@cat-factory/app 0.149.0 → 0.150.1

package/app/composables/usePipelineErrorToast.ts

@@ -186,200 +186,231 @@ export function parseConflict(
   }
 }
 
+/** The non-null parsed shape of a backend conflict, as returned by {@link parseConflict}. */
+type ParsedConflict = NonNullable<ReturnType<typeof parseConflict>>
+
 export function usePipelineErrorToast() {
   const toast = useToast()
   const ui = useUiStore()
   const { t, te } = useI18n()
 
-  /**
-   * Present `error` as a toast. `fallbackTitleKey` is an i18n message key used for
-   * non-conflict failures and any conflict reason without a dedicated title.
-   */
-  function present(error: unknown, fallbackTitleKey = 'common.actionFailed'): void {
-    const conflict = parseConflict(error)
+  // The headline case: a pipeline step's model has no usable provider. Name the
+  // offending model(s), explain no provider is available, and offer the one-click jump
+  // to the AI setup — the same remedy the startup "No AI model configured" banner gives.
+  function presentProvidersUnconfigured(conflict: ParsedConflict): void {
+    const models = Array.isArray(conflict.details.models) ? conflict.details.models : []
+    const list = models.join(', ')
+    toast.add({
+      title: t('errors.conflict.providersUnconfigured.title'),
+      description: list
+        ? t('errors.conflict.providersUnconfigured.body', { models: list })
+        : (conflict.message ?? t('errors.conflict.fallbackMessage')),
+      color: 'error',
+      icon: 'i-lucide-cpu',
+      // Stay until dismissed: an actionable toast whose remedy button vanishes on the ~5s
+      // auto-dismiss takes the one-click fix with it before the user can reach it.
+      duration: 0,
+      actions: [
+        {
+          label: t('errors.conflict.providersUnconfigured.action'),
+          icon: 'i-lucide-settings',
+          onClick: () => ui.openAiProviderSetup(),
+        },
+      ],
+    })
+  }
 
-    // The headline case: a pipeline step's model has no usable provider. Name the
-    // offending model(s), explain no provider is available, and offer the one-click jump
-    // to the AI setup — the same remedy the startup "No AI model configured" banner gives.
-    if (conflict?.reason === 'providers_unconfigured') {
-      const models = Array.isArray(conflict.details.models) ? conflict.details.models : []
-      const list = models.join(', ')
-      toast.add({
-        title: t('errors.conflict.providersUnconfigured.title'),
-        description: list
-          ? t('errors.conflict.providersUnconfigured.body', { models: list })
-          : (conflict.message ?? t('errors.conflict.fallbackMessage')),
-        color: 'error',
-        icon: 'i-lucide-cpu',
-        // Stay until dismissed: an actionable toast whose remedy button vanishes on the ~5s
-        // auto-dismiss takes the one-click fix with it before the user can reach it.
-        duration: 0,
-        actions: [
-          {
-            label: t('errors.conflict.providersUnconfigured.action'),
-            icon: 'i-lucide-settings',
-            onClick: () => ui.openAiProviderSetup(),
-          },
-        ],
-      })
-      return
-    }
+  // A pipeline step relies on binary-artifact storage (the UI Tester uploads screenshots)
+  // but the account has none configured. Explain it and offer the jump to the content-storage
+  // settings — the same shape as the providers-unconfigured case above. Prefer the localized
+  // body (it carries no runtime interpolation) so non-English users see translated copy; the
+  // raw backend prose is only the last-resort fallback when the locale lacks the key.
+  function presentBinaryStorageUnconfigured(conflict: ParsedConflict): void {
+    toast.add({
+      title: t('errors.conflict.binaryStorageUnconfigured.title'),
+      description: te('errors.conflict.binaryStorageUnconfigured.body')
+        ? t('errors.conflict.binaryStorageUnconfigured.body')
+        : (conflict.message ?? t('errors.conflict.fallbackMessage')),
+      color: 'error',
+      icon: 'i-lucide-image',
+      // Sticky, like the providers-unconfigured toast above: keep the "Configure storage"
+      // remedy reachable instead of letting it auto-dismiss.
+      duration: 0,
+      actions: [
+        {
+          label: t('errors.conflict.binaryStorageUnconfigured.action'),
+          icon: 'i-lucide-settings',
+          onClick: () => ui.openContentStorageSettings(),
+        },
+      ],
+    })
+  }
 
