@gentbajko/slopify 3.25.9 → 4.1.0

package/dist/adapters/llm/codex.js

@@ -5,6 +5,7 @@ import { z } from "zod";
 import { redact } from "../../kernel/log.js";
 import { providerError } from "../../kernel/ports/model.js";
 import { cliCheck, cliReported } from "../explain.js";
+import { accessField } from "../model-access.js";
 import { cliLoginError } from "./cli-login-error.js";
 import { codexPlanLimit } from "./codex-limits.js";
 import { nodeCodexModels } from "./codex-models.js";
@@ -52,7 +53,10 @@ const disabledFeatures = [
 // "-i, --image <FILE>... Optional image(s) to attach to the initial prompt"), which needs no
 // tool: `view_image` stays disabled. Each is given as its own flag so a path is never read as
 // the prompt.
-export function codexArgs(req, directory, documents, images) {
+// One ephemeral, read-only turn in `directory` with every local tool, hook, plugin, skill and
+// project document left out. The content adapter and the in-app assistant (`assistant-cli.ts`)
+// both start from it and add their own instructions, search setting and MCP servers.
+export function hardenedCodexBase(directory) {
     return [
         "exec",
         "--json",
@@ -86,6 +90,11 @@ export function codexArgs(req, directory, documents, images) {
         "include_environment_context=false",
         "-c",
         'shell_environment_policy.inherit="none"',
+    ];
+}
+export function codexArgs(req, directory, documents, images) {
+    return [
+        ...hardenedCodexBase(directory),
         "-c",
         `instructions=${JSON.stringify(writingRole + (documents ? " Use the explicitly supplied research MCP tool to read request documents; it is the only permitted local reference source." : ""))}`,
         "-c",
@@ -221,6 +230,7 @@ export function codexLlm(deps) {
                         throw codexLimitError(failed, planLimit);
                     throw providerError({
                         kind: "other",
+                        ...accessField(null, failed),
                         message: cliReported(binary, redact(cliShaped(binary, turnFailed, event.value).error.message), cliCheck(binary)),
                     });
                 }
@@ -234,6 +244,7 @@ export function codexLlm(deps) {
                         throw codexLimitError(failed, planLimit);
                     throw providerError({
                         kind: "other",
+                        ...accessField(null, failed),
                         message: cliReported(binary, redact(cliShaped(binary, errorEvent, event.value).message), cliCheck(binary)),
                     });
                 }

package/dist/adapters/llm/document-workspace.js

@@ -6,6 +6,7 @@ import { fileURLToPath } from "node:url";
 import { z } from "zod";
 import { documentIndex, llmDocumentsSchema, } from "../../kernel/ports/llm-documents.js";
 import { providerError } from "../../kernel/ports/model.js";
+import { editSettings } from "../../kernel/ports/settings-places.js";
 export const documentServerName = "slopify_research";
 export const documentTool = "read_document";
 export const documentToolName = `mcp__${documentServerName}__${documentTool}`;
@@ -16,7 +17,7 @@ export function documentWorkspace(input) {
     if (!parsed.success)
         throw providerError({
             kind: "unsupported",
-            message: "The research notes are too large, or not in a form the AI model can be given, so nothing was sent. Make the inputs shorter in Edit project, then use Try again; if it keeps happening, use Download diagnostics in Settings and report it.",
+            message: `The research notes are too large, or not in a form the AI model can be given, so nothing was sent. Make the research notes shorter in ${editSettings.article}, then use Try again; if it keeps happening, use Download diagnostics in Settings and report it.`,
         });
     const documents = parsed.data;
     const directory = mkdtempSync(join(tmpdir(), "slopify-documents-"));
@@ -82,6 +83,6 @@ export function documentWorkspace(input) {
 function unread() {
     return providerError({
         kind: "unavailable",
-        message: "The AI model did not read all of the research notes, so its answer was not used (the attempt may still have used your quota). Use Try again; if it keeps happening, choose another model in the Providers section of Edit project.",
+        message: `The AI model did not read all of the research notes, so its answer was not used (the attempt may still have used your quota). Use Try again; if it keeps happening, choose another model in ${editSettings.writer}.`,
     });
 }

