fix

apps/api/internal/processing/sanitize.go

@@ -232,17 +232,26 @@ func classifyProviderError(msg string) string {
 		strings.Contains(lower, "http 401"),
 		strings.Contains(lower, "invalid api key"),
 		strings.Contains(lower, "incorrect api key"),
-		strings.Contains(lower, "invalid_api_key"):
+		strings.Contains(lower, "invalid_api_key"),
+		strings.Contains(lower, "rejected the api key"):
 		return "AI provider rejected the API key"
 	case strings.Contains(lower, "http 403"),
-		lower == "forbidden":
+		lower == "forbidden",
+		strings.Contains(lower, "forbidden the request"):
 		return "AI provider forbidden the request"
-	case strings.Contains(lower, "http 429"),
-		strings.Contains(lower, "too many requests"),
-		lower == "rate limited":
-		return "AI provider rate limited — retry later"
 	case lower == "rate limited or server error":
 		return "AI provider temporarily unavailable (rate limited or server error)"
+	case strings.Contains(lower, "http 429"),
+		strings.Contains(lower, "too many requests"),
+		lower == "rate limited",
+		strings.Contains(lower, "rate limited —"),
+		strings.Contains(lower, "rate limited -"):
+		return "AI provider rate limited — retry later"
+	case strings.Contains(lower, "quota exceeded"):
+		return "OpenAI quota exceeded — check billing"
+	case strings.Contains(lower, "model not found"),
+		strings.Contains(lower, "lacks access"):
+		return "model not found or API key lacks access — check model name and project permissions"
 	}
 	return ""
 }