Refactor: Use st.secrets for all API keys instead of os.environ.get()

Author: gitwalter

agents/rag/query_analyst_agent.py

@@ -293,30 +293,9 @@ def _fallback_analysis(self, query: str) -> Dict[str, Any]:
         }
 
     def _get_gemini_api_key(self) -> Optional[str]:
-        """Get Gemini API key from environment or secrets."""
-        import os
-        from pathlib import Path
-        
-        # Try environment variable first
-        api_key = os.environ.get('GEMINI_API_KEY')
-        if api_key:
-            return api_key
-        
-        # Try Streamlit secrets
-        try:
-            secrets_path = Path.home() / '.streamlit' / 'secrets.toml'
-            if secrets_path.exists():
-                with open(secrets_path, 'r') as f:
-                    for line in f:
-                        if line.startswith('GEMINI_API_KEY'):
-                            # Parse: GEMINI_API_KEY = "value" or GEMINI_API_KEY="value"
-                            api_key = line.split('=', 1)[1].strip().strip('"').strip("'")
-                            if api_key:
-                                return api_key
-        except Exception as e:
-            logger.warning(f"Could not read secrets.toml: {e}")
-        
-        return None
+        """Get Gemini API key from Streamlit secrets."""
+        from utils.config import get_gemini_api_key
+        return get_gemini_api_key()
 
     def validate_task(self, task: Dict[str, Any]) -> bool:
         """Validate that task has required query field."""

agents/rag/writer_agent.py

@@ -386,27 +386,9 @@ def _determine_style(self, intent: str) -> str:
         return style_map.get(intent, 'technical')
 
     def _get_gemini_api_key(self) -> Optional[str]:
-        """Get Gemini API key."""
-        import os
-        from pathlib import Path
-        
-        api_key = os.environ.get('GEMINI_API_KEY')
-        if api_key:
-            return api_key
-        
-        try:
-            secrets_path = Path.home() / '.streamlit' / 'secrets.toml'
-            if secrets_path.exists():
-                with open(secrets_path, 'r') as f:
-                    for line in f:
-                        if line.startswith('GEMINI_API_KEY'):
-                            api_key = line.split('=', 1)[1].strip().strip('"').strip("'")
-                            if api_key:
-                                return api_key
-        except Exception as e:
-            logger.warning(f"Could not read secrets: {e}")
-        
-        return None
+        """Get Gemini API key from Streamlit secrets."""
+        from utils.config import get_gemini_api_key
+        return get_gemini_api_key()
 
     def validate_task(self, task: Dict[str, Any]) -> bool:
         """Validate task has required fields."""

apps/rag_management_app.py

@@ -1816,11 +1816,12 @@ def system_settings_page():
 
     # LangSmith Tracing Status
     st.markdown("### 🔍 LangSmith Tracing")
-    langsmith_enabled = os.environ.get('LANGCHAIN_TRACING_V2', 'false').lower() == 'true'
+    from utils.config import get_langchain_tracing_enabled, get_langchain_project
+    langsmith_enabled = get_langchain_tracing_enabled()
 
     if langsmith_enabled:
         st.success("✅ LangSmith Tracing Enabled")
-        st.info(f"**Project:** {os.environ.get('LANGCHAIN_PROJECT', 'default')}")
+        st.info(f"**Project:** {get_langchain_project()}")
         st.markdown("🔗 View traces at: [https://smith.langchain.com/](https://smith.langchain.com/)")
     else:
         st.warning("⚠️ LangSmith Tracing Disabled")