dsh-qoder-connect 0.2.5 → 0.2.7

package/lib/client.js

@@ -1358,6 +1358,65 @@ window.__ModuleLoader__.load({
 			fontSize: 13,
 			lineHeight: 1.5
 		};
+		/** The saved-PAT select: same field skin, sized so the toolbar stays one row. */
+		const patSelectStyle = {
+			boxSizing: "border-box",
+			flex: "0 1 180px",
+			maxWidth: 180,
+			minWidth: 110,
+			padding: "6px 10px",
+			borderWidth: "1px",
+			borderStyle: "solid",
+			borderColor: "var(--dsw-alias-border-l2)",
+			borderRadius: 8,
+			background: "var(--dsw-alias-bg-layer-2)",
+			color: "var(--dsw-alias-label-primary)",
+			font: "inherit",
+			fontSize: 13,
+			lineHeight: 1.5
+		};
+		/**
+		* One account toolbar: the active-account select and its actions share a
+		* single row, so a signed-in card no longer stacks a status line, a select
+		* line and an action line on top of each other.
+		*
+		* The account's identity is the select itself; a separate "Account / Signed
+		* in" heading above it only repeated what the select already says, so the
+		* heading is gone. The non-signed-in states keep a status row, because there
+		* the status *is* the information.
+		*/
+		const accountToolbarStyle = {
+			display: "flex",
+			alignItems: "center",
+			gap: 6,
+			flexWrap: "wrap",
+			paddingTop: 6
+		};
+		/** Provenance line under the toolbar; its refresh action sits at the far end. */
+		const accountMetaRowStyle = {
+			display: "flex",
+			alignItems: "center",
+			gap: 8,
+			flexWrap: "wrap",
+			marginTop: 8
+		};
+		const accountStatusRowStyle = {
+			display: "flex",
+			alignItems: "center",
+			gap: 12,
+			flexWrap: "wrap",
+			paddingTop: 6
+		};
+		/** Inline field label; the select carries the value, so this stays quiet. */
+		const accountFieldLabelStyle = {
+			display: "flex",
+			alignItems: "center",
+			gap: 6,
+			fontSize: 13,
+			lineHeight: 1.5,
+			color: "var(--dsw-alias-label-tertiary)",
+			whiteSpace: "nowrap"
+		};
 		/**
 		* Tab strip for the card body. Kept visually light — a full pill would compete
 		* with the section headings, and the card is already the densest surface the
@@ -2020,8 +2079,12 @@ window.__ModuleLoader__.load({
 			const [headerFocused, setHeaderFocused] = (0, react.useState)(false);
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [patDraft, setPatDraft] = (0, react.useState)("");
+			/** Optional display label for the token being added; local only. */
+			const [patLabelDraft, setPatLabelDraft] = (0, react.useState)("");
 			const [replacing, setReplacing] = (0, react.useState)(false);
 			const [patBusy, setPatBusy] = (0, react.useState)(false);
+			/** Which PAT write is in flight, so each control shows its own progress copy. */
+			const [patAction, setPatAction] = (0, react.useState)();
 			const [patError, setPatError] = (0, react.useState)();
 			const [patNotice, setPatNotice] = (0, react.useState)();
 			const patInput = (0, react.useRef)(null);
@@ -2066,6 +2129,8 @@ window.__ModuleLoader__.load({
 			} : sharedDocument;
 			const signedInState = status?.status === "signed-in" ? true : status?.status === "signed-out" ? false : void 0;
 			const authKey = status === void 0 || status.status === "error" ? void 0 : status.authKey;
+			/** The saved-token list for the select; an env-only sign-in has none. */
+			const savedPats = status?.status === "signed-in" ? status.patProfiles ?? [] : [];
 			/**
 			* Force one shared read of the shown variant.
 			*
@@ -2114,41 +2179,43 @@ window.__ModuleLoader__.load({
 				}
 			};
 			/**
-			* Ask the host to re-read the credential and re-fetch this variant's catalog.
+			* One refresh for the signed-in account block.
 			*
-			* Shares the probe route's key and guards: it is a write that spends an
-			* upstream request, so it does not belong on the read-only status GET. A
-			* failure is surfaced through the refreshed document's `catalog.error` rather
-			* than thrown away, so the reason survives the round trip.
