+
{t(group.configured ? "settings.enabledModels" : "settings.modelList")}
+
{visibleModels.length > 0 ? visibleModels.map((model) => (
{model}
@@ -3898,7 +3909,7 @@ function ProviderAccessCard({
)}
- {!group.keySet && (
+ {!group.configured && group.requiresKey && (
{t("settings.modelsRequireKey")}
@@ -4065,6 +4076,8 @@ function providerAccessGroups(providers: ProviderView[], t: ReturnType
= {
"settings.stepLimit.custom": "自訂",
"settings.keySet": "已設金鑰",
"settings.noKey": "無金鑰",
+ "settings.noKeyRequired": "無需金鑰",
"settings.cantDeleteDefault": "無法刪除預設模型服務",
"settings.cantRemoveDefault": "無法移除預設模型服務接入",
"settings.deleteProvider": "刪除模型服務",
diff --git a/desktop/frontend/src/locales/zh.ts b/desktop/frontend/src/locales/zh.ts
index 03c416a9c..06cc7fb9b 100644
--- a/desktop/frontend/src/locales/zh.ts
+++ b/desktop/frontend/src/locales/zh.ts
@@ -830,6 +830,7 @@ export const zh: Record = {
"settings.notificationSoundPreview": "预览",
"settings.keySet": "已设密钥",
"settings.noKey": "无密钥",
+ "settings.noKeyRequired": "无需密钥",
"settings.cantDeleteDefault": "无法删除默认模型服务",
"settings.cantRemoveDefault": "无法移除默认模型服务接入",
"settings.deleteProvider": "删除模型服务",
diff --git a/desktop/settings_app.go b/desktop/settings_app.go
index 375924952..e65b092f9 100644
--- a/desktop/settings_app.go
+++ b/desktop/settings_app.go
@@ -38,6 +38,8 @@ type ProviderView struct {
Default string `json:"default"`
APIKeyEnv string `json:"apiKeyEnv"`
KeySet bool `json:"keySet"` // the env var currently resolves to a non-empty value
+ RequiresKey bool `json:"requiresKey"`
+ Configured bool `json:"configured"` // selectable: either key is present or no key is required
KeySource string `json:"keySource,omitempty"`
KeySourcePath string `json:"keySourcePath,omitempty"`
BalanceURL string `json:"balanceUrl"`
@@ -285,11 +287,14 @@ func providerViewFromEntryForRoot(p config.ProviderEntry, builtIn, added bool, r
visionModels = models
}
key := config.ResolveCredentialForRootGlobalFirst(root, p.APIKeyEnv)
+ requiresKey := p.RequiresAPIKey()
return ProviderView{
Name: p.Name, BuiltIn: builtIn, Added: added, Kind: p.Kind, BaseURL: p.BaseURL,
Models: nonNil(models), VisionModels: nonNil(providerVisionModels(models, visionModels)), VisionModelsSet: visionModelsSet, ModelsURL: p.ModelsURL, Default: p.DefaultModel(),
APIKeyEnv: p.APIKeyEnv,
KeySet: key.Set,
+ RequiresKey: requiresKey,
+ Configured: !requiresKey || key.Set,
KeySource: key.Source.Label,
KeySourcePath: key.Source.Path,
BalanceURL: p.BalanceURL,
diff --git a/desktop/settings_app_test.go b/desktop/settings_app_test.go
index f55e06748..03c15428f 100644
--- a/desktop/settings_app_test.go
+++ b/desktop/settings_app_test.go
@@ -102,11 +102,63 @@ func TestProviderViewFromEntryShowsKeySource(t *testing.T) {
if !view.KeySet {
t.Fatal("KeySet = false, want true")
}
+ if !view.Configured {
+ t.Fatal("Configured = false, want true from resolved credentials")
+ }
if view.KeySource == "" || !strings.Contains(view.KeySource, "credentials") {
t.Fatalf("KeySource = %q, want credentials source", view.KeySource)
}
}
+func TestProviderViewFromEntryExposesNoAuthAvailability(t *testing.T) {
+ isolateDesktopUserDirs(t)
+ t.Setenv("LOCAL_API_KEY", "")
+ os.Unsetenv("LOCAL_API_KEY")
+
+ noAuth := providerViewFromEntry(config.ProviderEntry{
+ Name: "local",
+ Kind: "openai",
+ BaseURL: "http://127.0.0.1:23333/v1",
+ Models: []string{"model-a"},
+ }, false, true)
+ if noAuth.RequiresKey {
