Update services/geminiService.ts

services/geminiService.ts

@@ -5,7 +5,15 @@ import { LAYER_DEFINITIONS } from '../constants';
 
 // Key Management
 const getEnvKey = () => {
-  // 1. Try Vite standard env var (Matches Dockerfile VITE_ prefix)
+  // STRICT BYOK (Bring Your Own Key) POLICY for Production:
+  // We ignore environment variables in production to ensure the host's key isn't leaked/used by public visitors.
+  // @ts-ignore
+  if (typeof import.meta !== 'undefined' && import.meta.env && import.meta.env.PROD) {
+    console.log("Production mode detected: Enforcing BYOK. Environment API keys are ignored.");
+    return '';
+  }
+
+  // 1. Try Vite standard env var (Matches Dockerfile VITE_ prefix) - Development Only
   // @ts-ignore - import.meta is standard in Vite but TS might complain without config
   if (typeof import.meta !== 'undefined' && import.meta.env && import.meta.env.VITE_GEMINI_API_KEY) {
     // @ts-ignore