-    // A pipeline step relies on binary-artifact storage (the UI Tester uploads screenshots)
-    // but the account has none configured. Explain it and offer the jump to the content-storage
-    // settings — the same shape as the providers-unconfigured case above. Prefer the localized
-    // body (it carries no runtime interpolation) so non-English users see translated copy; the
-    // raw backend prose is only the last-resort fallback when the locale lacks the key.
-    if (conflict?.reason === 'binary_storage_unconfigured') {
-      toast.add({
-        title: t('errors.conflict.binaryStorageUnconfigured.title'),
-        description: te('errors.conflict.binaryStorageUnconfigured.body')
-          ? t('errors.conflict.binaryStorageUnconfigured.body')
-          : (conflict.message ?? t('errors.conflict.fallbackMessage')),
-        color: 'error',
-        icon: 'i-lucide-image',
-        // Sticky, like the providers-unconfigured toast above: keep the "Configure storage"
-        // remedy reachable instead of letting it auto-dismiss.
-        duration: 0,
-        actions: [
-          {
-            label: t('errors.conflict.binaryStorageUnconfigured.action'),
-            icon: 'i-lucide-settings',
-            onClick: () => ui.openContentStorageSettings(),
+  // A pipeline includes a Deployer, but the SERVICE's ephemeral-environment config (the in-repo
+  // "what/where") is incomplete for its declared type. Steer the user straight to THAT service's
+  // environment config — the compose wizard for docker-compose, the service inspector otherwise —
+  // falling back to the workspace infrastructure window if the frame id wasn't carried.
+  function presentDeployerServiceConfig(conflict: ParsedConflict): void {
+    const frameId =
+      typeof conflict.details.frameId === 'string' ? conflict.details.frameId : undefined
+    const provisionType =
+      typeof conflict.details.provisionType === 'string'
+        ? conflict.details.provisionType
+        : undefined
+    const missing = Array.isArray(conflict.details.missing)
+      ? conflict.details.missing.join(', ')
+      : ''
+    toast.add({
+      title: t('errors.conflict.deployerServiceConfig.title'),
+      description: missing
+        ? t('errors.conflict.deployerServiceConfig.body', { missing })
+        : (conflict.message ?? t('errors.conflict.fallbackMessage')),
+      color: 'error',
+      icon: 'i-lucide-server',
+      // Sticky, like the other actionable conflicts: keep the "Fix configuration" jump reachable.
+      duration: 0,
+      actions: [
+        {
+          label: t('errors.conflict.deployerServiceConfig.action'),
+          icon: 'i-lucide-settings',
+          onClick: () => {
+            if (frameId && provisionType === 'docker-compose') ui.openEnvironmentSetup(frameId)
+            else if (frameId) ui.select(frameId)
+            else ui.openProviderConnection('environment')
           },
-        ],
-      })
-      return
-    }
+        },
+      ],
+    })
+  }
 
-    // A pipeline includes a Deployer, but the SERVICE's ephemeral-environment config (the in-repo
-    // "what/where") is incomplete for its declared type. Steer the user straight to THAT service's
-    // environment config — the compose wizard for docker-compose, the service inspector otherwise —
-    // falling back to the workspace infrastructure window if the frame id wasn't carried.
-    if (conflict?.reason === 'deployer_service_provisioning_incomplete') {
-      const frameId =
-        typeof conflict.details.frameId === 'string' ? conflict.details.frameId : undefined
-      const provisionType =
-        typeof conflict.details.provisionType === 'string'
-          ? conflict.details.provisionType
-          : undefined
-      const missing = Array.isArray(conflict.details.missing)
-        ? conflict.details.missing.join(', ')
-        : ''
-      toast.add({
-        title: t('errors.conflict.deployerServiceConfig.title'),
-        description: missing
-          ? t('errors.conflict.deployerServiceConfig.body', { missing })
-          : (conflict.message ?? t('errors.conflict.fallbackMessage')),
-        color: 'error',
-        icon: 'i-lucide-server',
-        // Sticky, like the other actionable conflicts: keep the "Fix configuration" jump reachable.
-        duration: 0,
-        actions: [
-          {
-            label: t('errors.conflict.deployerServiceConfig.action'),
-            icon: 'i-lucide-settings',
-            onClick: () => {
-              if (frameId && provisionType === 'docker-compose') ui.openEnvironmentSetup(frameId)
-              else if (frameId) ui.select(frameId)
-              else ui.openProviderConnection('environment')
-            },
-          },
-        ],
-      })
-      return
-    }
+  // A pipeline includes a Deployer and the service config is sound, but no WORKSPACE handler
+  // resolves for the service's provision type (missing or ambiguous). Steer to the Infrastructure
+  // window's Test-environments tab. (Also raised by the Tester start gate — same fix applies.)
+  function presentProvisionTypeUnhandled(conflict: ParsedConflict): void {
+    const type =
+      typeof conflict.details.provisionType === 'string' ? conflict.details.provisionType : ''
+    toast.add({
+      title: t('errors.conflict.provisionTypeUnhandled.title'),
+      description: type
+        ? t('errors.conflict.provisionTypeUnhandled.body', { type })
+        : (conflict.message ?? t('errors.conflict.fallbackMessage')),
+      color: 'error',
+      icon: 'i-lucide-server-cog',
+      duration: 0,
+      actions: [
+        {
+          label: t('errors.conflict.provisionTypeUnhandled.action'),
+          icon: 'i-lucide-settings',
+          onClick: () => ui.openProviderConnection('environment'),
+        },
+      ],
+    })
+  }
 