+			* There used to be two buttons: "refresh" re-read the status document
+			* (quota, provenance) and "refresh model list" re-fetched the upstream
+			* catalog and then re-read the status anyway. The second is a superset of
+			* the first, so the card now offers one action: re-fetch the catalog when a
+			* probe key exists, and always re-read the status — even when the catalog
+			* call fails, because the quota answer must not be held hostage by the
+			* model-list endpoint.
 			*/
-			const refreshModels = (0, react.useCallback)(async () => {
+			const refreshAll = (0, react.useCallback)(async () => {
 				const key = status?.status === "signed-in" ? status.probeKey : void 0;
-				if (key === void 0) return;
 				setBusy(true);
 				const controller = trackController();
 				try {
-					const response = await fetch(currentVariant.probePath, {
-						method: "POST",
-						headers: {
-							"Content-Type": "application/json",
-							"X-Qoder-Probe-Key": key
-						},
-						credentials: "same-origin",
-						signal: controller.signal,
-						body: JSON.stringify({ action: "refresh" })
-					});
-					if (!response.ok) throw new Error(`HTTP ${response.status}`);
+					if (key !== void 0) {
+						const response = await fetch(currentVariant.probePath, {
+							method: "POST",
+							headers: {
+								"Content-Type": "application/json",
+								"X-Qoder-Probe-Key": key
+							},
+							credentials: "same-origin",
+							signal: controller.signal,
+							body: JSON.stringify({ action: "refresh" })
+						});
+						if (!response.ok) throw new Error(`HTTP ${response.status}`);
+					}
 				} catch (error) {
 					if (mounted.current && controller.signal.aborted !== true) setWriteFailure(error instanceof Error ? error.message : t("requestFailed"));
-					manualControllers.current.delete(controller);
-					return;
-				} finally {
-					if (mounted.current) setBusy(false);
-				}
-				try {
-					await refresh();
 				} finally {
-					manualControllers.current.delete(controller);
+					try {
+						await refresh();
+					} finally {
+						manualControllers.current.delete(controller);
+						if (mounted.current) setBusy(false);
+					}
 				}
 			}, [
 				currentVariant.probePath,
@@ -2282,18 +2349,19 @@ window.__ModuleLoader__.load({
 				trackController
 			]);
 			/**
-			* Validate and store the pasted PAT (or overwrite the stored one).
+			* Validate and store the pasted PAT, then make it the active account.
 			*
-			* The PAT route answers both outcomes as 200 with `ok` carrying the verdict —
-			* a refused token is an answer, not a transport failure — so the card checks
-			* `ok` and translates the stable `qoder_invalid_pat` / `qoder_missing_pat`
-			* codes into the re-generate prompt. The route is variant-fixed: the token
-			* this card saves can only ever be validated and stored for this product.
+			* Saving is additive: an already-saved token updates its own entry (the id
+			* is derived from the token), a new one is appended and activated, and the
+			* previous tokens remain selectable. Only a token that passed validation is
+			* written, so a mistyped paste can never strand the working credential.
 			*/
 			const savePat = (0, react.useCallback)(async () => {
 				const key = authKey;
 				const pat = patDraft.trim();
+				const label = patLabelDraft.trim();
 				if (key === void 0 || pat === "" || patBusy) return;
+				setPatAction("save");
 				setPatBusy(true);
 				setPatError(void 0);
 				setPatNotice(void 0);
@@ -2309,7 +2377,8 @@ window.__ModuleLoader__.load({
 						signal: controller.signal,
 						body: JSON.stringify({
 							action: "save-pat",
-							pat
+							pat,
+							...label === "" ? {} : { label }
 						})
 					});
 					const value = await response.json().catch(() => void 0);
@@ -2324,6 +2393,7 @@ window.__ModuleLoader__.load({
 						return;
 					}
 					setPatDraft("");
+					setPatLabelDraft("");
 					setReplacing(false);
 					setPatNotice(t("patSaved"));
 					noteQuotaSignIn(currentVariant.id, true);
@@ -2332,25 +2402,36 @@ window.__ModuleLoader__.load({
 					if (mounted.current && controller.signal.aborted !== true) setPatError(t("patSaveFailed", { message: error instanceof Error ? error.message : t("requestFailed") }));
 				} finally {
 					manualControllers.current.delete(controller);
-					if (mounted.current) setPatBusy(false);
+					if (mounted.current) {
+						setPatBusy(false);
+						setPatAction(void 0);
+					}
 				}
 			}, [
 				authKey,
 				currentVariant.authPath,
 				patBusy,
 				patDraft,
+				patLabelDraft,
 				refresh,
 				t,
 				trackController
 			]);
-			/** Remove the stored PAT; the host answer is `{ ok: true }`, then the card re-reads. */
-			const clearPat = (0, react.useCallback)(async () => {
+			/**
+			* One authenticated write against this variant's PAT route.
