@odori/cli 0.0.9 → 0.0.10

package/dist/{chunk-TDM65HRW.js → chunk-AJBK4XRB.js}

@@ -870,7 +870,11 @@ var elevenlabs = {
       signal: AbortSignal.timeout(1e4)
     });
     if (response.ok) return true;
-    if (response.status === 401 || response.status === 403) return false;
+    if (response.status === 401 || response.status === 403) {
+      const detail = await response.text().catch(() => "");
+      if (/missing_permissions|permission/i.test(detail)) return true;
+      return false;
+    }
     throw new Error(`ElevenLabs answered ${response.status} to a key check.`);
   },
   async generate({ prompt, seconds, apiKey }) {

package/dist/cli.js

@@ -2,7 +2,7 @@ import {
   checkFlags,
   parseArgs,
   run
-} from "./chunk-TDM65HRW.js";
+} from "./chunk-AJBK4XRB.js";
 export {
   checkFlags,
   parseArgs,

package/dist/index.js

@@ -75,7 +75,7 @@ import {
   withServer,
   writeGenerated,
   writePrepareCache
-} from "./chunk-TDM65HRW.js";
+} from "./chunk-AJBK4XRB.js";
 export {
   CHROME_BUILD,
   FORMATS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@odori/cli",
-  "version": "0.0.9",
+  "version": "0.0.10",
   "type": "module",
   "description": "The odori command line: discovery, Studio, component installation, stills, tests, and export jobs.",
   "license": "Apache-2.0",
@@ -28,7 +28,7 @@
     "playwright-core": "1.55.0",
     "tsx": "4.20.5",
     "vite": "7.3.0",
-    "odori": "0.0.9"
+    "odori": "0.0.10"
   },
   "devDependencies": {
     "@types/node": "22.19.0",
@@ -36,7 +36,7 @@
     "@types/react-dom": "19.2.3",
     "tsup": "^8.5.1",
     "typescript": "5.9.3",
-    "@odori/registry": "0.0.8"
+    "@odori/registry": "0.0.9"
   },
   "publishConfig": {
     "access": "public"

package/src/commands/dev.ts

@@ -309,6 +309,8 @@ export const devCommand = async (options: {port?: number; root?: string; open?:
                   verified = null;
                 }
                 if (verified === false) {
+                  // The provider's check accepts a valid key regardless of its
+                  // scoping, so a rejection here means the key itself.
                   json(response, 400, {error: `${provider.title} rejected that key.`});
                   return;
                 }

package/src/providers.ts

@@ -45,7 +45,20 @@ const elevenlabs: MusicProvider = {
       signal: AbortSignal.timeout(10_000),
     });
     if (response.ok) return true;
-    if (response.status === 401 || response.status === 403) return false;
+    if (response.status === 401 || response.status === 403) {
+      /*
+       * A restricted key opts in to endpoints one by one, and this probe's
+       * endpoint is one of them: a real key scoped to something else answers
+       * 401 here exactly like a wrong key does. The error body tells them
+       * apart, an invalid key names itself invalid, a valid one names the
+       * permission it lacks, and a key that is real but scoped elsewhere is
+       * a pass. Whether it can reach the integration's own endpoint is the
+       * generate call's problem, which reports it properly.
+       */
+      const detail = await response.text().catch(() => "");
+      if (/missing_permissions|permission/i.test(detail)) return true;
+      return false;
+    }
     throw new Error(`ElevenLabs answered ${response.status} to a key check.`);
   },
   async generate({prompt, seconds, apiKey}) {