fix(frontend): stop showing a stale model catalog for a rejected key

web/packages/agenta-entities/src/secret/core/cardCopy.ts

@@ -18,9 +18,9 @@ import {SecretKind} from "./types"
  * would then read past. Strip it and let the separator do the work.
  */
 export const credentialStatusLine = (message: string, modelCount: number | null): string => {
-    const verdict = message.trim().replace(/\.$/, "")
+    const verdict = message.trim()
     if (modelCount === null) return verdict
-    return `${verdict} · ${modelCount} ${modelCount === 1 ? "model" : "models"} fetched`
+    return `${verdict.replace(/\.$/, "")} · ${modelCount} ${modelCount === 1 ? "model" : "models"} fetched`
 }
 
 /** The header's live count — checked against fetched, never a claim about defaults. */

web/packages/agenta-entities/tests/unit/provider-card-copy.test.ts

@@ -36,7 +36,7 @@ describe("credentialStatusLine", () => {
 
     it("says nothing about a fetch that did not happen", () => {
         expect(credentialStatusLine("OpenAI rejected this key (401).", null)).toBe(
-            "OpenAI rejected this key (401)",
+            "OpenAI rejected this key (401).",
         )
     })
 })

web/packages/agenta-entity-ui/src/secretProvider/ActiveModelsSection.tsx

@@ -17,6 +17,7 @@ import {useMemo, useState} from "react"
 
 import {
     activeModelsCount,
+    type DiscoveryStatus,
     modelListView,
     relativeFetchTime,
     type ModelOption,
@@ -35,8 +36,12 @@ export interface ActiveModelsSectionProps {
     onAddManual: (id: string) => void
     /** What the manual row offers to add against — the API's list, or one endpoint's. */
     manualPlaceholder: string
+    /** Used in the fallback note when discovery did not return the provider's own list. */
+    title: string
     /** Set only when a live fetch answered — drives the timestamp line and the re-fetch action. */
     fetchedAt?: string | null
+    /** Shows whether the list came from discovery or a bundled fallback. */
+    discoveryStatus?: DiscoveryStatus | null
     onRefetch?: () => void
     refetching?: boolean
 }
@@ -58,7 +63,9 @@ const ActiveModelsSection = ({
     onClear,
     onAddManual,
     manualPlaceholder,
+    title,
     fetchedAt,
+    discoveryStatus,
     onRefetch,
     refetching,
 }: ActiveModelsSectionProps) => {
@@ -84,6 +91,13 @@ const ActiveModelsSection = ({
         setManualId("")
     }
 
+    const catalogNote =
+        discoveryStatus === "fetched"
+            ? null
+            : discoveryStatus == null
+              ? `Showing Agenta's shipped catalog. ${title}'s own list has not been fetched yet.`
+              : `Showing Agenta's shipped catalog. ${title}'s own list was not fetched.`
+
     return (
         <section className="flex min-h-0 flex-1 flex-col gap-2">
             <div className="flex shrink-0 items-baseline justify-between gap-2">
@@ -121,6 +135,12 @@ const ActiveModelsSection = ({
                     />
                 </div>
 
+                {catalogNote ? (
+                    <p className="m-0 border-0 border-b border-solid border-colorSplit px-3 py-2 text-colorTextTertiary">
+                        {catalogNote}
+                    </p>
+                ) : null}
+
                 {visible.length === 0 ? (
                     <p className="m-0 border-0 border-b border-solid border-colorSplit px-3 py-3 text-colorTextSecondary">
                         {options.length === 0

web/packages/agenta-entity-ui/src/secretProvider/ProviderConnectionCard.tsx

@@ -182,6 +182,7 @@ const ProviderConnectionCard = ({
 
     const credentialStatus = probe?.credential.status ?? null
     const discovered = probe?.discovery.status === "fetched"
+    const discoveryStatus = probe?.discovery.status ?? null
 
     // Standard providers name a family the harness catalog knows; the credential-set kinds carry
     // whatever the endpoint serves, so their list comes from discovery and manual entry alone.
@@ -469,8 +470,10 @@ const ProviderConnectionCard = ({
                         >
                             {credentialFailed ? (
                                 <WarningCircle size={14} className="mt-0.5 shrink-0" />
-                            ) : (
+                            ) : credentialStatus === "valid" ? (
                                 <span className="mt-1.5 size-1.5 shrink-0 rounded-full bg-colorSuccess" />
+                            ) : (
+                                <span className="mt-1.5 size-1.5 shrink-0 rounded-full bg-colorWarning" />
                             )}
                             <span>
                                 {statusLine}
@@ -514,6 +517,8 @@ const ProviderConnectionCard = ({
                 <ActiveModelsSection
                     options={modelOptions}
                     manualPlaceholder={manualModelPlaceholderForKind(kind)}
+                    title={title}
+                    discoveryStatus={discoveryStatus}
                     onToggle={toggleModel}
                     onSelectAll={() => setCheckedModels(modelOptions.map((option) => option.id))}
                     onClear={() => setCheckedModels([])}