Zero-keys wave: provider-key gate renders honestly everywhere

Over Platform's 66dbea9 key-presence seam, the five owner-locked tasks:

1. Zero-keys pill — components/setup-cta.tsx: pure hasProviderKey
   (classifyKeys reuse — tool keys like Deepgram never count), useZeroKeys
   (GET /api/keys, re-read on the new lh:settings-saved 'keys' signal),
   ZeroKeysPill (testid setup-cta-keys) taking PRECEDENCE over the models
   CTA on chat/home/new-session. SettingsSection gains 'keys'; keys-section
   dispatches after save AND delete.

2. Setup stage 1 is self-contained: provider picker (MenuShell +
   ProviderMenuList) + key paste + Save via PUT /api/keys/:id — the dialog
   STAYS MOUNTED; its own save dispatches the keys signal, the fetch effect
   re-runs on it, and the stage flips to the pickers on its own.
   onOpenKeys + setup-open-keys die. SetupKeysBody exported for SSR pins.

3. parseProviderKeyRefusal (chat.tsx, envelope-verbatim twin of
   parseModelsRefusal) joins the revert-draft-and-open-setup interception;
   activity-dock reads 'needs a provider key'; dispatch-card shows
   'Add a key' — both deep-link setup, which lands on stage 1 by itself.

4. Dictation trio: the token route's only 503 (missing Deepgram key)
   becomes the client-authored DICTATION_KEYLESS short line; the errored
   idle click clears the error and deep-links Settings -> Keys ->
   DEEPGRAM_API_KEY via the new open(section, row) seam (dialog landOnRow
   -> SettingsDialogBody initialRow -> KeysSection openRow follow-effect).

Live-verified on :3001 under LH_IGNORE_ENV_KEYS=1 (the fresh-user switch):
pill on all three surfaces + precedence over the CTA, stage-1 save ->
auto-advance with dialog mounted, real 503 send refusal reverting the
draft and opening setup, dictation 503 -> short line -> Settings lands on
the unfolded Deepgram row with the error cleared, keys-section save and
delete both flipping the pill live, and a fabricated refused research job
rendering the 'Add a key' dispatch card. 926/926, tsc/lint/build green.

components/new-session.tsx

@@ -8,7 +8,7 @@ import { DictationBar, useDictation } from "@/components/dictation";
 import { useDefaultSettings } from "@/components/default-settings";
 import { SidebarToggle } from "@/components/sidebar";
 import { SetupDialog } from "@/components/setup-dialog";
-import { useSettingsDialog } from "@/components/settings/settings-dialog.tsx";
+import { useZeroKeys, ZeroKeysPill } from "@/components/setup-cta";
 import { StatsBar } from "@/components/stats-bar";
 import type { ChatSettings } from "@/src/core";
 
@@ -165,8 +165,10 @@ export function NewSession({
 	// 33 providers, chats cannot start. The draft stays in the textarea;
 	// Save completes and the send replays.
 	const [configured, setConfigured] = useState(initialConfigured);
+	// The zero-keys truth (zero-keys wave): no provider key = the pill
+	// takes precedence over the models CTA (keys come first in the chain).
+	const zeroKeys = useZeroKeys();
 	const [setupOpen, setSetupOpen] = useState(false);
-	const { open: openSettings } = useSettingsDialog();
 
 	const send = useCallback((force = false) => {
 		if (!text.trim() || busy) return;
@@ -195,7 +197,10 @@ export function NewSession({
 				settings={settings}
 				onSettingsSaved={saveDraft}
 				setupCta={
-					!configured && (
+					zeroKeys ? (
+						<ZeroKeysPill onOpen={() => setSetupOpen(true)} />
+					) : (
+						!configured && (
 						<div className="pointer-events-auto mb-2 flex justify-center">
 							<button
 								type="button"
@@ -206,10 +211,12 @@ export function NewSession({
 								Set up your models — chats start after the three picks
 							</button>
 						</div>
+						)
 					)
 				}
 			/>
-			{/* First-run setup: the send interception's landing surface. */}
+			{/* First-run setup: the send interception's landing surface — stage
+			    1 is the self-contained first-key screen (zero-keys wave). */}
 			<SetupDialog
 				open={setupOpen}
 				onClose={() => setSetupOpen(false)}
@@ -218,11 +225,7 @@ export function NewSession({
 					setSetupOpen(false);
 					send(true); // the queued draft sends
 				}}
-				onOpenKeys={() => {
-					setSetupOpen(false);
-					openSettings("keys");
-				}}
-			/>
+				/>
 		</>
 	);
 }