Clearer OpenRouter errors: a spending-limit 403 no longer says the key is wrong

engine.js

@@ -106,9 +106,12 @@ const Lite = {
     } catch (e) {
       return '<div class="keystat meh">⚠️ Could not reach OpenRouter to check the key. Try a run anyway.</div>';
     }
-    if (r.status === 401 || r.status === 403) {
+    if (r.status === 401) {
       return '<div class="keystat bad">❌ OpenRouter did not accept this key. It may be mistyped, deleted, or expired. Make a new one at openrouter.ai, under Keys.</div>';
     }
+    if (r.status === 403) {
+      return '<div class="keystat meh">⚠️ OpenRouter refused to check this key (403). That usually means a spending limit or budget was reached, not a bad key. Try a free model (its name ends in :free).</div>';
+    }
     if (!r.ok) return `<div class="keystat meh">⚠️ Could not check the key right now (OpenRouter said ${r.status}). Try a run anyway.</div>`;
     const d = ((await r.json()) || {}).data || {};
     const parts = ["✅ <b>Key works.</b>"];
@@ -129,12 +132,17 @@ const Lite = {
   },
 
   friendly(status, data) {
-    const m = (data && data.error && (data.error.message || data.error)) || "";
+    const m = String((data && data.error && (data.error.message || data.error)) || "").replace(/\s+/g, " ").trim();
     if (status === 429) return "This free model is busy, or you hit the free limit (about 20 requests a minute). Wait a minute, or pick another model at the top.";
-    if (status === 401 || status === 403) return "The key was not accepted. Check that you pasted the whole OpenRouter key.";
-    if (status === 402) return "This key has no credit for that model. Pick a free model (its name ends in :free).";
-    if (status === 404) return "That model is not available right now. Pick another one at the top.";
-    return `The model service returned an error (${status}): ${String(m).slice(0, 200)}`;
+    if (status === 401) return "The key was not accepted. Check that you pasted the whole OpenRouter key.";
+    if (status === 402) return "This key has no credit left for that model. Add credit at openrouter.ai, or pick a free model (its name ends in :free).";
+    if (status === 403) {
+      if (/budget|limit|spend|credit/i.test(m)) return `Your key is fine, but it has reached a spending limit, so OpenRouter refused this paid model. Pick a free model (its name ends in :free), or raise the limit at openrouter.ai under Settings. OpenRouter said: ${m.slice(0, 160)}`;
+      if (/moderat|flag/i.test(m)) return `OpenRouter's safety filter blocked this request. OpenRouter said: ${m.slice(0, 160)}`;
+      return `OpenRouter refused this request (403). Your key may still be fine: try a free model (its name ends in :free). OpenRouter said: ${m.slice(0, 160)}`;
+    }
+    if (status === 404) return /tool/i.test(m) ? "That model cannot use tools right now. Pick another one at the top." : "That model is not available right now. Pick another one at the top.";
+    return `The model service returned an error (${status}): ${m.slice(0, 200)}`;
   },
 
   /* One model call, retried once on a free-tier rate limit. Returns {message, usage, secs, model, where}. */