Update app.py

app.py

@@ -11,10 +11,10 @@ from datetime import datetime, timedelta
 import os
 
 # Load environment variables for Hugging Face Spaces
-OPENAI_API_KEY = os.getenv("OaPI1")
-DEEPSEEK_API_KEY = os.getenv("DAPI")
-GOOGLE_CSE_KEYS = os.getenv("API1")  # comma-separated
-GOOGLE_CSE_IDS = os.getenv("CX1")    # comma-separated
+OPENAI_API_KEY = os.getenv("OPENAI_API_KEY", "")
+DEEPSEEK_API_KEY = os.getenv("DEEPSEEK_API_KEY", "")
+GOOGLE_CSE_KEYS = os.getenv("GOOGLE_CSE_KEYS", "")  # comma-separated
+GOOGLE_CSE_IDS = os.getenv("GOOGLE_CSE_IDS", "")    # comma-separated
 
 class CitationChecker:
     def __init__(self):
@@ -556,32 +556,48 @@ def create_interface():
             with gr.Column(scale=1):
                 gr.Markdown("## 🔑 API Configuration")
                 
+                # Show status of environment variables without exposing them
+                env_status = []
+                if OPENAI_API_KEY:
+                    env_status.append("✅ OpenAI API Key (from environment)")
+                if DEEPSEEK_API_KEY:
+                    env_status.append("✅ DeepSeek API Key (from environment)")
+                if GOOGLE_CSE_KEYS:
+                    env_status.append("✅ Google CSE Keys (from environment)")
+                if GOOGLE_CSE_IDS:
+                    env_status.append("✅ Google CSE IDs (from environment)")
+                
+                if env_status:
+                    gr.Markdown("**🔐 Environment Variables Detected:**\n" + "\n".join(env_status) + "\n\n*Leave fields below empty to use environment variables*")
+                else:
+                    gr.Markdown("**⚠️ No environment variables detected - please enter API keys manually**")
+                
                 openai_key = gr.Textbox(
                     label="OpenAI API Key",
                     type="password",
-                    placeholder="sk-... (or set OPENAI_API_KEY environment variable)",
-                    value=OPENAI_API_KEY if OPENAI_API_KEY else ""
+                    placeholder="sk-... (leave empty to use environment variable)",
+                    value=""  # NEVER pre-fill with actual keys!
                 )
                 
                 deepseek_key = gr.Textbox(
                     label="DeepSeek API Key (Optional)",
                     type="password",
-                    placeholder="sk-... (or set DEEPSEEK_API_KEY environment variable)",
-                    value=DEEPSEEK_API_KEY if DEEPSEEK_API_KEY else ""
+                    placeholder="sk-... (leave empty to use environment variable)",
+                    value=""  # NEVER pre-fill with actual keys!
                 )
                 
                 google_keys = gr.Textbox(
                     label="Google CSE API Keys",
-                    placeholder="key1,key2,key3 (comma-separated) or set GOOGLE_CSE_KEYS env var",
+                    placeholder="key1,key2,key3 (comma-separated, leave empty to use env var)",
                     info="Multiple keys for better rate limiting",
-                    value=GOOGLE_CSE_KEYS if GOOGLE_CSE_KEYS else ""
+                    value=""  # NEVER pre-fill with actual keys!
                 )
                 
                 google_ids = gr.Textbox(
                     label="Google CSE IDs",
-                    placeholder="cx1,cx2,cx3 (comma-separated) or set GOOGLE_CSE_IDS env var",
+                    placeholder="cx1,cx2,cx3 (comma-separated, leave empty to use env var)",
                     info="Corresponding CSE IDs for each API key",
-                    value=GOOGLE_CSE_IDS if GOOGLE_CSE_IDS else ""
+                    value=""  # NEVER pre-fill with actual keys!
                 )
         
         with gr.Row():