refactor(desktop): simplify model connection settings

[Astro-Han]

Summary

• replace the model settings navigation stack with one page: connected models first, then an inline searchable connection catalog
• make connection dialogs key-first and move service address, enabled models, connection test, catalog refresh, default-connection action, and deletion under Advanced settings
• remove default-model selection from add/edit dialogs; manage it only in General settings, while connection settings control which models are visible in model pickers
• persist one explicit enabledModelIds allowlist per connection, seed new and legacy connections with only their current default model, keep the default enabled, and never auto-enable models discovered by refresh
• simplify persistent model rows and maintenance actions so the expanded dialog uses whitespace and action hierarchy instead of nested borders and competing buttons
• remove the retired model table, custom keyboard path, nested settings pages, and unreachable catalog OAuth modal branches

Verification

• npm --workspace @maka/core test
• npm --workspace @maka/storage test
• npm --workspace @maka/desktop test — 2540 passed after rebasing onto the final main
• npm run typecheck
• npx playwright test --config e2e/playwright.config.ts from apps/desktop — 24 passed after rebasing onto the final main
• live Electron visual inspection and deterministic before/after capture of the expanded connection dialog
• independent Codex CLI and Pi ollama-cloud/glm-5.2 reviews; accepted findings were reproduced with failing tests before fixes

Review focus

• enabledModelIds is an additive persisted field; normalization and storage updates enforce that the default model cannot be disabled
• OAuth credential sync preserves the existing allowlist, and visibility-only OAuth updates no longer inject an endpoint patch or clear the fetched model cache
• chat, General settings, and Daily Review use the allowlist; an already-saved Daily Review model remains visible but is marked unavailable
• generated OAuth status messages remain specific while unknown upstream text is still generalized before display
• disabling a model only removes it from future picker choices; existing sessions retain their pinned model
• catalog refresh updates available models without changing the user's enabled set, and clearing a custom service address restores the provider default
• dialog focus enters a visible control and returns to a stable target after close or deletion

[Astro-Han]

Summary

• replace the model settings navigation stack with one page: connected models first, then an inline searchable connection catalog
• make connection dialogs key-first and move service address, enabled models, connection test, catalog refresh, default-connection action, and deletion under Advanced settings
• remove default-model selection from add/edit dialogs; manage it only in General settings, while connection settings control which models are visible in model pickers
• persist one explicit enabledModelIds allowlist per connection, seed new and legacy connections with only their current default model, keep the default enabled, and never auto-enable models discovered by refresh
• simplify persistent model rows and maintenance actions so the expanded dialog uses whitespace and action hierarchy instead of nested borders and competing buttons
• remove the retired model table, custom keyboard path, nested settings pages, and unreachable catalog OAuth modal branches

Verification

• npm --workspace @maka/core test
• npm --workspace @maka/storage test
• npm --workspace @maka/desktop test — 2540 passed after rebasing onto the final main
• npm run typecheck
• npx playwright test --config e2e/playwright.config.ts from apps/desktop — 24 passed after rebasing onto the final main
• live Electron visual inspection and deterministic before/after capture of the expanded connection dialog
• independent Codex CLI and Pi ollama-cloud/glm-5.2 reviews; accepted findings were reproduced with failing tests before fixes

Review focus

• enabledModelIds is an additive persisted field; normalization and storage updates enforce that the default model cannot be disabled
• OAuth credential sync preserves the existing allowlist, and visibility-only OAuth updates no longer inject an endpoint patch or clear the fetched model cache
• chat, General settings, and Daily Review use the allowlist; an already-saved Daily Review model remains visible but is marked unavailable
• generated OAuth status messages remain specific while unknown upstream text is still generalized before display
• disabling a model only removes it from future picker choices; existing sessions retain their pinned model
• catalog refresh updates available models without changing the user's enabled set, and clearing a custom service address restores the provider default
• dialog focus enters a visible control and returns to a stable target after close or deletion

