dsh-workbuddy-xdpool 1.7.2 → 1.7.3

package/CHANGELOG.md

@@ -4,6 +4,43 @@
 
 版本号遵循 [语义化版本](https://semver.org/lang/zh-CN/)。
 
+## 1.7.3 — 模型不会因为一次网络抖动就消失
+
+> 开机那一秒网络还没起来，插件就把模型列表「降级」了，然后一整天都不再试第二次。
+
+**你会看到**：某次重启后，国内版的模型从 16 个变成 10 个，`deepseek-v4.1-flash` 之类凭空消失（国际版没事）。更麻烦的是你之前勾选过那个模型，于是**依赖这个 provider 的东西开始报错**（`has no configured model "deepseek-v4.1-flash"`），会话被悄悄切到国际版的同名模型上，而你根本不知道为什么。
+
+界面**没有任何提示** —— 只有日志里一条不起眼的 `[W]`。点卡片上的「重新检测账号」？**没用**。唯一的恢复方式是重启 DSH。
+
+**为什么**：启动时去拉模型列表，那一次**失败了**（日志显示同一秒里有好几个独立组件都报 `fetch failed`，而 0.7 秒后国际版就成功了 —— 典型的开机网络还没就绪）。失败之后：
+
+1. **不重试**，一次就放弃；
+2. **静默回退**到插件内置的那张静态表 —— 那张表里没有 `deepseek-v4.1-flash`，于是「拉取失败」在你眼里就是「模型被删了」；
+3. 「重新检测账号」这个按钮**只重新扫描账号**，压根不碰模型列表。名字起得太容易让人误会，你会以为它能修好，实际什么都不做。
+
+**怎么修的**：
+
+- **拉取失败自动重试**（1 秒 / 3 秒 / 8 秒，最多 3 次）。开机抖动基本一次就能救回来。重试会写日志并标明第几次，所以「列表为什么慢」是可查的。**一个 region 的重试不影响另一个** —— 两个网关是独立主机，没理由同归于尽；
+- **新增「重新获取模型」按钮**，并把它和「重新检测账号」分清楚：前者只管模型，后者只管账号，而且**后者现在也会顺带刷新模型**（因为大家都会去点它）；
+- **卡片会明说**：当前列表是「内置列表（离线）」时，模型区标题旁挂一个橙色标记，告诉你在看的是兜底表而不是完整清单，旁边就是重试按钮；
+- **兜底表按真实上游数据重建**。这是顺手挖出来的一个更严重的问题：旧表**几乎全部过时** —— `hy3` 的窗口写着 32K（实际 192K）、`kimi-k3` 这个 id 上游早就不用了（实际是 `kimi-k3-1`），而 `deepseek-v4.1-flash`、`kimi-k2.6/2.7/2.8`、`glm-5v-turbo`、`hy3-x` 全都不在表里。我是**直接拉了国内版的真实接口**逐条核对后重写的，包含窗口大小和倍率。过时的兜底表比短表更糟 —— 它看起来权威，实际是错的。
+
+### 一个差点修反的地方（顺手修了，免得白干）
+
+改完重试我差点以为完事，结果发现：「刷新失败」会把一个**本来正常的**列表也打回兜底状态。也就是说，如果当前用的是实时列表、只是这次刷新没成功，卡片反而会显示「离线」。这是**修反了** —— 所以现在**刷新失败保留现有列表**，只有真的没有实时数据时才标记为兜底。
+
+### 明确没做的
+
+- **不做定时自动重拉**。开机失败已有重试兜底，而正常运行时定期轮询模型接口只会增加无谓的上游请求；真要更新，点按钮即可。
+- **不做「缓存上次成功的列表到磁盘」**。这能彻底消灭回退问题，但会把模型清单持久化，涉及与 settings 文档的版本兼容；本轮先修「抖动即降级」这个主因，不夹带更大的改动。
+
+### 验证
+
+- 类型检查全绿，测试 **274 项全绿**（原 262 + 新增 13，另删掉 1 项一次性探针）。
+- 新增 `tests/catalog-resilience.test.ts` 覆盖：首次失败第二次成功的恢复、用尽重试后抛错、**被调用方主动取消的请求不重试**（否则会在被要求停止后继续干活）、重试写日志、兜底表含关键模型且无重复 id、窗口值均有效。
+- **反向验证**：把重试去掉 → 3 项变红；把「刷新失败降级」的错误改法放回去 → 1 项变红。确认测试真的能抓住这两个缺陷。
+- 拉取国内版**真实接口**核对兜底表：共 16 个模型，已全部按实测数据录入。
+
 ## 1.7.2 — 自动化不再「一跑跑一天」
 
 > 定好几点跑，就几点跑。之前是定好几点跑，然后从那一刻起每个整点都跑，跑到你睡觉。

package/lib/bin.js

@@ -10,6 +10,39 @@ import "@earendil-works/pi-ai/api/openai-completions.lazy";
 import "@deepseek-ai/dsh-llm";
 import "@deepseek-ai/dsh-llm-pi-ai";
 //#region src/upstream.ts
+/**
+* Backoff between catalog-fetch attempts.
+*
+* Three retries after the first try, so a startup network hiccup does not cost
+* the user their model list for the whole session. The window covers the case
+* that actually bit: several independent components reported `fetch failed`