package/dist/adapters/llm/image-workspace.js

@@ -2,6 +2,7 @@ import { copyFileSync, mkdtempSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { basename, extname, join } from "node:path";
 import { providerError } from "../../kernel/ports/model.js";
+import { editSettings } from "../../kernel/ports/settings-places.js";
 const extensions = new Set([".png", ".jpg", ".jpeg", ".webp"]);
 // ceiling: a review shows one image, or a short's handful plus the establishing image.
 export const imagesMax = 12;
@@ -47,12 +48,12 @@ export function readFileName(path) {
 export function unseenImages() {
     return providerError({
         kind: "unavailable",
-        message: "The reviewer answered without opening every picture it was given, so its verdict was not used (the attempt may still have used your quota). Use Try again; if it keeps happening, choose Codex as the reviewer in Edit project → Reviews.",
+        message: `The reviewer answered without opening every picture it was given, so its verdict was not used (the attempt may still have used your quota). Use Try again; if it keeps happening, choose Codex as the reviewer in ${editSettings.checks}.`,
     });
 }
 export function noImages(provider) {
     return providerError({
         kind: "unsupported",
-        message: `Slopify can't show pictures to ${provider}, so a review that needs them was not sent. In Edit project → Reviews, choose Claude Code or Codex as the reviewer, or set the picture reviews to Off, then use Try again.`,
+        message: `Slopify can't show pictures to ${provider}, so a review that needs them was not sent. In ${editSettings.checks}, choose Claude Code or Codex as the reviewer, or set the picture reviews to Off, then use Try again.`,
     });
 }

package/dist/adapters/llm/openrouter.js

@@ -2,8 +2,10 @@ import { z } from "zod";
 import { redact } from "../../kernel/log.js";
 import { documentMessages } from "../../kernel/ports/llm-documents.js";
 import { providerError } from "../../kernel/ports/model.js";
-import { droppedStream, httpFailure, missingKey, providerSaid, refreshList, unreadable, } from "../explain.js";
-import { retryAfter } from "../retry-after.js";
+import { editSettings } from "../../kernel/ports/settings-places.js";
+import { droppedStream, httpFailure, providerSaid, refreshList, unreadable } from "../explain.js";
+import { failureText, httpProviderError, kindOfStatus, requireKey, safeJson, } from "../http-failure.js";
+import { accessField, modelAccessOf } from "../model-access.js";
 import { noImages } from "./image-workspace.js";
 import { sseData } from "./sse-lines.js";
 // The HTTP gateway adapter: the platform's own `fetch` plus the line reader beside this
@@ -86,7 +88,8 @@ export function openRouterLlm(deps) {
                 // A stream that has already answered 200 reports a mid-flight failure in a data
                 // frame; without this the stage would store half an article as a success.
                 throw providerError({
-                    kind: kindOf(statusOf(chunk.error.code)),
+                    kind: kindOfStatus(statusOf(chunk.error.code)),
+                    ...accessField(statusOf(chunk.error.code), chunk.error.message),
                     message: streamFailure(statusOf(chunk.error.code), redact(chunk.error.message)),
                 });
             }
@@ -147,53 +150,22 @@ export function openRouterLlm(deps) {
     };
 }
 function headers(key) {
-    // An attempt that finds no key fails rather than calling anonymously
-    // and being told off by the provider in words the user cannot act on. `missing_key`
-    // rather than `auth` because the same rule makes it terminal: there is nothing to
-    // retry until the user saves a key, and the wrapper is where that is decided.
-    if (key === undefined || key === "") {
-        throw providerError({ kind: "missing_key", message: missingKey("OpenRouter") });
-    }
-    return { Authorization: `Bearer ${key}`, ...appHeaders };
-}
-// Only the adapter sees the vendor's status code, so only the adapter names the kind.
-function kindOf(status) {
-    if (status === 401 || status === 403) {
-        return "auth";
-    }
-    if (status === 429) {
-        return "rate_limit";
-    }
-    // ceiling: everything else is `other` and is retried, so a 400 or a 402 fails the same
-    // way four times over. A terminal "this will never work" kind has to reach the port's
-    // error contract first, which is not this adapter's to widen.
-    // The provider's own server failed; the same request may well succeed later.
-    if (status >= 500)
-        return "dropped";
-    return "other";
+    // An attempt that finds no key fails rather than calling anonymously and being told off by
+    // the provider in words the user cannot act on.
+    return { Authorization: `Bearer ${requireKey(key, "OpenRouter")}`, ...appHeaders };
 }
 async function failure(response, next) {
-    const text = await response.text().catch(() => "");
+    const text = await failureText(response);
     const parsed = errorBody.safeParse(safeJson(text));
     // The provider's own words, through the redactor - an error body may quote the key back.
     const message = redact(parsed.success ? parsed.data.error.message : text.trim() || response.statusText);
-    const retryAfterMs = retryAfter(response.headers.get("retry-after"));
-    return providerError({
-        kind: kindOf(response.status),
-        message: httpFailure({
-            provider: "OpenRouter",
-            status: response.status,
-            detail: message,
-            next,
-        }),
-        ...(retryAfterMs === undefined ? {} : { retryAfterMs }),
-    });
+    return httpProviderError(response, kindOfStatus(response.status), httpFailure({ provider: "OpenRouter", status: response.status, detail: message, next }), undefined, modelAccessOf(response.status, message));
 }
 // A mid-stream error carries an HTTP-like code; with none, the provider's words are all there is.
 function streamFailure(status, detail) {
     return status >= 400
         ? httpFailure({ provider: "OpenRouter", status, detail })
-        : providerSaid("OpenRouter", "stopped part-way through the answer", detail, "Use Try again; if it keeps happening, choose another model in the Providers section of Edit project.");
+        : providerSaid("OpenRouter", "stopped part-way through the answer", detail, `Use Try again; if it keeps happening, choose another model in ${editSettings.writer}.`);
 }
 function statusOf(code) {
     return typeof code === "number" ? code : Number(code ?? 0);
@@ -211,11 +183,3 @@ function parseChunk(data) {
     }
     return parsed.data;
 }
-function safeJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return undefined;
-    }
-}

