?: string;
}
export interface AITestResult {
ok: boolean;
message: string;
+ status?: 'passed' | 'refused' | 'failed';
}
export interface RoutingSettings {
diff --git a/web/apps/desk/src/services/parsing.service.ts b/web/apps/desk/src/services/parsing.service.ts
index 6ca015f1f..43e42667a 100644
--- a/web/apps/desk/src/services/parsing.service.ts
+++ b/web/apps/desk/src/services/parsing.service.ts
@@ -3,6 +3,7 @@
import type { ParseResponse } from '../types/parsing';
import { fetchWithAuth } from './fetchClient';
+import { parseApiError } from './apiError';
const API_URL = import.meta.env.VITE_API_URL || '';
@@ -24,18 +25,9 @@ export const ParsingService = {
timeout: AI_PARSE_TIMEOUT,
});
- if (!response.ok) {
- const errorText = await response.text();
- // The wire error envelope carries the words a person reads.
- let words = '';
- try {
- const body = JSON.parse(errorText) as { error?: { message?: string } };
- words = body.error?.message ?? '';
- } catch {
- words = errorText;
- }
- throw new Error(words || 'Failed to parse material list');
- }
+ // The wire error envelope carries the words a person reads and the
+ // code a caller branches on (ai_refused, unsupported_type).
+ if (!response.ok) throw await parseApiError(response, 'Failed to parse material list');
return response.json();
},
diff --git a/web/apps/desk/src/test/e2eNoNetwork.test.ts b/web/apps/desk/src/test/e2eNoNetwork.test.ts
new file mode 100644
index 000000000..d13e6c994
--- /dev/null
+++ b/web/apps/desk/src/test/e2eNoNetwork.test.ts
@@ -0,0 +1,28 @@
+// SPDX-License-Identifier: LicenseRef-OpenLBM-Surface-1.0
+// SPDX-FileCopyrightText: 2026 FutureBuild, Inc. and OpenLBM contributors
+
+/**
+ * No end to end spec sends a request to a third party address (item 130,
+ * round 1): a base URL or link a spec types must be loopback or a reserved
+ * example domain, so CI never reaches a provider on the network.
+ */
+import { describe, it, expect } from 'vitest'
+import { readdirSync, readFileSync } from 'node:fs'
+import { join, resolve } from 'node:path'
+
+// The desk workspace is the working directory of its tests: the specs are two folders up.
+const E2E = resolve(process.cwd(), '../../e2e')
+const ALLOWED = /^(127\.0\.0\.1|localhost|host\.docker\.internal|www\.w3\.org|([a-z0-9-]+\.)*example(\.com|\.org|\.net)?|[a-z0-9.-]*\.example|[a-z0-9.-]*\.invalid)$/i
+
+describe('end to end specs', () => {
+ it('name no third party host', () => {
+ const offenders: string[] = []
+ for (const name of readdirSync(E2E).filter((f) => f.endsWith('.ts'))) {
+ const body = readFileSync(join(E2E, name), 'utf8')
+ for (const m of body.matchAll(/https?:\/\/([a-z0-9.-]+)/gi)) {
+ if (!ALLOWED.test(m[1])) offenders.push(`${name}: ${m[1]}`)
+ }
+ }
+ expect(offenders).toEqual([])
+ })
+})
diff --git a/web/apps/desk/src/types/pim.ts b/web/apps/desk/src/types/pim.ts
index 2dce4f9d9..a20fa625c 100644
--- a/web/apps/desk/src/types/pim.ts
+++ b/web/apps/desk/src/types/pim.ts
@@ -29,7 +29,7 @@ export interface PIMMedia {
alt_text: string;
sort_order: number;
is_primary: boolean;
- status: 'generating' | 'ready' | 'failed';
+ status: 'generating' | 'ready' | 'failed' | 'refused';
gen_model: string;
gen_prompt: string;
gen_style: string;
diff --git a/web/e2e/admin.spec.ts b/web/e2e/admin.spec.ts
index c7eb07246..71b818196 100644
--- a/web/e2e/admin.spec.ts
+++ b/web/e2e/admin.spec.ts
@@ -70,14 +70,17 @@ test.describe('Tech admin flow on the new contract', () => {
await page.getByRole('button', { name: /add key|update key/i }).click();
await page.getByPlaceholder('sk-or-...').fill(`sk-or-e2e-${RUN}`);
- await page.getByPlaceholder(/openrouter\.ai/).fill('https://openrouter.ai/api/v1');
+ await page.getByPlaceholder(/openrouter\.ai/).fill('http://127.0.0.1:9/api/v1');
await page.screenshot({ path: path.join(SHOTS_DIR, 'admin-ai-save.png') });
await page.getByRole('button', { name: 'Save Key' }).click();
// The saved state shows the admin override with its masked hint and the
// base URL it stored; the save carried the revision it read, so it
- // cannot have clobbered a second editor's write.