+* within the same second while the machine was still bringing its network up,
+* and the very next request succeeded 0.7s later.
+*
+* Deliberately short and bounded. This runs during plugin startup, so a long
+* ladder would delay the provider appearing at all; the total added latency
+* here is ~12s in the worst case, and only when the network is genuinely down.
+*/
+const CATALOG_RETRY_BACKOFF_MS = [
+	1e3,
+	3e3,
+	8e3
+];
+/**
+* Sleep helper for the retry ladder.
+*
+* Deliberately NOT unref'd. An unref'd timer does not keep the event loop
+* alive, so awaiting one can hang forever when nothing else is pending — the
+* retry would simply never resume. That is exactly what the first version of
+* this did, and it wedged the very first end-to-end run: `fetchModels` never
+* settled. The wait is at most a few seconds and only happens on failure, so
+* holding the loop open is the correct trade.
+*/
+function delay(ms) {
+	return new Promise((resolve) => {
+		setTimeout(resolve, ms);
+	});
+}
 /** CN chat base per dingminhua's on-machine probe (HTTP 200 for chat/models). */
 const CN_CHAT_BASE = "https://copilot.tencent.com";
 /** Billing/console base — `www.codebuddy.cn` is the billing origin. */
@@ -31,6 +64,13 @@ const MODELS_CATALOG_PATH = "/v2/enterprises/personal/models";
 const GLOBAL_CONFIG_PATH = "/v3/config";
 const JSON_TIMEOUT_MS = 3e4;
 const ERROR_BODY_LIMIT = 4096;
+/** True for a request the CALLER aborted, which must never be retried. */
+function isAbortError(error) {
+	if (typeof error !== "object" || error === null) return false;
+	if (error.name === "AbortError") return true;
+	const cause = error.cause;
+	return typeof cause === "object" && cause !== null && cause.name === "AbortError";
+}
 /** Cap on the reassembled compaction reply, guarding against a runaway stream. */
 const COMPLETION_TEXT_LIMIT = 65536;
 /** Insufficient-credit markers, ASCII lowercase plus the original Chinese. */
@@ -638,9 +678,20 @@ function parseTask(value) {
 var WorkBuddyUpstreamClient = class {
 	fetchImpl;
 	clientVersion;
+	/** Backoff ladder for `fetchModels`; empty means a single attempt. */
+	catalogRetryBackoffMs;
+	/**
+	* Optional logger for retry notices.
+	*
+	* Set by the host so a retry is visible in the log with its attempt count —
+	* without it, a retry that eventually succeeds is invisible, and an operator
+	* debugging "why was the catalog slow" has nothing to look at.
