fix: refresh Pi credential readiness

frontend/src/shell/PiManagement.test.tsx

@@ -81,6 +81,38 @@ test("saves only a selected non-secret configuration", async () => {
   expect(screen.getByRole("status", { name: "Pi management feedback" })).toHaveTextContent("Defaults saved");
 });
 
+// Catches a provider switch updating only the saved config while leaving the credential rail
+// attached to the previously selected provider.
+test("shows authoritative credential presence after saving a different provider", async () => {
+  const user = userEvent.setup();
+  let saved = false;
+  server.use(
+    http.get("/api/pi-management/status", () => HttpResponse.json(saved ? {
+      ...readyStatus,
+      credentials: "missing",
+      config: { provider: "deepseek", model: "deepseek-v4", reasoning: "medium" },
+      checkedAt: "2026-08-05T10:02:00.000Z",
+    } : readyStatus)),
+    http.put("/api/pi-management/config", async ({ request }) => {
+      saved = true;
+      return HttpResponse.json({
+        ...await request.json() as object,
+        updatedAt: "2026-08-05T10:01:00.000Z",
+      });
+    }),
+  );
+  renderManagement();
+
+  expect(await screen.findByText("Credentials present")).toBeVisible();
+  await user.selectOptions(screen.getByLabelText("Provider"), "deepseek");
+  await user.click(screen.getByRole("button", { name: "Save defaults" }));
+
+  expect(await screen.findByText("Credentials missing")).toBeVisible();
+  expect(screen.queryByText("Credentials present")).not.toBeInTheDocument();
+  expect(screen.getByLabelText("Provider")).toHaveValue("deepseek");
+  expect(screen.getByRole("status", { name: "Pi management feedback" })).toHaveTextContent("Defaults saved");
+});
+
 test("runs the saved-configuration test without changing credential presence", async () => {
   const user = userEvent.setup();
   let tests = 0;
@@ -196,17 +228,28 @@ test("shows an explicit recoverable incomplete state when no provider model is a
 });
 
 test("keeps suggested draft choices distinct from invalid persisted defaults until save succeeds", async () => {
+  let configured = false;
   const persisted = {
     ...readyStatus,
     credentials: "missing",
     config: { provider: "retired", model: "old-model", reasoning: "medium" },
   };
   server.use(
-    http.get("/api/pi-management/status", () => HttpResponse.json(persisted)),
-    http.put("/api/pi-management/config", async ({ request }) => HttpResponse.json({
-      ...await request.json() as object,
-      updatedAt: "2026-08-05T10:05:00.000Z",
-    })),
+    http.get("/api/pi-management/status", () => HttpResponse.json(configured ? {
+      ...readyStatus,
+      credentials: "missing",
+      config: { provider: "zai", model: "glm-5.2", reasoning: "medium" },
+      checkedAt: "2026-08-05T10:05:00.000Z",
+    } : persisted)),
+    http.put("/api/pi-management/config", () => {
+      configured = true;
+      return HttpResponse.json({
+        provider: "zai",
+        model: "glm-5.2",
+        reasoning: "medium",
+        updatedAt: "2026-08-05T10:05:00.000Z",
+      });
+    }),
   );
   const user = userEvent.setup();
   renderManagement();