- await expect(page.getByText('AI Features Active')).toBeVisible();
+ // cannot have clobbered a second editor's write. The save tested the
+ // key against the loopback address typed above, which nothing answers, so
+ // the test failed at once (item 130, N7) and the card reads off rather
+ // than active. No request left the machine.
+ await expect(page.getByText('AI Features Off')).toBeVisible();
await expect(page.getByText('Admin configured')).toBeVisible();
await page.screenshot({ path: path.join(SHOTS_DIR, 'admin-ai-saved.png') });
diff --git a/web/packages/api-client/src/schema.d.ts b/web/packages/api-client/src/schema.d.ts
index 84c3cf3fc..c31f506c0 100644
--- a/web/packages/api-client/src/schema.d.ts
+++ b/web/packages/api-client/src/schema.d.ts
@@ -7487,11 +7487,20 @@ export interface components {
anthropic_configured: boolean;
anthropic_key_hint: string | null;
vault_present: boolean;
+ /**
+ * @description The last test of the saved key: none with no key saved, untested for a key never tested, passed, refused (the provider refused the key) or failed (the test could not finish). A save runs the test.
+ * @enum {string}
+ */
+ test_status: "none" | "untested" | "passed" | "refused" | "failed";
+ /** @description The plain sentence for refused and failed; absent otherwise. */
+ test_message?: string;
};
/** @description Go type techadmin.TestResult. A provider failure is ok false with its words, never the key. */
AdminTestAIResult: {
ok: boolean;
message: string;
+ /** @enum {string} */
+ status: "passed" | "refused" | "failed";
};
/** @description Go type techadmin.RoutingSettings, the AI settings' shape without the base URL. */
RoutingSettings: {
@@ -13367,8 +13376,11 @@ export interface components {
alt_text: string;
sort_order: number;
is_primary: boolean;
- /** @enum {string} */
- status: "generating" | "ready" | "failed";
+ /**
+ * @description refused is a generation the provider refused for the saved key (a retry cannot work; an administrator enters the key again in Tech Admin, AI Settings).
+ * @enum {string}
+ */
+ status: "generating" | "ready" | "failed" | "refused";
gen_model: string;
gen_prompt: string;
gen_style: string;
@@ -14669,6 +14681,15 @@ export interface components {
"application/json": components["schemas"]["WireError"];
};
};
+ /** @description The AI provider refused the saved key (code ai_refused; a 401 or 403 from the provider). It is not AI off: a key is saved and was not accepted. The message names the provider and says an administrator can enter the key again in Tech Admin, AI Settings. Nothing answers a canned result for it. ADR 0001 envelope. */
+ AIRefused: {
+ headers: {
+ [name: string]: unknown;
+ };
+ content: {
+ "application/json": components["schemas"]["WireError"];
+ };
+ };
/** @description AI is off (code ai_off): no key for the chosen provider, a stored key the vault cannot open, or a feature the chosen provider does not offer. The message says that an administrator turns it on in Tech Admin, AI. Or the idempotency layer reports the Idempotency-Key in progress (code idempotency_in_progress). Both are the ADR 0001 envelope. */
AIOffEither: {
headers: {
@@ -23297,6 +23318,7 @@ export interface operations {
415: components["responses"]["UnsupportedType"];
422: components["responses"]["UnprocessableEntity"];
500: components["responses"]["InternalError"];
+ 502: components["responses"]["AIRefused"];
};
};
partnerDashboard: {
@@ -26891,6 +26913,7 @@ export interface operations {
413: components["responses"]["PayloadTooLarge"];
422: components["responses"]["UnprocessableEntity"];
500: components["responses"]["InternalError"];
+ 502: components["responses"]["AIRefused"];
};
};
productPimGenerateDescriptions: {
@@ -26929,6 +26952,7 @@ export interface operations {
413: components["responses"]["PayloadTooLarge"];
422: components["responses"]["UnprocessableEntity"];
500: components["responses"]["InternalError"];
+ 502: components["responses"]["AIRefused"];
};
};
productPimGenerateImage: {
@@ -27005,6 +27029,7 @@ export interface operations {
413: components["responses"]["PayloadTooLarge"];
422: components["responses"]["UnprocessableEntity"];
500: components["responses"]["InternalError"];
+ 502: components["responses"]["AIRefused"];
};
};
productUpdateMargins: {
@@ -27731,6 +27756,7 @@ export interface operations {
415: components["responses"]["UnsupportedType"];
422: components["responses"]["UnprocessableEntity"];
500: components["responses"]["InternalError"];
+ 502: components["responses"]["AIRefused"];
};
};
purchaseOrderFreightApply: {