+	*/
+	logger;
 	constructor(options = {}) {
 		this.fetchImpl = options.fetchImpl ?? globalThis.fetch;
 		this.clientVersion = options.clientVersion ?? "2.0.4";
+		this.catalogRetryBackoffMs = options.catalogRetryBackoffMs ?? CATALOG_RETRY_BACKOFF_MS;
 	}
 	/**
 	* Normalize an OpenAI chat-completions body for the WorkBuddy upstream:
@@ -797,6 +848,30 @@ var WorkBuddyUpstreamClient = class {
 	* below is common to the two branches.
 	*/
 	async fetchModels(credential, signal) {
+		const attempts = this.catalogRetryBackoffMs.length + 1;
+		let lastError;
+		for (let attempt = 0; attempt < attempts; attempt += 1) try {
+			return await this.fetchModelsOnce(credential, signal);
+		} catch (error) {
+			lastError = error;
+			if (isAbortError(error)) throw error;
+			const wait = this.catalogRetryBackoffMs[attempt];
+			if (wait === void 0) break;
+			this.logger?.warn?.(`dsh-workbuddy-xdpool: model catalog fetch failed (attempt ${attempt + 1}/${attempts}), retrying in ${wait}ms`, error);
+			await delay(wait);
+		}
+		throw lastError;
+	}
+	/**
+	* One catalog attempt, without retries.
+	*
+	* Split out so {@link fetchModels} can retry it: the failure this guards
+	* against is a startup network hiccup, where several independent components
+	* see `fetch failed` inside the same second and the very next request
+	* succeeds — exactly the case a single attempt turns into "the user's model
+	* list is missing half its entries for the rest of the session".
+	*/
+	async fetchModelsOnce(credential, signal) {
 		const global = regionOf(credential.domain) === "global";
 		const url = global ? `${globalBase(credential)}${GLOBAL_CONFIG_PATH}` : `${chatBase(credential)}${MODELS_CATALOG_PATH}`;
 		const headers = global ? {
@@ -2879,38 +2954,97 @@ ${new Date(until).toISOString()}
 * Static fallback used before the first live catalog fetch, and whenever the
 * upstream cannot be reached.
 *
-* The multipliers are carried on purpose. Without them the provider's model
-* picker silently loses every rate and every free badge the moment the live
-* fetch fails — which reads to the user as "the plugin broke my model list"
-* rather than "the upstream is unreachable". The values are the ones the two
-* gateways actually advertise for these ids (`credits: "x0.79 credits"` and so
-* on), so a fallback row looks the same as a live one.
+* This table is the DOMESTIC (CN) roster, and it is kept in step with what
+* `copilot.tencent.com` actually advertises. It matters more than a "just in
+* case" list usually would: a failed startup fetch falls back to it, and the
+* user sees that as "half my models were deleted" — `deepseek-v4.1-flash`
+* and friends simply vanishing from the picker, with no visible explanation.
+*
+* Every row below was captured from the live endpoint, INCLUDING the window
+* sizes: the previous version carried a 32K window for `hy3` when the gateway
+* says 192K, and listed `kimi-k3` under an id the gateway no longer uses
+* (`kimi-k3-1`). A stale fallback is worse than a short one — it looks
+* authoritative while being wrong.
 *
 * `multiplier: 0` is the gateways' own spelling of "free" (`credits: "x0.00"`),
 * which is what turns on the free badge.