+			*
+			* `activate`, `remove`, and `clear` answer the same `{ok, status}` shape a
+			* save does; one helper keeps the guards, the stable-error handling, and the
+			* post-write re-read together, so a switch cannot update one surface and
+			* leave another showing the previous account.
+			*/
+			const patWrite = (0, react.useCallback)(async (body, failure, action) => {
 				const key = authKey;
-				if (key === void 0 || patBusy) return;
+				if (key === void 0 || patBusy) return false;
+				setPatAction(action);
 				setPatBusy(true);
 				setPatError(void 0);
 				setPatNotice(void 0);
-				setReplacing(false);
 				const controller = trackController();
 				try {
 					const response = await fetch(currentVariant.authPath, {
@@ -2361,44 +2442,80 @@ window.__ModuleLoader__.load({
 						},
 						credentials: "same-origin",
 						signal: controller.signal,
-						body: JSON.stringify({ action: "clear" })
+						body: JSON.stringify(body)
 					});
 					const value = await response.json().catch(() => void 0);
 					const record = typeof value === "object" && value !== null ? value : {};
 					if (!response.ok || record["ok"] !== true) {
 						const detail = typeof record["error"] === "string" ? record["error"] : `HTTP ${response.status}`;
-						setPatError(t("patSaveFailed", { message: detail }));
-						return;
+						setPatError(failure(detail));
+						return false;
 					}
-					setPatDraft("");
-					noteQuotaStatus(currentVariant.id, {
+					const status = record["status"];
+					if (typeof status === "object" && status !== null && status["state"] === "missing") noteQuotaStatus(currentVariant.id, {
 						status: "signed-out",
 						authKey: key
 					});
 					await refresh();
+					return true;
 				} catch (error) {
-					if (mounted.current && controller.signal.aborted !== true) setPatError(t("patSaveFailed", { message: error instanceof Error ? error.message : t("requestFailed") }));
+					if (mounted.current && controller.signal.aborted !== true) setPatError(failure(error instanceof Error ? error.message : t("requestFailed")));
+					return false;
 				} finally {
 					manualControllers.current.delete(controller);
-					if (mounted.current) setPatBusy(false);
+					if (mounted.current) {
+						setPatBusy(false);
+						setPatAction(void 0);
+					}
 				}
 			}, [
 				authKey,
 				currentVariant.authPath,
+				currentVariant.id,
 				patBusy,
 				refresh,
 				t,
 				trackController
 			]);
+			/** Remove every saved PAT; the host answer is `{ ok: true }`, then the card re-reads. */
+			const clearPat = (0, react.useCallback)(async () => {
+				const key = authKey;
+				if (!await patWrite({ action: "clear" }, (message) => t("patSaveFailed", { message }), "clear")) return;
+				setPatDraft("");
+				setReplacing(false);
+				if (key !== void 0) noteQuotaStatus(currentVariant.id, {
+					status: "signed-out",
+					authKey: key
+				});
+			}, [
+				authKey,
+				currentVariant.id,
+				patWrite,
+				t
+			]);
+			/** Make one saved entry active; the model group follows on the refresh. */
+			const switchPat = (0, react.useCallback)(async (id) => {
+				await patWrite({
+					action: "activate",
+					id
+				}, (message) => t("patSwitchFailed", { message }), "switch");
+			}, [patWrite, t]);
+			/** Remove one saved entry; removing the last one signs the variant out. */
+			const removePat = (0, react.useCallback)(async (id) => {
+				await patWrite({
+					action: "remove",
+					id
+				}, (message) => t("patRemoveFailed", { message }), "remove");
+			}, [patWrite, t]);
 			/**
-			* 更换 PAT: open the entry over the signed-in document, pre-cleared and
-			* focused. Unlike the removed device-flow switch this needs no sign-out
-			* first — saving validates the new token and overwrites the stored one
-			* only on success, so a mistyped paste can never strand the working
-			* credential.
