Security: Standardize on anthropic_key and remove sensitive error messages

src/streamlit_app.py

@@ -39,35 +39,28 @@ AGE_CONTEXT = {
 
 # Handle API key setup
 try:
-    # Try multiple ways to get the API key
-    api_key = None
-    
-    # Try environment variable first
-    api_key = os.getenv("ANTHROPIC_KEY")
+    # Try to get API key from environment or secrets
+    api_key = os.getenv("anthropic_key")
     
     # Try Streamlit secrets if env var not found
     if not api_key and hasattr(st, 'secrets'):
         try:
-            api_key = st.secrets["ANTHROPIC_KEY"]  # Try direct dictionary access
+            api_key = st.secrets["anthropic_key"]
         except (KeyError, AttributeError):
-            pass  # Secret not found, continue to error message
-    
-    # Debug info (will be removed in production)
-    st.write("Available secrets:", [k for k in st.secrets.keys()] if hasattr(st, 'secrets') else "No secrets available")
-    st.write("Environment variables:", [k for k in os.environ.keys() if not k.startswith("_")])
+            pass
     
     if not api_key:
         st.error("""
-        ⚠️ Anthropic API key not found. Please make sure:
+        ⚠️ API key not found. Please make sure:
         1. You've added the secret in Hugging Face Space settings
-        2. The secret is named exactly 'ANTHROPIC_KEY'
+        2. The secret is named exactly 'anthropic_key'
         3. The Space has been rebuilt after adding the secret
         """)
         st.stop()
         
     c = Anthropic(api_key=api_key)
 except Exception as e:
-    st.error(f"Error initializing Anthropic client: {str(e)}")
+    st.error("Error initializing AI client. Please check your configuration.")
     st.stop()
 
 # Initialize session state