 */
 const FALLBACK_WORKBUDDY_MODELS = [
+	{
+		id: "auto",
+		name: "Auto",
+		contextWindow: 256e3,
+		maxOutputTokens: 32e3,
+		supportsImages: true
+	},
+	{
+		id: "hy4-preview",
+		name: "Hy4 preview",
+		contextWindow: 1e6,
+		maxOutputTokens: 64e3,
+		supportsImages: true,
+		multiplier: .29
+	},
+	{
+		id: "hy3",
+		name: "Hy3",
+		contextWindow: 192e3,
+		maxOutputTokens: 64e3,
+		supportsImages: true,
+		multiplier: 0
+	},
+	{
+		id: "hy3-x",
+		name: "Hy3",
+		contextWindow: 192e3,
+		maxOutputTokens: 64e3,
+		supportsImages: true,
+		multiplier: .05
+	},
+	{
+		id: "deepseek-v4.1-flash",
+		name: "Deepseek-V4.1-Flash",
+		contextWindow: 1e6,
+		maxOutputTokens: 128e3,
+		supportsImages: true,
+		multiplier: .11
+	},
+	{
+		id: "deepseek-v4-pro",
+		name: "Deepseek-V4-Pro",
+		contextWindow: 1e6,
+		maxOutputTokens: 128e3,
+		supportsImages: true,
+		multiplier: .51
+	},
+	{
+		id: "deepseek-v4-flash",
+		name: "DeepSeek-V4-Flash",
+		contextWindow: 1e6,
+		maxOutputTokens: 128e3,
+		supportsImages: true
+	},
 	{
 		id: "glm-5.3",
 		name: "GLM-5.3",
-		contextWindow: 2e5,
-		maxOutputTokens: 128e3,
+		contextWindow: 1e6,
+		maxOutputTokens: 64e3,
 		supportsImages: true,
 		multiplier: .79
 	},
 	{
 		id: "glm-5.3-flash",
 		name: "GLM-5.3-Flash",
-		contextWindow: 2e5,
-		maxOutputTokens: 128e3,
+		contextWindow: 1e6,
+		maxOutputTokens: 131072,
 		supportsImages: true,
 		multiplier: .06
 	},
 	{
 		id: "glm-5.2",
 		name: "GLM-5.2",
-		contextWindow: 2e5,
-		maxOutputTokens: 128e3,
+		contextWindow: 1e6,
+		maxOutputTokens: 64e3,
 		supportsImages: true,
 		multiplier: .79
 	},
@@ -2918,53 +3052,57 @@ const FALLBACK_WORKBUDDY_MODELS = [
 		id: "glm-5.1",
 		name: "GLM-5.1",
 		contextWindow: 2e5,
-		maxOutputTokens: 128e3,
-		supportsImages: false
-	},
-	{
-		id: "deepseek-v4-pro",
-		name: "DeepSeek-V4-Pro",
-		contextWindow: 2e5,
-		maxOutputTokens: 128e3,
-		supportsImages: true
+		maxOutputTokens: 48e3,
+		supportsImages: false,
+		multiplier: .79
 	},
 	{
-		id: "deepseek-v4-flash",
-		name: "DeepSeek-V4-Flash",
+		id: "glm-5v-turbo",
+		name: "GLM-5v-Turbo",
 		contextWindow: 2e5,
-		maxOutputTokens: 128e3,
-		supportsImages: true
+		maxOutputTokens: 64e3,
+		supportsImages: true,
+		multiplier: .71
 	},
 	{
-		id: "kimi-k3",
+		id: "kimi-k3-1",
 		name: "Kimi-K3",
-		contextWindow: 2e5,
-		maxOutputTokens: 128e3,
+		contextWindow: 1e6,
+		maxOutputTokens: 32e3,
 		supportsImages: true,
 		multiplier: 1.62
 	},
 	{
-		id: "minimax-m3",
-		name: "MiniMax-M3",
-		contextWindow: 2e5,
-		maxOutputTokens: 128e3,
-		supportsImages: true
+		id: "kimi-k2.8-preview",
+		name: "Kimi-K2.8-Preview",
+		contextWindow: 1e6,
+		maxOutputTokens: 64e3,
+		supportsImages: true,
+		multiplier: .77
 	},
 	{
-		id: "hy3",
-		name: "Hy3",
-		contextWindow: 32e3,
-		maxOutputTokens: 8e3,
+		id: "kimi-k2.7",
+		name: "Kimi-K2.7-Code",
+		contextWindow: 256e3,
+		maxOutputTokens: 32e3,
 		supportsImages: true,
-		multiplier: 0
+		multiplier: .57
 	},
 	{
-		id: "hy4-preview",
-		name: "Hy4-Preview",
-		contextWindow: 1e6,
-		maxOutputTokens: 128e3,
+		id: "kimi-k2.6",
+		name: "Kimi-K2.6",
+		contextWindow: 256e3,
+		maxOutputTokens: 32e3,
 		supportsImages: true,
-		multiplier: .29
+		multiplier: .52
+	},
+	{
+		id: "minimax-m3",
+		name: "MiniMax-M3",
+		contextWindow: 512e3,
+		maxOutputTokens: 64e3,
+		supportsImages: true,
+		multiplier: .25
 	}
 ];
 /** Live catalog with a static fallback behind it. */
@@ -2973,6 +3111,19 @@ var WorkBuddyCatalog = class {
 	listeners = /* @__PURE__ */ new Set();
 	/** User's model selection. Empty object = follow the catalog unfiltered. */
 	selection = {};
+	/**
+	* Whether `models` came from the gateway or from the static table.
