settings.svelte.ts's setLlmProvider now accepts an optional apiKey (forwarded straight to the set_llm_provider command, which is the only place it gets stored — the OS credential store) and DEFAULT_SETTINGS gains hosted_ai_acknowledged. acknowledgeHostedAi() persists the one-time hosted-AI banner acknowledgment the same way acknowledgeConsent() does for recording consent.