+			* Add PAT: open the entry over the signed-in document, pre-cleared and
+			* focused. The entry stays additive — saving validates the new token and
+			* appends it (and makes it active) only on success — so adding a second
+			* account never risks the working one.
 			*/
-			const beginReplace = (0, react.useCallback)(() => {
+			const beginAddPat = (0, react.useCallback)(() => {
 				setPatDraft("");
+				setPatLabelDraft("");
 				setPatError(void 0);
 				setPatNotice(void 0);
 				setReplacing(true);
@@ -2454,12 +2571,25 @@ window.__ModuleLoader__.load({
 								onClick: () => {
 									setReplacing(false);
 									setPatDraft("");
+									setPatLabelDraft("");
 									setPatError(void 0);
 								},
 								children: t("cancel")
 							}) : null
 						]
 					}),
+					replacing ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+						type: "text",
+						value: patLabelDraft,
+						maxLength: 48,
+						placeholder: t("patLabelPlaceholder"),
+						"aria-label": t("patLabelPlaceholder"),
+						disabled: patBusy,
+						onChange: (event) => {
+							setPatLabelDraft(event.target.value);
+						},
+						style: patInputStyle
+					}) : null,
 					patError === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						style: errorStyle,
 						children: patError
@@ -2473,12 +2603,15 @@ window.__ModuleLoader__.load({
 			const cardTitle = isUnified ? t("unifiedTitle") : t(currentVariant.titleKey);
 			const cardIntro = isUnified ? t("unifiedIntro") : t(currentVariant.introKey);
 			const label = status === void 0 ? t("loading") : status.status === "signed-in" ? t("signedIn") : status.status === "error" ? t("requestFailed") : t("signedOut");
+			/**
+			* The token's provenance line.
+			*
+			* The account itself is named by the toolbar above (the select, or the env
+			* token's tail), so this line keeps only the facts the toolbar does not
+			* carry: where the token came from and when it was saved.
+			*/
 			const patSummaryLine = (pat) => {
-				const parts = [
-					patSourceText(pat.source, t),
-					pat.savedAtMs === void 0 ? null : t("patSavedAt", { time: formatTime(pat.savedAtMs) }),
-					pat.patTail === void 0 ? null : t("patTail", { tail: `****${pat.patTail}` })
-				].filter((part) => part !== null);
+				const parts = [patSourceText(pat.source, t), pat.savedAtMs === void 0 ? null : t("patSavedAt", { time: formatTime(pat.savedAtMs) })].filter((part) => part !== null);
 				return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 					style: bodyStyle,
 					children: parts.join(" · ")
@@ -2573,72 +2706,117 @@ window.__ModuleLoader__.load({
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("variantTabGlobal") })]
 							})]
 						})] }) : null,
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
-							style: quotaTitleStyle,
-							children: t("accountHeading")
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							style: rowStyle,
-							children: [
-								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									style: statusStyle,
-									role: "status",
-									"aria-busy": status === void 0,
-									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										"aria-hidden": "true",
-										style: dotStyle(status === void 0 ? "loading" : status.status)
-									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label })]
-								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-									type: "button",
-									style: buttonStyle$1,
-									disabled: busy,
-									onClick: () => {
-										manualRefresh();
-									},
-									children: busy ? t("refreshing") : t("refresh")
-								}),
-								status?.status !== "signed-in" || status.authKey === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-									type: "button",
-									style: buttonStyle$1,
-									disabled: busy || patBusy,
-									onClick: beginReplace,
-									children: t("patReplace")
-								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-									type: "button",
-									style: buttonStyle$1,
-									disabled: busy || patBusy,
-									onClick: () => {
-										clearPat();
-									},
-									children: patBusy ? t("patClearing") : t("patClear")