-    // A pipeline includes a Deployer and the service config is sound, but no WORKSPACE handler
-    // resolves for the service's provision type (missing or ambiguous). Steer to the Infrastructure
-    // window's Test-environments tab. (Also raised by the Tester start gate — same fix applies.)
-    if (conflict?.reason === 'provision_type_unhandled') {
-      const type =
-        typeof conflict.details.provisionType === 'string' ? conflict.details.provisionType : ''
-      toast.add({
-        title: t('errors.conflict.provisionTypeUnhandled.title'),
-        description: type
-          ? t('errors.conflict.provisionTypeUnhandled.body', { type })
-          : (conflict.message ?? t('errors.conflict.fallbackMessage')),
-        color: 'error',
-        icon: 'i-lucide-server-cog',
-        duration: 0,
-        actions: [
-          {
-            label: t('errors.conflict.provisionTypeUnhandled.action'),
-            icon: 'i-lucide-settings',
-            onClick: () => ui.openProviderConnection('environment'),
-          },
-        ],
-      })
-      return
+  // A pipeline includes a Deployer, the config is structurally complete, but the live connection
+  // probe of the resolved deployment integration failed (unreachable endpoint / apiserver, bad
+  // token). Surface the provider's failure detail and steer to the handler to fix + re-test it.
+  function presentDeployerConnectionFailed(conflict: ParsedConflict): void {
+    const detail = typeof conflict.details.detail === 'string' ? conflict.details.detail : undefined
+    toast.add({
+      title: t('errors.conflict.deployerConnectionFailed.title'),
+      description: detail
+        ? t('errors.conflict.deployerConnectionFailed.body', { detail })
+        : (conflict.message ?? t('errors.conflict.fallbackMessage')),
+      color: 'error',
+      icon: 'i-lucide-plug',
+      duration: 0,
+      actions: [
+        {
+          label: t('errors.conflict.deployerConnectionFailed.action'),
+          icon: 'i-lucide-settings',
+          onClick: () => ui.openProviderConnection('environment'),
+        },
+      ],
+    })
+  }
+
+  /**
+   * Dispatch the bespoke conflict reasons (a runtime-interpolated body + a "configure X" action,
+   * each with its own key namespace — the ones excluded from `CONFLICT_INFO`). Returns `true` when
+   * the reason was one of them (and the toast was raised), `false` to fall through to the generic
+   * map. The reason values are mutually exclusive, so dispatch order is irrelevant.
+   */
+  function presentBespokeConflict(conflict: ParsedConflict): boolean {
+    switch (conflict.reason) {
+      case 'providers_unconfigured':
+        presentProvidersUnconfigured(conflict)
+        return true
+      case 'binary_storage_unconfigured':
+        presentBinaryStorageUnconfigured(conflict)
+        return true
+      case 'deployer_service_provisioning_incomplete':
+        presentDeployerServiceConfig(conflict)
+        return true
+      case 'provision_type_unhandled':
+        presentProvisionTypeUnhandled(conflict)
+        return true
+      case 'deployer_connection_test_failed':
+        presentDeployerConnectionFailed(conflict)
+        return true
+      default:
+        return false
     }
+  }
 
