From 7503d4859fe464c16bcc79dfa98cdbb1166b071a Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Thu, 23 Apr 2026 02:37:11 +0100
Subject: [PATCH] fix(plugin-sdk): fall back for provider auth runtime

---
 src/plugin-sdk/provider-auth-runtime.ts | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/plugin-sdk/provider-auth-runtime.ts b/src/plugin-sdk/provider-auth-runtime.ts
index b9f7eaf68cd..0b571f223ed 100644
--- a/src/plugin-sdk/provider-auth-runtime.ts
+++ b/src/plugin-sdk/provider-auth-runtime.ts
@@ -8,6 +8,7 @@ import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { ensureAuthProfileStoreForLocalUpdate } from "../agents/auth-profiles/store.js";
 import type { OAuthCredential } from "../agents/auth-profiles/types.js";
+import { resolveApiKeyForProvider as resolveModelApiKeyForProvider } from "../agents/model-auth.js";
 import { writePrivateSecretFileAtomic } from "../infra/secret-file.js";
 
 export { resolveEnvApiKey } from "../agents/model-auth-env.js";
@@ -438,7 +439,11 @@ async function loadRuntimeModelAuthModule(): Promise<RuntimeModelAuthModule> {
 export async function resolveApiKeyForProvider(
   params: Parameters<ResolveApiKeyForProvider>[0],
 ): Promise<Awaited<ReturnType<ResolveApiKeyForProvider>>> {
-  const { resolveApiKeyForProvider } = await loadRuntimeModelAuthModule();
+  const runtimeAuth = await loadRuntimeModelAuthModule();
+  const resolveApiKeyForProvider =
+    typeof runtimeAuth.resolveApiKeyForProvider === "function"
+      ? runtimeAuth.resolveApiKeyForProvider
+      : resolveModelApiKeyForProvider;
   return resolveApiKeyForProvider(params);
 }