@vellumai/assistant 0.4.52 → 0.4.53

package/src/workspace/provider-commit-message-generator.ts

@@ -1,6 +1,7 @@
 import { getConfig } from "../config/loader.js";
 import { resolveConfiguredProvider } from "../providers/provider-send-message.js";
 import type { Message } from "../providers/types.js";
+import { getSecureKeyAsync } from "../security/secure-keys.js";
 import { getLogger } from "../util/logger.js";
 import type { CommitContext } from "./commit-message-provider.js";
 import { DefaultCommitMessageProvider } from "./commit-message-provider.js";
@@ -146,10 +147,13 @@ export class ProviderCommitMessageGenerator {
       const hasAnyKeylessCandidate = candidates.some((name) =>
         KEYLESS_PROVIDERS.has(name),
       );
-      const hasAnyProviderKey = candidates.some((name) => {
-        const value = config.apiKeys[name];
-        return typeof value === "string" && value.length > 0;
-      });
+      const keyChecks = await Promise.all(
+        candidates.map(async (name) => {
+          const value = await getSecureKeyAsync(name);
+          return typeof value === "string" && value.length > 0;
+        }),
+      );
+      const hasAnyProviderKey = keyChecks.some(Boolean);
       if (!hasAnyKeylessCandidate && !hasAnyProviderKey) {
         log.debug(
           "No API keys available for configured/fallback providers; falling back to deterministic",
@@ -168,8 +172,8 @@ export class ProviderCommitMessageGenerator {
 
     // Step 2b: API key preflight for the selected provider (skip keyless).
     if (!KEYLESS_PROVIDERS.has(selectedProviderName)) {
-      const providerApiKey = config.apiKeys[selectedProviderName];
-      if (!providerApiKey || providerApiKey === "") {
+      const providerApiKey = await getSecureKeyAsync(selectedProviderName);
+      if (!providerApiKey) {
         log.debug(
           {
             selectedProvider: selectedProviderName,