+	*
+	* Tracked so the card can SAY which it is showing. A failed fetch used to be
+	* invisible on screen: the picker simply held fewer models than before, which
+	* the user reasonably read as "the plugin deleted my models" rather than "the
+	* network hiccuped at startup".
+	*/
+	source = "fallback";
+	/** When the live list last landed. */
+	lastUpdatedAt;
+	/** Why the last fetch failed, for display. */
+	lastError;
 	current() {
 		return this.models;
 	}
@@ -3007,6 +3158,7 @@ var WorkBuddyCatalog = class {
 	/** Restore the static fallback, e.g. when the upstream stops answering. */
 	reset() {
 		this.models = FALLBACK_WORKBUDDY_MODELS;
+		this.source = "fallback";
 		this.notify();
 	}
 	/** Replace the user's selection; the adapter rebuilds from `visible()`. */
@@ -3018,6 +3170,31 @@ var WorkBuddyCatalog = class {
 	currentSelection() {
 		return this.selection;
 	}
+	/**
+	* Whether this catalog is serving live data or the built-in table.
+	*
+	* `fallback` is not an error state, but it IS a degraded one: the user is
+	* looking at a shorter roster than the gateway offers, so the card says so
+	* and offers a retry instead of letting them wonder where the models went.
+	*/
+	currentSource() {
+		return this.source;
+	}
+	/**
+	* When the live list last landed, if it ever did.
+	*
+	* Named `catalogUpdatedAt()` rather than `updatedAt()` because the class
+	* already had an `updatedAt` member; two members of the same name is a
+	* compile error, and the awkwardness is a useful signal that the concept is
+	* "when THIS catalog was refreshed", not a generic timestamp.
+	*/
+	catalogUpdatedAt() {
+		return this.lastUpdatedAt;
+	}
+	/** Why the last fetch failed, if it did. */
+	lastFetchError() {
+		return this.lastError;
+	}
 	onChange(listener) {
 		this.listeners.add(listener);
 		return () => this.listeners.delete(listener);
@@ -3028,6 +3205,20 @@ var WorkBuddyCatalog = class {
 	/** Replace the catalog from the live upstream list; keeps the fallback if empty. */
 	updateFromUpstream(models) {
 		this.update(catalogFromUpstream(models));
+		this.source = "live";
+		this.lastUpdatedAt = (/* @__PURE__ */ new Date()).toISOString();
+		this.lastError = void 0;
+	}
+	/**
+	* Record that a fetch attempt failed, leaving the current list in place.
+	*
+	* The list is deliberately NOT reset here: a refresh that fails should keep
+	* whatever working catalog is already loaded, rather than demoting a healthy
+	* session to the static table because one retry ran out.
