fix(litellm): close audit gaps from PR #4644

- byok.ts: add litellm branch to getApiKeyWithBYOK so workflow
  block execution can resolve the proxy key instead of throwing
  "API key is required for litellm ..."
- check-api-validation-contracts.ts: bump route baseline 755 -> 756
  to account for the new /api/providers/litellm/models route
- .env.example: document LITELLM_BASE_URL / LITELLM_API_KEY
- copilot edit-workflow validation: include LiteLLM in the list of
  user-configured prefixed providers shown to the model
- providers/utils.ts: drop stray optional-chain on providers.litellm
  to match the vllm pattern
- lint: apply biome formatting fixes (multi-line if, SVG path,
  multi-line DYNAMIC_MODEL_PROVIDERS)

Author: waleedlatif1

apps/sim/.env.example

@@ -48,6 +48,8 @@ API_ENCRYPTION_KEY=your_api_encryption_key # Use `openssl rand -hex 32` to gener
 # OLLAMA_URL=http://localhost:11434  # URL for local Ollama server - uncomment if using local models
 # VLLM_BASE_URL=http://localhost:8000    # Base URL for your self-hosted vLLM (OpenAI-compatible)
 # VLLM_API_KEY=                          # Optional bearer token if your vLLM instance requires auth
+# LITELLM_BASE_URL=http://localhost:4000 # Base URL for your LiteLLM proxy (OpenAI-compatible)
+# LITELLM_API_KEY=                       # Optional bearer token if your LiteLLM proxy requires auth
 # FIREWORKS_API_KEY=                     # Optional Fireworks AI API key for model listing
 # NEXT_PUBLIC_BEDROCK_DEFAULT_CREDENTIALS=true  # Set when using AWS default credential chain (IAM roles, ECS task roles, IRSA). Hides credential fields in Agent block UI.
 # AZURE_OPENAI_ENDPOINT=                        # Azure OpenAI endpoint (hides field in UI when set alongside NEXT_PUBLIC_AZURE_CONFIGURED)

apps/sim/blocks/utils.ts

@@ -165,7 +165,8 @@ function shouldRequireApiKeyForModel(model: string): boolean {
   }
 
   const storeProvider = getProviderFromStore(normalizedModel)
-  if (storeProvider === 'ollama' || storeProvider === 'vllm' || storeProvider === 'litellm') return false
+  if (storeProvider === 'ollama' || storeProvider === 'vllm' || storeProvider === 'litellm')
+    return false
   if (storeProvider) return true
 
   if (isOllamaConfigured) {

apps/sim/components/icons.tsx

@@ -4444,10 +4444,7 @@ export function LitellmIcon(props: SVGProps<SVGSVGElement>) {
     <svg {...props} fill='none' viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'>
       <title>LiteLLM</title>
       <rect width='24' height='24' rx='4' fill='#1A56DB' />
-      <path
-        d='M6 7h2v10H6V7zm4 0h2v8h4v2h-6V7z'
-        fill='white'
-      />
+      <path d='M6 7h2v10H6V7zm4 0h2v8h4v2h-6V7z' fill='white' />
     </svg>
   )
 }

apps/sim/lib/api-key/byok.ts

@@ -74,6 +74,12 @@ export async function getApiKeyWithBYOK(
     return { apiKey: userProvidedKey || env.VLLM_API_KEY || 'empty', isBYOK: false }
   }
 
+  const isLitellmModel =
+    provider === 'litellm' || useProvidersStore.getState().providers.litellm.models.includes(model)
+  if (isLitellmModel) {
+    return { apiKey: userProvidedKey || env.LITELLM_API_KEY || 'empty', isBYOK: false }
+  }
+
   const isFireworksModel =
     provider === 'fireworks' ||
     useProvidersStore.getState().providers.fireworks.models.includes(model)

apps/sim/lib/copilot/tools/server/workflow/edit-workflow/validation.ts

@@ -369,7 +369,7 @@ export function validateValueForSubBlockType(
               blockType,
               field: fieldName,
               value,
-              error: `Unknown model id "${trimmed}" for block "${blockType}". Read components/blocks/${blockType}.json (the model.options array) for valid ids; prefer entries with recommended: true and avoid deprecated: true. For user-configured models (Ollama, vLLM, OpenRouter, Fireworks), prefix the id with the provider slash, e.g. "ollama/llama3.1:8b".${suggestionText}`,
+              error: `Unknown model id "${trimmed}" for block "${blockType}". Read components/blocks/${blockType}.json (the model.options array) for valid ids; prefer entries with recommended: true and avoid deprecated: true. For user-configured models (Ollama, vLLM, LiteLLM, OpenRouter, Fireworks), prefix the id with the provider slash, e.g. "ollama/llama3.1:8b".${suggestionText}`,
             },
           }
         }

apps/sim/providers/models.ts

@@ -2817,7 +2817,13 @@ export function getProviderModels(providerId: string): string[] {
   return PROVIDER_DEFINITIONS[providerId]?.models.map((m) => m.id) || []
 }
 
-export const DYNAMIC_MODEL_PROVIDERS = ['ollama', 'vllm', 'litellm', 'openrouter', 'fireworks'] as const
+export const DYNAMIC_MODEL_PROVIDERS = [
+  'ollama',
+  'vllm',
+  'litellm',
+  'openrouter',
+  'fireworks',
+] as const
 
 function getAllStaticModelIds(): string[] {
   const ids: string[] = []

apps/sim/providers/utils.ts

@@ -753,7 +753,7 @@ export function getApiKey(provider: string, model: string, userProvidedKey?: str
   }
 
   const isLitellmModel =
-    provider === 'litellm' || useProvidersStore.getState().providers.litellm?.models.includes(model)
+    provider === 'litellm' || useProvidersStore.getState().providers.litellm.models.includes(model)
   if (isLitellmModel) {
     return userProvidedKey || 'empty'
   }

scripts/check-api-validation-contracts.ts

@@ -9,8 +9,8 @@ const QUERY_HOOKS_DIR = path.join(ROOT, 'apps/sim/hooks/queries')
 const SELECTOR_HOOKS_DIR = path.join(ROOT, 'apps/sim/hooks/selectors')
 
 const BASELINE = {
-  totalRoutes: 755,
-  zodRoutes: 755,
+  totalRoutes: 756,
+  zodRoutes: 756,
   nonZodRoutes: 0,
 } as const