fix(oauth): clamp a dangling legacy model key in secondary_model too

Author: elkaix

packages/oauth/src/refreshProviderModels.ts

@@ -327,10 +327,11 @@ function clampDanglingDefault(config: PythinkerConfigShape): void {
 function clampDanglingSecondaryModel(config: PythinkerConfigShape): void {
   const section = config.secondaryModel;
   if (section === undefined) return;
-  const bound = section.defaultModel ?? section.model;
-  if (bound !== undefined && readModel(config, bound) === undefined) {
-    config.secondaryModel = undefined;
-    return;
+  for (const bound of [section.defaultModel, section.model]) {
+    if (bound !== undefined && readModel(config, bound) === undefined) {
+      config.secondaryModel = undefined;
+      return;
+    }
   }
   if (section.models === undefined) return;
   const models = Object.fromEntries(

packages/oauth/test/models-dev-refresh.test.ts

@@ -241,6 +241,21 @@ describe('refreshProviderModels modelsDev directory providers', () => {
     expect(patch.secondaryModel).toBeUndefined();
   });
 
+  it('clears secondary_model when only the legacy model key dangles beside a valid default_model', async () => {
+    vi.stubGlobal(
+      'fetch',
+      vi.fn(async () => jsonResponse({ 'brand-new-guy': makeDocument()['brand-new-guy'] })),
+    );
+    const base = makeBaseConfig();
+    base.models = { ...base.models, 'other/kept': { provider: 'other', model: 'kept' } };
+    base.secondaryModel = { defaultModel: 'other/kept', model: `${PROVIDER_ID}/deepseek-v4-flash` };
+
+    const { host, calls } = makeHost(base);
+    await refreshProviderModels(host);
+
+    expect(lastPatch(calls).secondaryModel).toBeUndefined();
+  });
+
   it('prunes vanished pool entries from secondary_model but keeps the rest of the pool', async () => {
     vi.stubGlobal(
       'fetch',