[Astro-Han]

Summary

• replace the model settings navigation stack with one page: connected models first, then an inline searchable connection catalog
• make connection dialogs key-first and move service address, enabled models, connection test, catalog refresh, default-connection action, and deletion under Advanced settings
• remove default-model selection from add/edit dialogs; manage it only in General settings, while connection settings control which models are visible in model pickers
• persist one explicit enabledModelIds allowlist per connection, seed new and legacy connections with only their current default model, keep the default enabled, and never auto-enable models discovered by refresh
• simplify persistent model rows and maintenance actions so the expanded dialog uses whitespace and action hierarchy instead of nested borders and competing buttons
• remove the retired model table, custom keyboard path, nested settings pages, and unreachable catalog OAuth modal branches

Verification

• npm --workspace @maka/core test
• npm --workspace @maka/storage test
• npm --workspace @maka/desktop test — 2540 passed after rebasing onto the final main
• npm run typecheck
• npx playwright test --config e2e/playwright.config.ts from apps/desktop — 24 passed after rebasing onto the final main
• live Electron visual inspection and deterministic before/after capture of the expanded connection dialog
• independent Codex CLI and Pi ollama-cloud/glm-5.2 reviews; accepted findings were reproduced with failing tests before fixes

Review focus

• enabledModelIds is an additive persisted field; normalization and storage updates enforce that the default model cannot be disabled
• OAuth credential sync preserves the existing allowlist, and visibility-only OAuth updates no longer inject an endpoint patch or clear the fetched model cache
• chat, General settings, and Daily Review use the allowlist; an already-saved Daily Review model remains visible but is marked unavailable
• generated OAuth status messages remain specific while unknown upstream text is still generalized before display
• disabling a model only removes it from future picker choices; existing sessions retain their pinned model
• catalog refresh updates available models without changing the user's enabled set, and clearing a custom service address restores the provider default
• dialog focus enters a visible control and returns to a stable target after close or deletion

[Astro-Han]

Summary

• replace the model settings navigation stack with one page: connected models first, then an inline searchable connection catalog
• make connection dialogs key-first and move service address, enabled models, connection test, catalog refresh, default-connection action, and deletion under Advanced settings
• remove default-model selection from add/edit dialogs; manage it only in General settings, while connection settings control which models are visible in model pickers
• persist one explicit enabledModelIds allowlist per connection, seed new and legacy connections with only their current default model, keep the default enabled, and never auto-enable models discovered by refresh
• simplify persistent model rows and maintenance actions so the expanded dialog uses whitespace and action hierarchy instead of nested borders and competing buttons
• remove the retired model table, custom keyboard path, nested settings pages, and unreachable catalog OAuth modal branches

Verification

• npm --workspace @maka/core test
• npm --workspace @maka/storage test
• npm --workspace @maka/desktop test — 2540 passed after rebasing onto the final main
• npm run typecheck
• npx playwright test --config e2e/playwright.config.ts from apps/desktop — 24 passed after rebasing onto the final main
• live Electron visual inspection and deterministic before/after capture of the expanded connection dialog
• independent Codex CLI and Pi ollama-cloud/glm-5.2 reviews; accepted findings were reproduced with failing tests before fixes

Review focus

• enabledModelIds is an additive persisted field; normalization and storage updates enforce that the default model cannot be disabled
• OAuth credential sync preserves the existing allowlist, and visibility-only OAuth updates no longer inject an endpoint patch or clear the fetched model cache
• chat, General settings, and Daily Review use the allowlist; an already-saved Daily Review model remains visible but is marked unavailable
• generated OAuth status messages remain specific while unknown upstream text is still generalized before display
• disabling a model only removes it from future picker choices; existing sessions retain their pinned model
• catalog refresh updates available models without changing the user's enabled set, and clearing a custom service address restores the provider default
• dialog focus enters a visible control and returns to a stable target after close or deletion