+	*/
+	noteFetchFailure(message) {
+		this.lastError = message;
+		this.notify();
 	}
 	notify() {
 		for (const listener of this.listeners) listener();

package/lib/client.js

@@ -23,6 +23,16 @@ window.__ModuleLoader__.load({
 		const POOL_STATUS_PATH = "/plugins/dsh-workbuddy-xdpool/status";
 		/** Plugin-owned local account rescan endpoint (re-read desktop snapshots). */
 		const POOL_RESCAN_PATH = "/plugins/dsh-workbuddy-xdpool/accounts/rescan";
+		/**
+		* Re-fetch the upstream model catalog for both regions.
+		*
+		* Separate from {@link POOL_RESCAN_PATH} because they answer different
+		* questions, and conflating them misled users: "detect accounts again" only
+		* re-read the desktop snapshots, so it could NOT recover a model list that had
+		* fallen back to the static table after a failed startup fetch. The only way
+		* out was restarting DSH.
+		*/
+		const POOL_CATALOG_REFRESH_PATH = "/plugins/dsh-workbuddy-xdpool/models/refresh";
 		/** Plugin-owned cooldown reset endpoint (clear all 429 cooldowns). */
 		const POOL_RESET_COOLDOWN_PATH = "/plugins/dsh-workbuddy-xdpool/cooldowns/reset";
 		/** Plugin-owned daily check-in action endpoint (claim today's reward). */
@@ -276,6 +286,9 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-xdpool-model-budget input{margin:0;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
 .dsm-workbuddy-xdpool-models-heading{display:flex;flex-direction:column;gap:2px;min-width:0}
 .dsm-workbuddy-xdpool-models-actions{display:flex;align-items:center;gap:8px;flex:none}
+/* "Built-in list (offline)" chip: a warning tint, since the user is looking at
+   a SHORTER roster than the gateway offers and may wonder where models went. */
+.dsm-workbuddy-xdpool-catalog-offline{flex:none;padding:2px 9px;border-radius:999px;font-size:11px;line-height:17px;font-weight:600;background:var(--dsw-alias-state-warning-subtle,rgba(217,119,6,.15));color:var(--dsw-alias-state-warning-primary,#d97706);white-space:nowrap}
 
 
 /* Automation: run-now button and the per-job progress line. */
@@ -585,6 +598,8 @@ window.__ModuleLoader__.load({
 			const [error, setError] = (0, react.useState)(void 0);
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [cooldownBusy, setCooldownBusy] = (0, react.useState)(false);
+			/** Model-catalog refresh in flight (separate from the account rescan). */
+			const [catalogBusy, setCatalogBusy] = (0, react.useState)(false);
 			const [automationBusy, setAutomationBusy] = (0, react.useState)(false);
 			/** The automation job currently running from the card, if any. */
 			const [automationRun, setAutomationRun] = (0, react.useState)(void 0);
@@ -679,6 +694,35 @@ window.__ModuleLoader__.load({
 					if (mounted.current) setBusy(false);
 				}
 			};
+			/**
+			* Re-fetch the upstream model catalog for both regions.
+			*
+			* Its own action, and its own BUTTON, because the account rescan beside it
+			* could not do this job: when the startup fetch failed, the picker held the
+			* shorter built-in list and "detect accounts again" left it untouched, so the
+			* only recovery was restarting DSH. Users reasonably assumed the button
+			* covered both.
