feat: add GEMINI_API_KEY as secure environment variable

Declare GEMINI_API_KEY in blocklet.yml with secure: true so the value
is masked in the Blocklet dashboard. Reorder the key lookup to prefer
the secure env var over the plaintext preferences field.

Co-authored-by: Claude <noreply@anthropic.com>

Author: zcoderr

api/src/ai/voice-model.ts

@@ -10,9 +10,9 @@ const DEFAULT_VOICE = 'Aoede';
 
 export function getGeminiApiKey(): string {
   const key =
-    (Config.env.preferences?.gemini_api_key as string) ||
     process.env.GEMINI_API_KEY ||
     process.env.GOOGLE_API_KEY ||
+    (Config.env.preferences?.gemini_api_key as string) ||
     '';
   return key;
 }

blocklet.yml

@@ -13,7 +13,7 @@ repository:
   type: git
   url: git+https://github.com/blocklet/create-blocklet.git
 specVersion: 1.2.8
-version: 0.1.9
+version: 0.1.10
 logo: logo.png
 files:
   - dist
@@ -86,6 +86,12 @@ environments:
     required: false
     default: ''
     secure: false
+  - name: GEMINI_API_KEY
+    description: Google Gemini API key for voice chat
+    required: false
+    secure: true
+    default: ''
+    shared: false
   - name: APPLE_CLIENT_ID
     description: Apple Sign-In client ID
     required: false

package.json

@@ -1,7 +1,7 @@
 {
   "name": "aistro-ai",
   "private": true,
-  "version": "0.1.9",
+  "version": "0.1.10",
   "scripts": {
     "dev": "blocklet dev",
     "lint": "tsc --noEmit && eslint src api/src --ext .mjs,.js,.jsx,.ts,.tsx",

version

@@ -1 +1 @@
-0.1.9
+0.1.10