package/dist/adapters/llm/run-cli.js

@@ -3,7 +3,9 @@ import { z } from "zod";
 import { cliCommand } from "../../kernel/cli-command.js";
 import { redact } from "../../kernel/log.js";
 import { providerError } from "../../kernel/ports/model.js";
+import { editSettings } from "../../kernel/ports/settings-places.js";
 import { cliName, commandOf, quoted } from "../explain.js";
+import { safeJson } from "../http-failure.js";
 // ceiling: the last 8 KiB of stderr is kept. A CLI that writes megabytes of progress there
 // would otherwise be held in memory for the length of a run, and the tail is the part that
 // says why it stopped. Streaming stderr to the log is the upgrade if a provider ever
@@ -108,7 +110,7 @@ export function nodeRunCli(binary, args, signal, options) {
     return {
         ...(inputWritten === undefined ? {} : { inputWritten }),
         pid: child.pid,
-        stdout: child.stdout === null ? nothing : bytesOf(child.stdout),
+        stdout: bytesOf(child.stdout),
         stderr: () => stderr,
         ended,
         kill: terminate,
@@ -139,7 +141,7 @@ export function cliInput(text) {
     if (Buffer.byteLength(text) >= 8 * 1024 * 1024)
         throw providerError({
             kind: "unsupported",
-            message: "This prompt is larger than the CLI accepts (8 MB), so nothing was sent. Make the inputs shorter in Edit project, or choose an API provider such as OpenRouter in its Providers section, then use Try again.",
+            message: `This prompt is larger than the CLI accepts (8 MB), so nothing was sent. Make the article or its research notes shorter in ${editSettings.article}, or choose an API service such as OpenRouter under Written by there, then use Try again.`,
         });
     return text;
 }
@@ -168,7 +170,7 @@ export function promptOf(messages) {
 export function endedWithout(binary, ended, stderr) {
     const said = redact(stderr.trim());
     if (ended.error !== null)
-        return `The ${cliName(binary)} could not be started${quoted("", redact(ended.error.message))}. Check it is installed and set up in Settings → Providers, then use Try again.`;
+        return `The ${cliName(binary)} could not be started${quoted("", redact(ended.error.message))}. Check it is installed and set up in Settings → Keys & services, then use Try again.`;
     const how = ended.code === null ? "killed by the system" : `exit code ${String(ended.code)}`;
     return `The ${cliName(binary)} stopped without answering${quoted(how, said)}. Run ${commandOf(binary)} in a terminal to check it works and is signed in, then use Try again.`;
 }
@@ -181,13 +183,6 @@ export function endedKind(ended) {
 export function stuckCli(binary) {
     return `The ${cliName(binary)} stopped responding and could not be shut down. Close any leftover ${commandOf(binary)} processes or restart your computer, then use Try again.`;
 }
-// Unreachable while stdio names `pipe` for fd 1; it is here so the type carries no null
-// and no non-null assertion is needed to read the stream.
-const nothing = {
-    [Symbol.asyncIterator]: () => ({
-        next: () => Promise.resolve({ done: true, value: undefined }),
-    }),
-};
 const typed = z.object({ type: z.string() });
 // A JSONL line off a CLI's stdout. The raw value travels with its `type` because a schema
 // that names only `type` strips every other key, and each event's own shape is checked
@@ -215,22 +210,12 @@ export function cliShaped(binary, schema, value) {
     }
     return parsed.data;
 }
+// fd 1 is always a pipe with no encoding, so its pieces are bytes; the null check is for the type.
 async function* bytesOf(source) {
+    if (source === null)
+        return;
     for await (const piece of source) {
-        if (typeof piece === "string") {
-            yield new TextEncoder().encode(piece);
-            continue;
-        }
-        if (piece instanceof Uint8Array) {
+        if (piece instanceof Uint8Array)
             yield piece;
-        }
-    }
-}
-function safeJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return undefined;
     }
 }

