resolve_api_key (community/provider_credentials.py)

Utility functions for handling API keys and URL validation in provider credentials.

# Source: https://github.com/bytedance/deer-flow | License: MIT | Copyright 2025 Bytedance Ltd. and/or its affiliates
# Provided via justclaw.it.com; keep this notice with the code.
"""Single owner for the credential rules the bundled retrieval providers share.

``community/lightrag`` and ``community/ragflow`` are two read-only retrieval
providers that each carried a byte-identical copy of three rules: how a
configured API key is unwrapped from a ``SecretStr`` and normalized, how that
key is scrubbed out of text before it reaches a log line or a tool error, and
why a configured base URL must not carry userinfo. Two owners for one rule means
a fix to one provider can silently leave the other one leaking.

The marker and the message are module constants because the strings are part of
the co

... (truncated -- full source via MCP)