[Astro-Han]

Summary

• replace the model settings navigation stack with one page: connected models first, then an inline searchable connection catalog
• make connection dialogs key-first and move service address, enabled models, connection test, catalog refresh, default-connection action, and deletion under Advanced settings
• remove default-model selection from add/edit dialogs; manage it only in General settings, while connection settings control which models are visible in model pickers
• persist one explicit enabledModelIds allowlist per connection, seed new and legacy connections with only their current default model, keep the default enabled, and never auto-enable models discovered by refresh
• simplify persistent model rows and maintenance actions so the expanded dialog uses whitespace and action hierarchy instead of nested borders and competing buttons
• remove the retired model table, custom keyboard path, nested settings pages, and unreachable catalog OAuth modal branches

Verification

• npm --workspace @maka/core test
• npm --workspace @maka/storage test
• npm --workspace @maka/desktop test — 2540 passed after rebasing onto the final main
• npm run typecheck
• npx playwright test --config e2e/playwright.config.ts from apps/desktop — 24 passed after rebasing onto the final main
• live Electron visual inspection and deterministic before/after capture of the expanded connection dialog
• independent Codex CLI and Pi ollama-cloud/glm-5.2 reviews; accepted findings were reproduced with failing tests before fixes

Review focus

• enabledModelIds is an additive persisted field; normalization and storage updates enforce that the default model cannot be disabled
• OAuth credential sync preserves the existing allowlist, and visibility-only OAuth updates no longer inject an endpoint patch or clear the fetched model cache
• chat, General settings, and Daily Review use the allowlist; an already-saved Daily Review model remains visible but is marked unavailable
• generated OAuth status messages remain specific while unknown upstream text is still generalized before display
• disabling a model only removes it from future picker choices; existing sessions retain their pinned model
• catalog refresh updates available models without changing the user's enabled set, and clearing a custom service address restores the provider default
• dialog focus enters a visible control and returns to a stable target after close or deletion

[Astro-Han]

Summary

• replace the model settings navigation stack with one page: connected models first, then an inline searchable connection catalog
• make connection dialogs key-first and move service address, enabled models, connection test, catalog refresh, default-connection action, and deletion under Advanced settings
• remove default-model selection from add/edit dialogs; manage it only in General settings, while connection settings control which models are visible in model pickers
• persist one explicit enabledModelIds allowlist per connection, seed new and legacy connections with only their current default model, keep the default enabled, and never auto-enable models discovered by refresh
• simplify persistent model rows and maintenance actions so the expanded dialog uses whitespace and action hierarchy instead of nested borders and competing buttons
• remove the retired model table, custom keyboard path, nested settings pages, and unreachable catalog OAuth modal branches

Verification

• npm --workspace @maka/core test
• npm --workspace @maka/storage test
• npm --workspace @maka/desktop test — 2540 passed after rebasing onto the final main
• npm run typecheck
• npx playwright test --config e2e/playwright.config.ts from apps/desktop — 24 passed after rebasing onto the final main
• live Electron visual inspection and deterministic before/after capture of the expanded connection dialog
• independent Codex CLI and Pi ollama-cloud/glm-5.2 reviews; accepted findings were reproduced with failing tests before fixes

Review focus

• enabledModelIds is an additive persisted field; normalization and storage updates enforce that the default model cannot be disabled
• OAuth credential sync preserves the existing allowlist, and visibility-only OAuth updates no longer inject an endpoint patch or clear the fetched model cache
• chat, General settings, and Daily Review use the allowlist; an already-saved Daily Review model remains visible but is marked unavailable
• generated OAuth status messages remain specific while unknown upstream text is still generalized before display
• disabling a model only removes it from future picker choices; existing sessions retain their pinned model
• catalog refresh updates available models without changing the user's enabled set, and clearing a custom service address restores the provider default
• dialog focus enters a visible control and returns to a stable target after close or deletion

