@cat-factory/app 0.26.2 → 0.26.3

package/app/components/settings/OpenRouterCatalogPanel.vue

@@ -30,6 +30,7 @@ const RECOMMENDED_SLUGS = [
   'openai/gpt-5.5',
   'google/gemini-3-pro',
   'deepseek/deepseek-chat',
+  'moonshotai/kimi-k2.7-code',
 ]
 
 // Whether the workspace/user has an OpenRouter key connected at any reachable scope.
@@ -105,18 +106,35 @@ async function connectKey() {
   if (!keyValue.value.trim() || !workspace.workspaceId) return
   connectingKey.value = true
   try {
+    const scope = keyScope.value
     const input = {
       provider: 'openrouter' as const,
       label: keyLabel.value.trim() || 'openrouter key',
       key: keyValue.value.trim(),
     }
-    if (keyScope.value === 'workspace') await apiKeys.addWorkspaceKey(input)
-    else await apiKeys.addUserKey(input)
+    // The save endpoint stores the key WITHOUT validating it, so a wrong/expired key
+    // would otherwise be reported as "connected". Probe OpenRouter with the freshly
+    // stored key and only announce success when it's actually reachable; on rejection
+    // roll the key back so `keyConnected` stays false and the form remains for a retry.
+    const created =
+      scope === 'workspace' ? await apiKeys.addWorkspaceKey(input) : await apiKeys.addUserKey(input)
+    const result = await store.refresh(workspace.workspaceId)
+    if (!result.reachable) {
+      if (created) {
+        if (scope === 'workspace') await apiKeys.removeWorkspaceKey(created.id).catch(() => {})
+        else await apiKeys.removeUserKey(created.id).catch(() => {})
+      }
+      toast.add({
+        title: 'Could not connect key',
+        description: store.refreshError ?? 'OpenRouter rejected the key.',
+        icon: 'i-lucide-triangle-alert',
+        color: 'error',
+      })
+      return
+    }
     keyValue.value = ''
     keyLabel.value = ''
     toast.add({ title: 'OpenRouter key connected', icon: 'i-lucide-check', color: 'success' })
-    // Now that a key exists, load the live catalog automatically.
-    await refresh()
   } catch (e) {
     toast.add({
       title: 'Could not connect key',

package/app/stores/apiKeys.ts

@@ -39,6 +39,7 @@ export const useApiKeysStore = defineStore('apiKeys', () => {
     if (!workspaceId.value) return
     const created = await api.addWorkspaceApiKey(workspaceId.value, input)
     workspaceKeys.value = [...workspaceKeys.value, created]
+    return created
   }
 
   async function removeWorkspaceKey(id: string) {
@@ -50,6 +51,7 @@ export const useApiKeysStore = defineStore('apiKeys', () => {
   async function addUserKey(input: AddApiKeyInput) {
     const created = await api.addMyApiKey(input)
     userKeys.value = [...userKeys.value, created]
+    return created
   }
 
   async function removeUserKey(id: string) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/app",
-  "version": "0.26.2",
+  "version": "0.26.3",
   "description": "Reusable Nuxt layer for the Agent Architecture Board SPA (components, stores, composables, pages). Consume it from a thin deployment app via `extends: ['@cat-factory/app']` and point it at your backend with NUXT_PUBLIC_API_BASE. See deploy/frontend for an example.",
   "repository": {
     "type": "git",