+ t.Fatal("no-auth provider RequiresKey = true, want false")
+ }
+ if !noAuth.Configured {
+ t.Fatal("no-auth provider Configured = false, want true")
+ }
+ if noAuth.KeySet {
+ t.Fatal("no-auth provider KeySet = true, want false")
+ }
+
+ legacyLoopback := providerViewFromEntry(config.ProviderEntry{
+ Name: "local",
+ Kind: "openai",
+ BaseURL: "http://127.0.0.1:23333/v1",
+ Models: []string{"model-a"},
+ APIKeyEnv: "LOCAL_API_KEY",
+ }, false, true)
+ if legacyLoopback.RequiresKey {
+ t.Fatal("loopback provider with missing legacy key env RequiresKey = true, want false")
+ }
+ if !legacyLoopback.Configured {
+ t.Fatal("loopback provider with missing legacy key env Configured = false, want true")
+ }
+
+ official := providerViewFromEntry(config.ProviderEntry{
+ Name: "deepseek",
+ Kind: "openai",
+ BaseURL: "https://api.deepseek.com",
+ Models: []string{"deepseek-v4-flash"},
+ }, true, true)
+ if !official.RequiresKey {
+ t.Fatal("official provider RequiresKey = false, want true")
+ }
+ if official.Configured {
+ t.Fatal("official provider without key Configured = true, want false")
+ }
+}
+
func TestSetProviderKeyWarnsWhenProjectEnvWillShadowSavedKey(t *testing.T) {
isolateDesktopUserDirs(t)
project := t.TempDir()
diff --git a/internal/boot/boot.go b/internal/boot/boot.go
index d1c8bbf56..b13960aa9 100644
--- a/internal/boot/boot.go
+++ b/internal/boot/boot.go
@@ -162,7 +162,7 @@ func Build(ctx context.Context, opts Options) (*control.Controller, error) {
// A resolvable model whose API key env is unset would otherwise build fine
// (RequireKey is false so the UI stays reachable) and then fail silently on the
// first request, showing as an empty/dead model. Surface the cause up front.
- if !opts.RequireKey && entry.APIKeyEnv != "" && entry.APIKey() == "" {
+ if !opts.RequireKey && entry.RequiresAPIKey() && entry.APIKey() == "" {
sink.Emit(event.Event{Kind: event.Notice, Text: fmt.Sprintf("model %q is selected but its API key %s is not set — requests will fail until you set it", modelName, entry.APIKeyEnv)})
}
jm := jobs.NewManager(sink, jobs.WithStalledWarningAfter(time.Duration(cfg.BackgroundJobStalledWarningSeconds())*time.Second))
diff --git a/internal/boot/model_error_test.go b/internal/boot/model_error_test.go
index b64afd6ee..09a0467de 100644
--- a/internal/boot/model_error_test.go
+++ b/internal/boot/model_error_test.go
@@ -82,3 +82,39 @@ api_key_env = "`+keyEnv+`"
t.Fatalf("expected a notice naming the unset key env %q; got %v", keyEnv, notices)
}
}
+
+func TestBuildDoesNotNoticeMissingAPIKeyForNoAuthLoopback(t *testing.T) {
+ const keyEnv = "REASONIX_LOCAL_GATEWAY_KEY_FOR_TEST"
+ dir := robustTempDir(t)
+ t.Chdir(dir)
+ t.Setenv(keyEnv, "")
+ writeFile(t, dir, "reasonix.toml", `
+default_model = "local/model-a"
+
+[[providers]]
+name = "local"
+kind = "openai"
+base_url = "http://127.0.0.1:23333/v1"
+models = ["model-a"]
+api_key_env = "`+keyEnv+`"
+`)
+
+ var notices []string
+ ctrl, err := Build(context.Background(), Options{
+ Sink: event.FuncSink(func(e event.Event) {
+ if e.Kind == event.Notice {
+ notices = append(notices, e.Text)
+ }
+ }),
+ })
+ if err != nil {
+ t.Fatalf("Build should allow no-auth loopback provider without a key: %v", err)
+ }
+ defer ctrl.Close()
+
+ for _, n := range notices {
+ if strings.Contains(n, keyEnv) {
+ t.Fatalf("did not expect missing-key notice for loopback no-auth provider; got %v", notices)
+ }
+ }
+}