-    // A pipeline includes a Deployer, the config is structurally complete, but the live connection
-    // probe of the resolved deployment integration failed (unreachable endpoint / apiserver, bad
-    // token). Surface the provider's failure detail and steer to the handler to fix + re-test it.
-    if (conflict?.reason === 'deployer_connection_test_failed') {
-      const detail =
-        typeof conflict.details.detail === 'string' ? conflict.details.detail : undefined
+  /**
+   * Per-reason copy from the exhaustive map: a translated title + description, and a jump
+   * action for the reasons a UI panel can fix. `te` (translation-exists) guards every lookup,
+   * so a key missing from the active locale falls back rather than leaking a raw key: the
+   * title falls to the caller's key, the description to the raw backend `message`. An unknown
+   * reason (not in the map) gets the same generic title + raw-message fallback.
+   */
+  function presentMappedConflict(conflict: ParsedConflict, fallbackTitleKey: string): void {
+    const info = conflict.reason
+      ? CONFLICT_INFO[conflict.reason as Exclude<ConflictReason, BespokeConflictReason>]
+      : undefined
+    if (info) {
       toast.add({
-        title: t('errors.conflict.deployerConnectionFailed.title'),
-        description: detail
-          ? t('errors.conflict.deployerConnectionFailed.body', { detail })
+        title: te(info.titleKey) ? t(info.titleKey) : t(fallbackTitleKey),
+        description: te(info.descriptionKey)
+          ? t(info.descriptionKey)
           : (conflict.message ?? t('errors.conflict.fallbackMessage')),
-        color: 'error',
-        icon: 'i-lucide-plug',
-        duration: 0,
-        actions: [
-          {
-            label: t('errors.conflict.deployerConnectionFailed.action'),
-            icon: 'i-lucide-settings',
-            onClick: () => ui.openProviderConnection('environment'),
-          },
-        ],
+        color: 'warning',
+        icon: 'i-lucide-triangle-alert',
+        // A reason with a jump action becomes an actionable, sticky toast (like the bespoke
+        // conflicts above) so the one-click remedy doesn't auto-dismiss before it's reached.
+        ...(info.action
+          ? {
+              duration: 0,
+              actions: [
+                {
+                  label: t(info.action.labelKey),
+                  icon: info.action.icon,
+                  onClick: () => info.action?.run(ui),
+                },
+              ],
+            }
+          : {}),
       })
       return
     }
+    toast.add({
+      title: t(fallbackTitleKey),
+      description: conflict.message ?? t('errors.conflict.fallbackMessage'),
+      color: 'warning',
+      icon: 'i-lucide-triangle-alert',
+    })
+  }
 
+  /**
+   * Present `error` as a toast. `fallbackTitleKey` is an i18n message key used for
+   * non-conflict failures and any conflict reason without a dedicated title.
+   */
+  function present(error: unknown, fallbackTitleKey = 'common.actionFailed'): void {
+    const conflict = parseConflict(error)
     if (conflict) {
-      // Per-reason copy from the exhaustive map: a translated title + description, and a jump
-      // action for the reasons a UI panel can fix. `te` (translation-exists) guards every lookup,
-      // so a key missing from the active locale falls back rather than leaking a raw key: the
-      // title falls to the caller's key, the description to the raw backend `message`. An unknown
-      // reason (not in the map) gets the same generic title + raw-message fallback.
-      const info = conflict.reason
-        ? CONFLICT_INFO[conflict.reason as Exclude<ConflictReason, BespokeConflictReason>]
-        : undefined
-      if (info) {
-        toast.add({
-          title: te(info.titleKey) ? t(info.titleKey) : t(fallbackTitleKey),
-          description: te(info.descriptionKey)
-            ? t(info.descriptionKey)
-            : (conflict.message ?? t('errors.conflict.fallbackMessage')),
-          color: 'warning',
-          icon: 'i-lucide-triangle-alert',
-          // A reason with a jump action becomes an actionable, sticky toast (like the bespoke
-          // conflicts above) so the one-click remedy doesn't auto-dismiss before it's reached.
-          ...(info.action
-            ? {
-                duration: 0,
-                actions: [
-                  {
-                    label: t(info.action.labelKey),
-                    icon: info.action.icon,
-                    onClick: () => info.action?.run(ui),
-                  },
-                ],
-              }
-            : {}),
-        })
-        return
-      }
-      toast.add({
-        title: t(fallbackTitleKey),
-        description: conflict.message ?? t('errors.conflict.fallbackMessage'),
-        color: 'warning',
-        icon: 'i-lucide-triangle-alert',
-      })
+      if (presentBespokeConflict(conflict)) return
+      presentMappedConflict(conflict, fallbackTitleKey)
       return
     }
 

package/app/stores/apiKeys.ts

@@ -1,6 +1,6 @@
 import { defineStore } from 'pinia'
 import { computed, ref } from 'vue'
-import type { AddApiKeyInput, ApiKey, ApiKeyProvider } from '~/types/domain'
+import type { AddApiKeyInput, ApiKey, ApiKeyProvider, UpdateApiKeyInput } from '~/types/domain'
 
