fix: improve error handling for LLM authentication by providing specific error messages for locked API keys

Author: FloareDor

src/app/[owner]/[repo]/page.tsx

@@ -929,7 +929,7 @@ ${context}`,
 		} catch (err) {
 			const errorMessage = err instanceof Error ? err.message : String(err);
 			if (shouldPromptForLLMSettings(errorMessage)) {
-				setToastMessage("LLM authentication failed. Open LLM Settings to update your API key.");
+				setToastMessage(errorMessage);
 				if (typeof window !== "undefined") {
 					window.dispatchEvent(new Event("gitask-open-llm-settings"));
 				}

src/lib/llm.ts

@@ -53,10 +53,25 @@ export interface ChatMessage {
 	content: string;
 }
 
+const VAULT_LOCKED_MSG = "Your API key is locked. Open LLM Settings and unlock it to continue.";
+
+function isVaultLockedError(lower: string): boolean {
+	return (
+		lower.includes("vault is locked") ||
+		lower.includes("key is locked") ||
+		lower.includes("not unlocked") ||
+		lower.includes("locked") && lower.includes("unlock")
+	);
+}
+
 function normalizeGeminiError(err: unknown): Error {
 	const message = err instanceof Error ? err.message : String(err);
 	const lower = message.toLowerCase();
 
+	if (isVaultLockedError(lower)) {
+		return new Error(VAULT_LOCKED_MSG);
+	}
+
 	if (
 		lower.includes("api key not valid") ||
 		lower.includes("invalid api key") ||
@@ -82,6 +97,10 @@ function normalizeGroqError(err: unknown): Error {
 	const message = err instanceof Error ? err.message : String(err);
 	const lower = message.toLowerCase();
 
+	if (isVaultLockedError(lower)) {
+		return new Error(VAULT_LOCKED_MSG);
+	}
+
 	if (
 		lower.includes("invalid api key") ||
 		lower.includes("authentication") ||
@@ -879,7 +898,7 @@ export async function initLLM(
 						storageMode === "local"
 							? `Add your ${providerLabel} API key in LLM Settings.`
 							: state === "locked"
-							? "Please unlock your API key in Settings."
+							? VAULT_LOCKED_MSG
 							: "Add an API key in Settings or use the default key."
 					);
 				}