Function resolve_api_key

src/providers/__init__.py:303–335

Resolve a provider's API key: configured value first, then env vars. The configured ``providers. .api_key`` always wins. When it is empty (the common case for a freshly-added provider the user hasn't run ``login`` for), fall back to the provider's known env-var candidates via :

(
    provider_name: str, provider_cfg: dict[str, Any] | None = None
)

def resolve_api_key(
    provider_name: str, provider_cfg: dict[str, Any] | None = None
) -> str:
    """Resolve a provider's API key: configured value first, then env vars.

    The configured ``providers.<name>.api_key`` always wins. When it is empty
    (the common case for a freshly-added provider the user hasn&#x27;t run ``login``
    for), fall back to the provider&#x27;s known env-var candidates via
    :func:`src.secret_store.get_secret` — which itself checks the real process
    environment, then the global config ``env`` block. This makes every
    provider, including the registry additions, usable by simply exporting e.g.
    ``TOGETHER_API_KEY`` without hand-editing ``config.json``.

    Returns ``""`` when no key is found; callers gate fatality on
    :func:`provider_requires_api_key`.
    """
    if provider_cfg is None:
        try:
            from src.config import get_provider_config

            provider_cfg = get_provider_config(provider_name)
        except Exception:
            provider_cfg = {}
    configured = (provider_cfg or {}).get("api_key")
    if isinstance(configured, str) and configured.strip():
        return configured
    from src.secret_store import get_secret

    for env_name in provider_env_vars(provider_name):
        value = get_secret(env_name)
        if value and value.strip():
            return value
    return ""


# Legacy registry for display purposes