[Astro-Han]

Summary

• replace the model settings navigation stack with one page: connected models first, then an inline searchable connection catalog
• make connection dialogs key-first and move service address, enabled models, connection test, catalog refresh, default-connection action, and deletion under Advanced settings
• remove default-model selection from add/edit dialogs; manage it only in General settings, while connection settings control which models are visible in model pickers
• persist one explicit enabledModelIds allowlist per connection, seed new and legacy connections with only their current default model, keep the default enabled, and never auto-enable models discovered by refresh
• simplify persistent model rows and maintenance actions so the expanded dialog uses whitespace and action hierarchy instead of nested borders and competing buttons
• remove the retired model table, custom keyboard path, nested settings pages, and unreachable catalog OAuth modal branches

Verification

• npm --workspace @maka/core test
• npm --workspace @maka/storage test
• npm --workspace @maka/desktop test — 2540 passed after rebasing onto the final main
• npm run typecheck
• npx playwright test --config e2e/playwright.config.ts from apps/desktop — 24 passed after rebasing onto the final main
• live Electron visual inspection and deterministic before/after capture of the expanded connection dialog
• independent Codex CLI and Pi ollama-cloud/glm-5.2 reviews; accepted findings were reproduced with failing tests before fixes

Review focus

• enabledModelIds is an additive persisted field; normalization and storage updates enforce that the default model cannot be disabled
• OAuth credential sync preserves the existing allowlist, and visibility-only OAuth updates no longer inject an endpoint patch or clear the fetched model cache
• chat, General settings, and Daily Review use the allowlist; an already-saved Daily Review model remains visible but is marked unavailable
• generated OAuth status messages remain specific while unknown upstream text is still generalized before display
• disabling a model only removes it from future picker choices; existing sessions retain their pinned model
• catalog refresh updates available models without changing the user's enabled set, and clearing a custom service address restores the provider default
• dialog focus enters a visible control and returns to a stable target after close or deletion

[Astro-Han]

Summary

• replace the model settings navigation stack with one page: connected models first, then an inline searchable connection catalog
• make connection dialogs key-first and move service address, enabled models, connection test, catalog refresh, default-connection action, and deletion under Advanced settings
• remove default-model selection from add/edit dialogs; manage it only in General settings, while connection settings control which models are visible in model pickers
• persist one explicit enabledModelIds allowlist per connection, seed new and legacy connections with only their current default model, keep the default enabled, and never auto-enable models discovered by refresh
• simplify persistent model rows and maintenance actions so the expanded dialog uses whitespace and action hierarchy instead of nested borders and competing buttons
• remove the retired model table, custom keyboard path, nested settings pages, and unreachable catalog OAuth modal branches

Verification

• npm --workspace @maka/core test
• npm --workspace @maka/storage test
• npm --workspace @maka/desktop test — 2540 passed after rebasing onto the final main
• npm run typecheck
• npx playwright test --config e2e/playwright.config.ts from apps/desktop — 24 passed after rebasing onto the final main
• live Electron visual inspection and deterministic before/after capture of the expanded connection dialog
• independent Codex CLI and Pi ollama-cloud/glm-5.2 reviews; accepted findings were reproduced with failing tests before fixes

Review focus

• enabledModelIds is an additive persisted field; normalization and storage updates enforce that the default model cannot be disabled
• OAuth credential sync preserves the existing allowlist, and visibility-only OAuth updates no longer inject an endpoint patch or clear the fetched model cache
• chat, General settings, and Daily Review use the allowlist; an already-saved Daily Review model remains visible but is marked unavailable
• generated OAuth status messages remain specific while unknown upstream text is still generalized before display
• disabling a model only removes it from future picker choices; existing sessions retain their pinned model
• catalog refresh updates available models without changing the user's enabled set, and clearing a custom service address restores the provider default
• dialog focus enters a visible control and returns to a stable target after close or deletion