Function _setup_llm_key

openkb/cli.py:136–215

Set LiteLLM API key from LLM_API_KEY env var if present. Load order (override=False, so first one wins): 1. System environment variables (already set) 2. KB-local .env (kb_dir/.env) 3. Global .env (~/.config/openkb/.env) Also propagates to provider-specific env vars (OPENAI

(kb_dir: Path | None = None)

def _setup_llm_key(kb_dir: Path | None = None) -> None:
    """Set LiteLLM API key from LLM_API_KEY env var if present.

    Load order (override=False, so first one wins):
    1. System environment variables (already set)
    2. KB-local .env  (kb_dir/.env)
    3. Global .env    (~/.config/openkb/.env)

    Also propagates to provider-specific env vars (OPENAI_API_KEY, etc.)
    so that the Agents SDK litellm provider can pick them up.
    Provider is auto-detected from the KB config when available; otherwise
    a common provider set is used as a fallback.
    """
    if kb_dir is not None:
        env_file = kb_dir / ".env"
        if env_file.exists():
            load_dotenv(env_file, override=False)

    from openkb.config import GLOBAL_CONFIG_DIR

    global_env = GLOBAL_CONFIG_DIR / ".env"
    if global_env.exists():
        load_dotenv(global_env, override=False)

    api_key = os.environ.get("LLM_API_KEY", "")

    # Try to resolve the active provider, extra headers, and request timeout
    # from the KB config
    provider: str | None = None
    extra_headers: dict[str, str] = {}
    timeout: float | None = None
    litellm_settings: dict = {}
    if kb_dir is not None:
        config_path = kb_dir / ".openkb" / "config.yaml"
        if config_path.exists():
            config = load_config(config_path)
            model = config.get("model", "")
            provider = _extract_provider(str(model))
            extra_headers = resolve_extra_headers(config)
            timeout = resolve_timeout(config)
            litellm_settings = resolve_litellm_settings(config)
            # `timeout` / `extra_headers` in the block route to the per-call
            # stashes (replacing the legacy top-level keys); the rest are globals.
            if "extra_headers" in litellm_settings:
                extra_headers = resolve_extra_headers(
                    {"extra_headers": litellm_settings.pop("extra_headers")}
                )
            if "timeout" in litellm_settings:
                timeout = resolve_timeout({"timeout": litellm_settings.pop("timeout")})
    set_extra_headers(extra_headers)
    set_timeout(timeout)
    _apply_litellm_settings(litellm_settings)

    if not api_key:
        # Check if any provider key is already set. OAuth-based providers
        # (ChatGPT subscription, GitHub Copilot) don't use API keys at all,
        # so the warning is skipped for them.
        check_keys = (f"{provider.upper()}_API_KEY",) if provider else _KNOWN_PROVIDER_KEYS