package/dist/adapters/llm/sse-lines.js

@@ -5,7 +5,9 @@
 // the middle of one, or inside a multi-byte character. TextDecoder's streaming mode holds
 // back the tail of a split UTF-8 sequence instead of emitting a replacement character,
 // and the leftover buffer holds back a split line.
-export async function* lines(chunks, signal) {
+export async function* lines(chunks, signal, 
+// A producer that never ends a line would otherwise grow the buffer without bound.
+pending) {
     const decoder = new TextDecoder("utf-8");
     let buffer = "";
     for await (const chunk of chunks) {
@@ -15,6 +17,8 @@ export async function* lines(chunks, signal) {
             yield withoutCr(buffer.slice(0, at));
             buffer = buffer.slice(at + 1);
         }
+        if (pending !== undefined && buffer.length > pending.chars)
+            throw pending.error();
     }
     buffer += decoder.decode();
     // A producer that ends without a trailing newline still wrote a whole line, and one cut

package/dist/adapters/model-access.js

@@ -0,0 +1,37 @@
+// Whether a provider's failure says the account can't use the chosen model. Read from the
+// status and the provider's own words, since only the adapter sees them; it never changes the
+// error's kind, so a run fails exactly as before. Undefined: the failure says nothing about
+// the model.
+// Not-found comes first: OpenAI's "does not exist or you do not have access to it" is about a
+// model id, not a plan. The loose phrases count only when the text is about a model, so a
+// voice or a file that does not exist is not mistaken for one.
+const notFound = /model_not_found|not a valid model|model not found|no endpoints found|invalid model|unknown model|is not found for api version|models\/[^ ]+ is not found/i;
+const looseNotFound = /does not exist|may not exist|not[_ ]found/i;
+const noAccess = /not supported when using codex with a chatgpt account|not (?:available|included|supported) (?:on|in|for|with) your (?:current )?(?:plan|account|subscription|tier|region|country)|upgrade your (?:plan|subscription)|must be verified to use the model|does not have access to (?:the )?model|do not have access to (?:this|the) model|not allowed to (?:use|access) (?:this|the) model|requires a paid plan/i;
+const mentionsModel = /\bmodel/i;
+// `atModel`: the request went to the model's own address (fal.ai's and Replicate's endpoints,
+// Google's models/<id>), so a 404 or 403 there is about the model whatever the words say.
+export function modelAccessOf(status, text, atModel = false) {
+    if (notFound.test(text))
+        return "not-found";
+    // "Upgrade your plan" or "not found" alone is as often about credits, a voice or a feature
+    // as about a model.
+    if (mentionsModel.test(text)) {
+        if (looseNotFound.test(text))
+            return "not-found";
+        if (noAccess.test(text))
+            return "no-access";
+    }
+    else if (!atModel)
+        return undefined;
+    if (status === 404)
+        return "not-found";
+    if (status === 403)
+        return "no-access";
+    return undefined;
+}
+// Spread into a providerError init.
+export function accessField(status, text, atModel = false) {
+    const access = modelAccessOf(status, text, atModel);
+    return access === undefined ? {} : { access };
+}

