[diegosouzapw]

Summary

• Adds a persistent "New models" inbox: every successful model sync records the provider's listing in a new seen_models table, and models that appear in a later sync stay unread until acknowledged.
• Exposes GET /api/models/new (unread models grouped by provider) and POST /api/models/new/acknowledge (selection or all), both management routes.
• The Providers toolbar gets a "New models" button with an unread badge and a modal grouped by provider (Free tags, per-provider and mark-all-read actions).

Attribution

Thanks to @ErfanBagheri404 for the original implementation.

Changes

• src/lib/db/migrations/206_seen_models.sql — new idempotent table seen_models(provider, model_id, is_free, first_seen_at, acknowledged_at) + index (next free number on the tip; check:migration-numbering OK).
• src/lib/db/seenModels.ts — reconcileSeenModels, listUnseenModels, countUnseenModels, acknowledgeSeenModels. Seeding is per provider: the first reconcile of a provider records its whole listing as read, so an existing install, or a provider connected later, never floods the inbox. Rows are never deleted, so a model that disappears and comes back is not flagged again.
• src/lib/newModelsInbox.ts — best-effort recorder used by the sync route (never throws, never fails a sync; free flag via isFreeModel() from src/shared/utils/freeModels.ts) and the grouped read model (provider names through getProviderById / getProviderDisplayName, compatible nodes resolved from provider_nodes).
• src/app/api/providers/[id]/sync-models/route.ts — +3 lines: records the fetched listing on the regular discovery path and on the Volcano Ark console path, so the 6h auto-sync scheduler fills the inbox too.
• src/app/api/models/new/route.ts, src/app/api/models/new/acknowledge/route.ts — requireManagementAuth, Zod .safeParse body ({ models: [{provider, modelId}] }, { all: true } or empty = all), errors through createErrorResponse (sanitized). /api/models/* already classifies as MANAGEMENT; no process spawn, so not local-only.
• src/app/(dashboard)/dashboard/providers/components/NewModelsButton.tsx + 2-line mount in ProviderSummaryCard.tsx (keeps providers/page.tsx untouched).
• src/i18n/messages/*.json — 10 new providers.newModels* keys, translated in all 66 locales (inserted in place, no key reordering).

Design note: the GET reads the table only instead of rebuilding the unified /v1/models catalog on every request, so it is cheap and needs no in-memory cache; the sync path is the single writer.

Test plan

• node --import tsx/esm --test tests/unit/seen-models.test.ts — 13 tests: seed-on-first-reconcile, later model flagged, acknowledge + re-reconcile not re-flagged, disappear/reappear not re-flagged, per-provider seeding, blank/duplicate ids, acknowledge-all, raw-payload recorder, recorder never throws on DB failure, GET grouping, POST selection/all, POST 400 on invalid body, GET 500 error path leaks neither the DB path nor a stack frame. Failed before the port (modules missing).
• node --import tsx/esm --test tests/unit/seen-models-sync-route.test.ts — real POST /api/providers/[id]/sync-models twice: first sync seeds (0 unread), second sync with one extra model leaves exactly that model unread. Verified it FAILS with the original route (ℹ pass 0 ℹ fail 1) and passes with the hook.
• Related suites: seen-models, seen-models-sync-route, model-sync-route, model-sync-custom-preservation, model-sync-keeps-imported-media-models, siliconflow-model-sync, zai-web-model-sync-route, openference-sync-e2e-15762, sync-models-degraded-cached-catalog-9683, combo-stale-model-refs-13505, i18n-vi-completeness, i18n-placeholder-parity, i18n-key-completeness, i18n-locale-surfaces-parity → ℹ tests 139 ℹ pass 139 ℹ fail 0.
• npx eslint --suppressions-location config/quality/eslint-suppressions.json <changed files> → clean; npx prettier --check → clean.
• npm run typecheck:core → 57 errors, all pre-existing on the base (none in the changed files).
• npm run check:migration-numbering → OK (203 migrations); check:route-validation:t06 → PASS; check:openapi-coverage → PASS; check:openapi-routes → OK; check:route-guard-membership → OK; check:file-size → OK.
• npm run i18n:check-keys → OK (66 locales, all 13765 keys); i18n:check-ratio → OK; check-new-key-coverage → PASS; i18n:check-ui-coverage → PASS.
• check-pr-test-policy → PASS; check:test-masking → OK.

⚠️ base-red inherited: #15306 — unit/vitest/integration/package-artifact gates on release/v3.8.52

[github-actions]

CI Coverage Report

• Coverage job: skipped
• PR test policy: success

Coverage artifact was not available for this run.

[diegosouzapw]

Re-homed to release/v3.8.53: v3.8.52 entered its release freeze, so the branch now belongs to the release captain and development continues on the next cycle. Nothing is wrong with this PR — it just needed a live base. No action needed from you; CI will re-run against the new base.