-								})] })
-							]
-						}),
+						status?.status !== "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: accountStatusRowStyle,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: statusStyle,
+								role: "status",
+								"aria-busy": status === void 0,
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									"aria-hidden": "true",
+									style: dotStyle(status === void 0 ? "loading" : status.status)
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label })]
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								style: {
+									...buttonStyle$1,
+									marginLeft: "auto"
+								},
+								disabled: busy,
+								onClick: () => {
+									manualRefresh();
+								},
+								children: busy ? t("refreshing") : t("refresh")
+							})]
+						}) : null,
 						readFailure === void 0 && writeFailure === void 0 || signedInState === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: errorStyle,
 							children: t("statusRefreshFailed", { message: readFailure !== void 0 ? readFailure.kind === "invalid" ? t("statusResponseInvalid") : readFailure.message : writeFailure })
 						}),
 						status?.status === "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
-							status.pat === void 0 ? null : patSummaryLine(status.pat),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: accountToolbarStyle,
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+										style: accountFieldLabelStyle,
+										...savedPats.length > 0 ? { htmlFor: `qoder-pat-select-${currentVariant.id}` } : {},
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											"aria-hidden": "true",
+											style: dotStyle("signed-in")
+										}), t("patAccounts")]
+									}),
+									savedPats.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
+										id: `qoder-pat-select-${currentVariant.id}`,
+										value: status.activePatId ?? "",
+										disabled: busy || patBusy,
+										onChange: (event) => {
+											const id = event.target.value;
+											if (id !== "") switchPat(id);
+										},
+										style: patSelectStyle,
+										children: savedPats.map((profile) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+											value: profile.id,
+											children: profile.label ?? (profile.patTail === void 0 ? profile.id : `****${profile.patTail}`)
+										}, profile.id))
+									}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: bodyStyle,
+										children: status.pat?.patTail === void 0 ? t("signedIn") : `****${status.pat.patTail}`
+									}),
+									status.authKey === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											style: buttonStyle$1,
+											disabled: busy || patBusy,
+											onClick: beginAddPat,
+											children: patBusy && patAction === "save" ? t("patSaving") : t("patAdd")
+										}),
+										savedPats.length > 1 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											style: buttonStyle$1,
+											disabled: busy || patBusy || status.activePatId === void 0,
+											onClick: () => {
+												const id = status.activePatId;
+												if (id !== void 0) removePat(id);
+											},
+											children: patBusy && patAction === "remove" ? t("patRemoving") : t("patRemove")
+										}) : null,
+										savedPats.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											style: buttonStyle$1,
+											disabled: busy || patBusy,
+											onClick: () => {
+												clearPat();
+											},
+											children: patBusy && patAction === "clear" ? t("patClearing") : t("patClear")
+										}) : null
+									] })
+								]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								style: accountMetaRowStyle,
+								children: status.pat === void 0 ? null : patSummaryLine(status.pat)
+							}),
 							replacing ? patEntry() : null,
 							status.jobTokenRefreshedAt === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								style: bodyStyle,
 								children: t("jobTokenRefreshed", { time: formatTime(status.jobTokenRefreshedAt) })
 							}),
-							status.catalog === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								style: rowStyle,