package/dist/adapters/tts/cartesia.js

@@ -1,8 +1,9 @@
 import { z } from "zod";
 import { redact } from "../../kernel/log.js";
 import { providerError } from "../../kernel/ports/model.js";
-import { httpFailure, missingKey, noAudio, voiceFix } from "../explain.js";
-import { retryAfter } from "../retry-after.js";
+import { httpFailure, noAudio, voiceFix } from "../explain.js";
+import { failureText, httpProviderError, kindOfStatus, requireKey, safeJson, } from "../http-failure.js";
+import { modelAccessOf } from "../model-access.js";
 import { cartesiaLanguages, lookUp } from "./voice-languages.js";
 // The HTTP gateway adapter for Cartesia. `fetch` and
 // nothing else; `/tts/bytes` streams the audio it renders, so the response body is
@@ -69,45 +70,21 @@ export function cartesiaTts(deps) {
     };
 }
 function keyOf(deps) {
-    const key = deps.key();
-    // An absent key is terminal, so it never becomes a request.
-    if (key === undefined || key === "") {
-        throw providerError({ kind: "missing_key", message: missingKey("Cartesia") });
-    }
-    return key;
-}
-function kindOf(status) {
-    if (status === 401 || status === 403) {
-        return "auth";
-    }
-    // `concurrency_limited` is the plan's own limit and arrives as a 429 like any other, so
-    // the status is enough and the code below only reaches the message.
-    if (status === 429) {
-        return "rate_limit";
-    }
-    // ceiling: as in the other two adapters, everything else is `other` and is retried.
-    // The provider's own server failed; the same request may well succeed later.
-    if (status >= 500)
-        return "dropped";
-    return "other";
+    return requireKey(deps.key(), "Cartesia");
 }
 async function failure(response, voiceId) {
-    const text = await response.text().catch(() => "");
+    const text = await failureText(response);
     const message = redact(detailOf(text) || response.statusText);
-    const retryAfterMs = retryAfter(response.headers.get("retry-after"));
-    return providerError({
-        kind: kindOf(response.status),
-        // `voice_not_found` has to say which voice was asked for; Cartesia's
-        // own message does not repeat the id.
-        message: httpFailure({
-            provider: "Cartesia",
-            status: response.status,
-            detail: message,
-            subject: `narration request for voice "${voiceId}"`,
-            fix: voiceFix(voiceId),
-        }),
-        ...(retryAfterMs === undefined ? {} : { retryAfterMs }),
-    });
+    return httpProviderError(response, kindOfStatus(response.status), 
+    // `voice_not_found` has to say which voice was asked for; Cartesia's
+    // own message does not repeat the id.
+    httpFailure({
+        provider: "Cartesia",
+        status: response.status,
+        detail: message,
+        subject: `narration request for voice "${voiceId}"`,
+        fix: voiceFix(voiceId),
+    }), undefined, modelAccessOf(response.status, text));
 }
 function detailOf(text) {
     const parsed = errorBody.safeParse(safeJson(text));
@@ -120,11 +97,3 @@ function detailOf(text) {
     const parts = [code, message].filter((part) => part !== undefined && part !== "");
     return parts.length === 0 ? text.trim() : parts.join(": ");
 }
-function safeJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return undefined;
-    }
-}