+			*/
+			const refreshCatalog = async () => {
+				setCatalogBusy(true);
+				setFlash(void 0);
+				try {
+					const response = await fetch(POOL_CATALOG_REFRESH_PATH, {
+						method: "POST",
+						headers: { accept: "application/json" },
+						credentials: "same-origin"
+					});
+					const body = await response.json();
+					if (!response.ok) throw new Error(body.error ?? `HTTP ${response.status}`);
+					await refresh(activeRegion);
+					const here = body.regions?.[activeRegion];
+					if (mounted.current) setFlash(here?.source === "live" ? t?.("row.catalogRefreshed", { count: here.models ?? 0 }) ?? "" : t?.("row.catalogRefreshOffline") ?? "");
+				} catch (cause) {
+					if (mounted.current) setError(cause instanceof Error ? cause.message : String(cause));
+				} finally {
+					if (mounted.current) setCatalogBusy(false);
+				}
+			};
 			const resetCooldowns = async () => {
 				setCooldownBusy(true);
 				setFlash(void 0);
@@ -1430,21 +1474,39 @@ window.__ModuleLoader__.load({
 								})]
 							}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								className: "dsm-workbuddy-xdpool-models-actions",
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-									type: "button",
-									className: "dsm-btn dsm-btn-outline",
-									disabled: !modelsDirty || savingModels,
-									onClick: discardModels,
-									children: t?.("row.modelsDiscard") ?? "Discard"
-								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-									type: "button",
-									className: "dsm-btn dsm-btn-primary",
-									disabled: !modelsDirty || savingModels || enabledCount === 0,
-									onClick: () => {
-										saveModels();
-									},
-									children: savingModels ? t?.("row.modelsSaving") ?? "Saving…" : t?.("row.modelsSave") ?? "Save"
-								})]
+								children: [
+									status?.catalogSource !== "fallback" ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "dsm-workbuddy-xdpool-catalog-offline",
+										title: status.catalogError ?? void 0,
+										children: t?.("row.catalogOffline") ?? "built-in list (offline)"
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "dsm-btn dsm-btn-outline",
+										disabled: catalogBusy,
+										onClick: () => {
+											refreshCatalog();
+										},
+										title: t?.("row.catalogRefreshHint") ?? "Fetch the model list again from WorkBuddy",
+										children: catalogBusy ? t?.("row.catalogRefreshing") ?? "Fetching…" : t?.("row.catalogRefresh") ?? "Refresh models"
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "dsm-btn dsm-btn-outline",
+										disabled: !modelsDirty || savingModels,
+										onClick: discardModels,
+										children: t?.("row.modelsDiscard") ?? "Discard"
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "dsm-btn dsm-btn-primary",
+										disabled: !modelsDirty || savingModels || enabledCount === 0,
+										onClick: () => {
+											saveModels();
+										},
+										children: savingModels ? t?.("row.modelsSaving") ?? "Saving…" : t?.("row.modelsSave") ?? "Save"
+									})
+								]
 							})]
 						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 							className: "dsm-workbuddy-xdpool-model-list",
@@ -2023,6 +2085,12 @@ window.__ModuleLoader__.load({
 			"row.modelsSaved": "Model selection saved",
 			"row.modelsSaveError": "Could not save: {message}",
 			"row.modelsEmpty": "No model enabled — enable at least one before saving.",
+			"row.catalogOffline": "built-in list (offline)",
+			"row.catalogRefresh": "Refresh models",
+			"row.catalogRefreshing": "Fetching…",
+			"row.catalogRefreshHint": "Fetch the model list again from WorkBuddy",
+			"row.catalogRefreshed": "Model list updated ({count} models)",
+			"row.catalogRefreshOffline": "Still offline — kept the built-in list",
 			"row.free": "free",
 			"row.limitedFree": "limited free",
 			"row.nightDiscount": "night",
@@ -2162,6 +2230,12 @@ window.__ModuleLoader__.load({
 			"row.modelsSaved": "模型选择已保存",
 			"row.modelsSaveError": "保存失败：{message}",
 			"row.modelsEmpty": "至少要启用一个模型才能保存。",
+			"row.catalogOffline": "内置列表（离线）",
+			"row.catalogRefresh": "重新获取模型",
+			"row.catalogRefreshing": "获取中…",
+			"row.catalogRefreshHint": "重新从 WorkBuddy 拉取模型列表",
+			"row.catalogRefreshed": "模型列表已更新（{count} 个模型）",
+			"row.catalogRefreshOffline": "仍然离线，继续使用内置列表",
 			"row.free": "免费",
 			"row.limitedFree": "限量免费",
 			"row.nightDiscount": "夜间",