Local CLI chat does not supply BYOK credentials to finalize synthesis. Resolve per-protocol saved settings before calling the daemon and show an actionable toast instead of a generic BAD_REQUEST when credentials are missing. Fixes #2959