Remove NEXT_PUBLIC API keys - hardcode availability instead

↗ view on GitHub · clapointe-carbonleo · 2026-05-06 · c52c1648

API keys must never be NEXT_PUBLIC_* (they end up in the browser bundle).
Model availability now hardcoded to 'configured' so all models show as available.
The backend uses its own server-side keys for actual API calls.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Repository clapointe-carbonleo/mike-legal
Author clapointe-carbonleo <clapointe@carbonleo.com>
Authored
Parents 35fd7788
Stats 1 file changed , +2 , -2
Part of Stop leaking Anthropic / Gemini keys via NEXT_PUBLIC env vars

Capture this commit into my fork

Download a Markdown prompt that tells Claude how to port this exact commit into your working tree. Run it via claude -p < capture-commit-c52c1648.md from inside the repo you want the change in.

⬇ Download capture-commit-c52c1648.md