hermes doctor and the dashboard GEMINI_API_KEY validator still sent AQ. express keys to generativelanguage.googleapis.com, which always 403s, so a working key was reported as rejected while chat succeeded. Both probe URLs now go through normalize_gemini_base_url(base, api_key), the same routing the chat client uses.