The owner's asymmetry find (interlude over the zero-keys wave): the
models-unconfigured case guards BEFORE send — no request, no chat
created, setup opens — but the key cases only reacted to the 503 after
POST /api/chats had already created the record, leaving orphan error-shell
chats in the sidebar. The guards now twin the models mechanism on BOTH
creation paths (home start(), /chat/new send()):
- Zero keys (useZeroKeys reuse): no provider key present -> skip creation
and send entirely, open SetupDialog (stage 1 first-key screen).
- Strong-provider key missing (owner-approved extension): keys exist
generally but the strong slot's pinned provider has none — the original
deleted-key scenario. New pure strongKeyless(catalog) in setup-cta.tsx:
slots.strong resolved pin + providers[] (present-key only, the catalog's
own federation surface), false when unconfigured (the models guard owns
that case) or catalog not loaded (the server 503 gate remains the belt).
useStrongKeyless rides useModelCatalog, re-reading on the 'keys' AND
'models' signals (a deleted key or a re-pinned slot flips it live).
Both guards run after the configured check, same
skip-everything-and-open-setup treatment; 'force' (setup's onDone replay)
bypasses both — completing setup implies a keyed provider. /chat/[id]
sessions keep the 503 revert-draft interception unchanged: those chats
legitimately exist.
Pins: strongKeyless fires on a keyless strong pin (keys elsewhere or
none), never fires with the pin's key present (incl. the keyPresent=false
belt), false on unset pin / unloaded catalog. Normal-path pins ride the
existing startDraftSession contract suite. Live-verified on :3001 under
LH_IGNORE_ENV_KEYS=1 with a file-key anthropic + openrouter-pinned strong:
both guards on both pages (setup opens stage-1 / stage-2 respectively,
draft preserved, 154 chats unchanged, zero sidebar entries), normal path
with a keyed strong provider still creates and lands the prompt redirect.
929/929, tsc/lint/build green.
amosblomqvist
66090ed769