 /**
  * The direct-provider API keys reachable from a workspace: the workspace's own keys
@@ -48,12 +48,30 @@ export const useApiKeysStore = defineStore('apiKeys', () => {
     workspaceKeys.value = workspaceKeys.value.filter((k) => k.id !== id)
   }
 
+  // Pinning a default clears any prior default of the same scope+provider server-side, so a
+  // default change reloads the affected scope to reflect the single-default invariant; a plain
+  // enable/disable patches the one row in place.
+  async function updateWorkspaceKey(id: string, patch: UpdateApiKeyInput) {
+    if (!workspaceId.value) return
+    const updated = await api.updateWorkspaceApiKey(workspaceId.value, id, patch)
+    if (patch.isDefault !== undefined) await load(workspaceId.value)
+    else workspaceKeys.value = workspaceKeys.value.map((k) => (k.id === id ? updated : k))
+    return updated
+  }
+
   async function addUserKey(input: AddApiKeyInput) {
     const created = await api.addMyApiKey(input)
     userKeys.value = [...userKeys.value, created]
     return created
   }
 
+  async function updateUserKey(id: string, patch: UpdateApiKeyInput) {
+    const updated = await api.updateMyApiKey(id, patch)
+    if (patch.isDefault !== undefined && workspaceId.value) await load(workspaceId.value)
+    else userKeys.value = userKeys.value.map((k) => (k.id === id ? updated : k))
+    return updated
+  }
+
   async function removeUserKey(id: string) {
     await api.removeMyApiKey(id)
     userKeys.value = userKeys.value.filter((k) => k.id !== id)
@@ -72,6 +90,14 @@ export const useApiKeysStore = defineStore('apiKeys', () => {
     accountKeys.value = [...accountKeys.value, created]
   }
 
+  async function updateAccountKey(id: string, patch: UpdateApiKeyInput) {
+    if (!accountId.value) return
+    const updated = await api.updateAccountApiKey(accountId.value, id, patch)
+    if (patch.isDefault !== undefined) await loadAccountKeys(accountId.value)
+    else accountKeys.value = accountKeys.value.map((k) => (k.id === id ? updated : k))
+    return updated
+  }
+
   async function removeAccountKey(id: string) {
     if (!accountId.value) return
     await api.removeAccountApiKey(accountId.value, id)
@@ -98,11 +124,14 @@ export const useApiKeysStore = defineStore('apiKeys', () => {
     loading,
     load,
     addWorkspaceKey,
+    updateWorkspaceKey,
     removeWorkspaceKey,
     addUserKey,
+    updateUserKey,
     removeUserKey,
     loadAccountKeys,
     addAccountKey,
+    updateAccountKey,
     removeAccountKey,
     configuredProviders,
     hasProvider,

package/app/stores/vendorCredentials.ts

@@ -1,6 +1,10 @@
 import { defineStore } from 'pinia'
 import { computed, ref } from 'vue'
-import type { SubscriptionVendor, VendorCredential } from '~/types/domain'
+import type {
+  SubscriptionVendor,
+  UpdateVendorCredentialInput,
+  VendorCredential,
+} from '~/types/domain'
 
 /**
  * The workspace's connected LLM-vendor subscription credentials (the token pool
@@ -33,6 +37,22 @@ export const useVendorCredentialsStore = defineStore('vendorCredentials', () =>
     credentials.value = [...credentials.value, created]
   }
 
+  /**
+   * Enable/disable and/or (un)pin a token as its vendor's default. Because pinning a
+   * default clears any prior default of the same vendor server-side, we reload the pool so
+   * the whole vendor group reflects the single-default invariant rather than patching one row.
+   */
+  async function update(id: string, patch: UpdateVendorCredentialInput) {
+    if (!workspaceId.value) return
+    const updated = await api.updateVendorCredential(workspaceId.value, id, patch)
+    if (patch.isDefault !== undefined) {
+      await load(workspaceId.value)
+    } else {
+      credentials.value = credentials.value.map((c) => (c.id === id ? updated : c))
+    }
+    return updated
+  }
+
   async function remove(id: string) {
     if (!workspaceId.value) return
     await api.removeVendorCredential(workspaceId.value, id)
@@ -50,5 +70,15 @@ export const useVendorCredentialsStore = defineStore('vendorCredentials', () =>
     return credentials.value.filter((c) => c.vendor === vendor)
   }
 