package/dist/adapters/tts/elevenlabs.js

@@ -1,8 +1,9 @@
 import { z } from "zod";
 import { redact } from "../../kernel/log.js";
 import { providerError } from "../../kernel/ports/model.js";
-import { httpFailure, missingKey, noAudio, refreshList, unreadable, voiceFix } from "../explain.js";
-import { retryAfter } from "../retry-after.js";
+import { httpFailure, noAudio, refreshList, unreadable, voiceFix } from "../explain.js";
+import { failureText, httpProviderError, kindOfStatus, requireKey, safeJson, } from "../http-failure.js";
+import { modelAccessOf } from "../model-access.js";
 import { elevenLabsLanguages, lookUp } from "./voice-languages.js";
 // The HTTP gateway adapter for ElevenLabs: the platform's own `fetch` and nothing else. The
 // response body already is the `ReadableStream<Uint8Array>` the port asks for, so an SDK
@@ -99,52 +100,27 @@ export function elevenLabsTts(deps) {
     };
 }
 function keyOf(deps) {
-    const key = deps.key();
-    // `missing_key`, not `auth`, because that rule makes it terminal.
-    if (key === undefined || key === "") {
-        throw providerError({ kind: "missing_key", message: missingKey("ElevenLabs") });
-    }
-    return key;
-}
-// Only the adapter sees the vendor's status code, so only the adapter names the kind.
-function kindOf(status) {
-    if (status === 401 || status === 403) {
-        return "auth";
-    }
-    if (status === 429) {
-        return "rate_limit";
-    }
-    // ceiling: everything else is `other` and is retried, so a text past the character limit
-    // fails the same way four times over. A terminal "this will never work" kind has to reach the
-    // port's error contract first, which is not this adapter's to widen.
-    // The provider's own server failed; the same request may well succeed later.
-    if (status >= 500)
-        return "dropped";
-    return "other";
+    return requireKey(deps.key(), "ElevenLabs");
 }
 async function failure(response, voiceId, next) {
-    const text = await response.text().catch(() => "");
+    const text = await failureText(response);
     // The provider's own words, through the redactor - an error body may quote the key back.
     const message = redact(detailOf(text) || response.statusText);
-    const retryAfterMs = retryAfter(response.headers.get("retry-after"));
-    return providerError({
-        kind: kindOf(response.status),
-        // A rejected voice ID has to be named, and it is the one part of the
-        // request the user chose. It is not secret, unlike everything else on the wire.
-        message: httpFailure({
-            provider: "ElevenLabs",
-            status: response.status,
-            detail: message,
-            next,
-            ...(voiceId === undefined
-                ? {}
-                : {
-                    subject: `narration request for voice "${voiceId}"`,
-                    fix: voiceFix(voiceId),
-                }),
-        }),
-        ...(retryAfterMs === undefined ? {} : { retryAfterMs }),
-    });
+    return httpProviderError(response, kindOfStatus(response.status), 
+    // A rejected voice ID has to be named, and it is the one part of the
+    // request the user chose. It is not secret, unlike everything else on the wire.
+    httpFailure({
+        provider: "ElevenLabs",
+        status: response.status,
+        detail: message,
+        next,
+        ...(voiceId === undefined
+            ? {}
+            : {
+                subject: `narration request for voice "${voiceId}"`,
+                fix: voiceFix(voiceId),
+            }),
+    }), undefined, modelAccessOf(response.status, text));
 }
 function detailOf(text) {
     const parsed = errorBody.safeParse(safeJson(text));
@@ -159,11 +135,3 @@ function detailOf(text) {
     // (`max_character_limit_exceeded`, `voice_not_found`) and the message is the sentence.
     return [detail.status, detail.message].filter((part) => part !== undefined).join(": ");
 }
-function safeJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return undefined;
-    }
-}