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: accountMetaRowStyle,
+								children: [status.catalog === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 									style: bodyStyle,
 									children: status.catalog.source === "live" && status.catalog.fetchedAt !== void 0 ? t("catalogLive", { time: formatTime(status.catalog.fetchedAt) }) : status.catalog.source === "saved" && status.catalog.fetchedAt !== void 0 ? t("catalogSaved", { time: formatTime(status.catalog.fetchedAt) }) : t("catalogFallback")
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 									type: "button",
-									style: buttonStyle$1,
+									style: {
+										...buttonStyle$1,
+										marginLeft: "auto"
+									},
 									disabled: busy,
 									onClick: () => {
-										refreshModels();
+										refreshAll();
 									},
-									children: busy ? t("refreshingModels") : t("refreshModels")
+									children: busy ? t("refreshing") : t("refresh")
 								})]
 							}),
 							status.catalog?.error === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
@@ -3984,9 +4162,15 @@ window.__ModuleLoader__.load({
 			patSaved: "PAT saved.",
 			patSaveFailed: "Save failed: {message}",
 			patInvalid: "That PAT was rejected — generate a new one in your account settings and try again.",
-			patReplace: "Replace PAT",
-			patClear: "Clear PAT",
-			patClearing: "Clearing PAT…",
+			patAdd: "Add PAT",
+			patLabelPlaceholder: "Label for this token (optional, local only)",
+			patAccounts: "Active account",
+			patRemove: "Remove current",
+			patRemoving: "Removing…",
+			patSwitchFailed: "Switch failed: {message}",
+			patRemoveFailed: "Remove failed: {message}",
+			patClear: "Clear all",
+			patClearing: "Clearing…",
 			signedIn: "Signed in",
 			patSourceCard: "source: saved via this card",
 			patSourceEnv: "source: environment variable",
@@ -4022,8 +4206,6 @@ window.__ModuleLoader__.load({
 			creditsError: "Credit unavailable: {message}",
 			refresh: "Refresh",
 			refreshing: "Refreshing…",
-			refreshModels: "Refresh model list",
-			refreshingModels: "Refreshing models…",
 			jobTokenRefreshed: "Job token was auto-refreshed at {time} (upstream rejected the old one; the message recovered).",
 			catalogLive: "Model list updated {time}",
 			catalogSaved: "Showing the saved model list from {time}",
@@ -4032,7 +4214,6 @@ window.__ModuleLoader__.load({
 			requestFailed: "Request failed",
 			statusRefreshFailed: "Refresh failed: {message} — showing the last known state",
 			statusResponseInvalid: "Qoder returned an unreadable status reply",
-			accountHeading: "Account",
 			modelsHeading: "Model visibility",
 			modelsSubtitle: "Choose which models are exposed to the DeepSeek Harness model selector.",
 			modelsSearchPlaceholder: "Search by model name or ID…",
@@ -4159,9 +4340,15 @@ window.__ModuleLoader__.load({
 			patSaved: "PAT 已保存。",
 			patSaveFailed: "保存失败：{message}",
 			patInvalid: "PAT 无效或已过期 — 请到账号设置重新生成后再试。",
-			patReplace: "更换 PAT",
-			patClear: "清除 PAT",
-			patClearing: "正在清除 PAT…",
+			patAdd: "添加 PAT",
+			patLabelPlaceholder: "备注名（可选，仅本机显示）",
+			patAccounts: "当前账号",
+			patRemove: "删除当前",
+			patRemoving: "正在删除…",
+			patSwitchFailed: "切换失败：{message}",
+			patRemoveFailed: "删除失败：{message}",
+			patClear: "清除全部",
+			patClearing: "正在清除…",
 			signedIn: "已登录",
 			patSourceCard: "来源：卡片保存",
 			patSourceEnv: "来源：环境变量",
@@ -4197,9 +4384,7 @@ window.__ModuleLoader__.load({
 			creditsError: "额度查询失败：{message}",
 			refresh: "刷新",
 			refreshing: "正在刷新…",
-			refreshModels: "刷新模型列表",
 			jobTokenRefreshed: "jobToken 已于 {time} 自动刷新（上游拒绝了旧令牌，消息已自动恢复）。",
-			refreshingModels: "正在刷新模型…",
 			catalogLive: "模型列表更新于 {time}",
 			catalogSaved: "当前显示已保存的模型列表，更新于 {time}",
 			catalogFallback: "当前显示内置模型列表（尚未从 Qoder 更新）",
@@ -4207,7 +4392,6 @@ window.__ModuleLoader__.load({
 			requestFailed: "请求失败",
 			statusRefreshFailed: "刷新失败：{message} — 当前显示的是上次成功获取的状态",
 			statusResponseInvalid: "Qoder 返回的状态数据无法识别",
-			accountHeading: "账号",
 			modelsHeading: "模型开关",
 			modelsSubtitle: "控制哪些模型在 DeepSeek Harness 模型选择器中可见并可供调用。",
 			modelsSearchPlaceholder: "按模型名称或 ID 搜索…",