-  return { credentials, loading, load, add, remove, configuredVendors, hasVendor, forVendor }
+  return {
+    credentials,
+    loading,
+    load,
+    add,
+    update,
+    remove,
+    configuredVendors,
+    hasVendor,
+    forVendor,
+  }
 })

package/app/types/models.ts

@@ -15,6 +15,8 @@ export type {
   ApiKeyProvider,
   ApiKey,
   AddApiKeyInput,
+  UpdateApiKeyInput,
   VendorCredential,
+  UpdateVendorCredentialInput,
   PromptFragment,
 } from '@cat-factory/contracts'

package/i18n/locales/de.json

@@ -2452,7 +2452,8 @@
       "toast": {
         "connected": "API-Schlüssel verbunden",
         "connectFailed": "Schlüssel konnte nicht verbunden werden",
-        "removeFailed": "Schlüssel konnte nicht entfernt werden"
+        "removeFailed": "Schlüssel konnte nicht entfernt werden",
+        "updateFailed": "Schlüssel konnte nicht aktualisiert werden"
       },
       "providers": {
         "openai": {
@@ -2491,7 +2492,11 @@
           "step2": "Die Basis-URL des Gateways wird von Ihrem Deployment-Betreiber festgelegt (LITELLM_BASE_URL), nicht hier."
         }
       },
-      "keyNoun": "diesen API-Schlüssel"
+      "keyNoun": "diesen API-Schlüssel",
+      "defaultBadge": "Standard",
+      "pinDefault": "Als Standard festlegen",
+      "disabledBadge": "Deaktiviert",
+      "enableToggle": "Diesen Schlüssel aktivieren oder deaktivieren"
     },
     "vendorCredentials": {
       "title": "LLM-Vendors",
@@ -2514,7 +2519,8 @@
       "toast": {
         "connected": "Token verbunden",
         "connectFailed": "Token konnte nicht verbunden werden",
-        "removeFailed": "Token konnte nicht entfernt werden"
+        "removeFailed": "Token konnte nicht entfernt werden",
+        "updateFailed": "Token konnte nicht aktualisiert werden"
       },
       "vendors": {
         "kimi": {
@@ -2533,7 +2539,11 @@
       "confirmRemove": {
         "title": "Diese Zugangsdaten entfernen?",
         "body": "\"{name}\" wird entfernt. Dies kann nicht rückgängig gemacht werden."
-      }
+      },
+      "defaultBadge": "Standard",
+      "pinDefault": "Als Standard festlegen",
+      "disabledBadge": "Deaktiviert",
+      "enableToggle": "Dieses Token aktivieren oder deaktivieren"
     }
   },
   "github": {

package/i18n/locales/en.json

@@ -2979,7 +2979,8 @@
       "toast": {
         "connected": "API key connected",
         "connectFailed": "Could not connect key",
-        "removeFailed": "Could not remove key"
+        "removeFailed": "Could not remove key",
+        "updateFailed": "Could not update key"
       },
       "providers": {
         "openai": {
@@ -3018,7 +3019,11 @@
           "step2": "The gateway's base URL is set by your deployment operator (LITELLM_BASE_URL), not here."
         }
       },
-      "keyNoun": "this API key"
+      "keyNoun": "this API key",
+      "defaultBadge": "Default",
+      "pinDefault": "Set as default",
+      "disabledBadge": "Disabled",
+      "enableToggle": "Enable or disable this key"
     },
     "vendorCredentials": {
       "title": "LLM Vendors",
@@ -3044,7 +3049,8 @@
       "toast": {
         "connected": "Token connected",
         "connectFailed": "Could not connect token",
-        "removeFailed": "Could not remove token"
+        "removeFailed": "Could not remove token",
+        "updateFailed": "Could not update token"
       },
       "vendors": {
         "kimi": {
@@ -3063,7 +3069,11 @@
       "confirmRemove": {
         "title": "Remove this credential?",
         "body": "\"{name}\" will be removed. This can't be undone."
-      }
+      },
+      "defaultBadge": "Default",
+      "pinDefault": "Set as default",
+      "disabledBadge": "Disabled",
+      "enableToggle": "Enable or disable this token"
     }
   },
   "github": {