package/dist/adapters/tts/gemini.js

@@ -1,8 +1,11 @@
 import { z } from "zod";
+import { internalError } from "../../kernel/errors.js";
 import { redact } from "../../kernel/log.js";
 import { providerError } from "../../kernel/ports/model.js";
-import { httpFailure, internalError, missingKey, noAudio, providerSaid, refreshList, unreadable, voiceFix, } from "../explain.js";
-import { retryAfter } from "../retry-after.js";
+import { editSettings } from "../../kernel/ports/settings-places.js";
+import { httpFailure, noAudio, providerSaid, refreshList, unreadable, voiceFix, } from "../explain.js";
+import { failureText, httpProviderError, kindOfStatus, requireKey, safeJson, } from "../http-failure.js";
+import { modelAccessOf } from "../model-access.js";
 // The HTTP gateway adapter for Gemini's speech generation (generateContent with an AUDIO
 // response, https://ai.google.dev/gemini-api/docs/speech-generation), billed to a Gemini API
 // key. One voice is `speechConfig.voiceConfig`; a conversation of exactly two voices is
@@ -132,7 +135,7 @@ function audioOf(text) {
     if (blocked)
         throw providerError({
             kind: "refusal",
-            message: providerSaid("Google", "refused to speak this narration under its content rules", blocked, "Reword that part of the script or article, or choose another voice provider under Speakers (Edit project → Providers)."),
+            message: providerSaid("Google", "refused to speak this narration under its content rules", blocked, `Reword that part of the script or article, or choose another voice service under Speakers (${editSettings.narration}).`),
         });
     for (const candidate of parsed.data.candidates ?? [])
         for (const part of candidate.content?.parts ?? []) {
@@ -156,24 +159,10 @@ function streamOf(bytes) {
     });
 }
 function keyOf(deps) {
-    // `missing_key`, not `auth`, because that rule makes it terminal.
-    const key = deps.key();
-    if (key === undefined || key === "") {
-        throw providerError({ kind: "missing_key", message: missingKey("Google") });
-    }
-    return key;
-}
-function kindOf(status) {
-    if (status === 401 || status === 403)
-        return "auth";
-    if (status === 429)
-        return "rate_limit";
-    if (status >= 500)
-        return "dropped";
-    return "other";
+    return requireKey(deps.key(), "Google");
 }
 async function failure(response, voiceId, next) {
-    const text = await response.text().catch(() => "");
+    const text = await failureText(response);
     const parsed = errorBody.safeParse(safeJson(text));
     // Through the redactor: an error body may quote the key back.
     const detail = redact((parsed.success ? parsed.data.error.message : undefined) ??
@@ -181,26 +170,17 @@ async function failure(response, voiceId, next) {
     // Google answers an unknown key with 400 API_KEY_INVALID rather than 401.
     const badKey = response.status === 400 && text.includes("API_KEY_INVALID");
     const status = badKey ? 401 : response.status;
-    const retryAfterMs = retryAfter(response.headers.get("retry-after"));
-    return providerError({
-        kind: badKey ? "auth" : kindOf(response.status),
-        message: httpFailure({
-            provider: "Google",
-            status,
-            detail,
-            next,
-            ...(voiceId === undefined
-                ? {}
-                : { subject: `narration request for voice "${voiceId}"`, fix: voiceFix(voiceId) }),
-        }),
-        ...(retryAfterMs === undefined ? {} : { retryAfterMs }),
-    });
-}
-function safeJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return undefined;
-    }
+    return httpProviderError(response, badKey ? "auth" : kindOfStatus(response.status), httpFailure({
+        provider: "Google",
+        status,
+        detail,
+        next,
+        ...(voiceId === undefined
+            ? {}
+            : { subject: `narration request for voice "${voiceId}"`, fix: voiceFix(voiceId) }),
+    }), undefined, 
+    // A narration request goes to the model's own address (models/<id>:generateContent).
+    badKey || voiceId === undefined
+        ? undefined
+        : modelAccessOf(response.status, `${parsed.success ? (parsed.data.error.status ?? "") : ""} ${detail}`, true));
 }

package/dist/adapters/tts/inworld-async.js

@@ -1,7 +1,10 @@
 import { z } from "zod";
+import { internalError } from "../../kernel/errors.js";
 import { redact } from "../../kernel/log.js";
 import { providerError } from "../../kernel/ports/model.js";
-import { httpFailure, internalError, noAudio, providerSaid, unreadable, voiceFix, } from "../explain.js";
+import { editSettings } from "../../kernel/ports/settings-places.js";
+import { httpFailure, noAudio, providerSaid, unreadable, voiceFix } from "../explain.js";
+import { accessField } from "../model-access.js";
 import { retryAfter } from "../retry-after.js";
 const operationName = /^workspaces\/[A-Za-z0-9_-]+\/ttsAsyncJobs\/[A-Za-z0-9_-]+\/operations\/[A-Za-z0-9_-]+$/;
 const operationSchema = z.object({
@@ -23,7 +26,7 @@ export async function* inworldAsync(deps, request, key) {
     if (saved === undefined && request.text.length > 100_000) {
         throw providerError({
             kind: "unsupported",
-            message: "This narration part is longer than the 100,000 characters Inworld takes at once (10,000 on On-Demand accounts). Set Chunking to Paragraph in the Providers section of Edit project, then use Try again.",
+            message: `This narration part is longer than the 100,000 characters Inworld takes at once (10,000 on On-Demand accounts). Set Chunking to Paragraph in ${editSettings.narration}, then use Try again.`,
         });
     }
     const headers = { Authorization: `Basic ${key}`, "Content-Type": "application/json" };
@@ -137,6 +140,7 @@ async function check(response, key, voiceId) {
     const detail = clean(await response.text().catch(() => ""), key);
     const retryAfterMs = retryAfter(response.headers.get("retry-after"));
     throw providerError({
+        ...accessField(response.status, detail),
         kind: response.status === 401 || response.status === 403
             ? "auth"
             : response.status === 429