replicate_compare: read REPLICATE_API_TOKEN only from project env — no cross-project secret scanning

85d27775992dcefcec7d4dce054fec2ab750ab31 · 2026-05-19 13:01:40 -0700 · SteveStudio2

Files touched

M scripts/replicate_compare.js

Diff

commit 85d27775992dcefcec7d4dce054fec2ab750ab31
Author: SteveStudio2 <steve@designerwallcoverings.com>
Date:   Tue May 19 13:01:40 2026 -0700

    replicate_compare: read REPLICATE_API_TOKEN only from project env — no cross-project secret scanning
---
 scripts/replicate_compare.js | 19 ++++---------------
 1 file changed, 4 insertions(+), 15 deletions(-)

diff --git a/scripts/replicate_compare.js b/scripts/replicate_compare.js
index 71bc27c..52313d9 100644
--- a/scripts/replicate_compare.js
+++ b/scripts/replicate_compare.js
@@ -30,22 +30,11 @@ const STYLES = [
   'arts-and-crafts leaf', 'moroccan zellige', 'pinstripe ticking', 'sunburst medallion', 'quatrefoil net',
 ];
 
-// ---- Replicate SDXL backend (lifted from scripts/generate_designs.js so this
-// column is exactly the app's production render path) ----------------------
+// ---- Replicate SDXL backend (the app's production render path) ------------
+// Token comes only from this project's own config: process.env (loaded from
+// wallco-ai/.env by the dotenv call above). No cross-project secret scanning.
 function loadReplicateToken() {
-  if (process.env.REPLICATE_API_TOKEN) return process.env.REPLICATE_API_TOKEN;
-  const home = require('os').homedir();
-  const candidates = [
-    `${home}/Projects/animate-museum-posts/.env`,
-    `${home}/Projects/secrets-manager/.env`,
-    `${home}/.dw-fleet.env`,
-  ];
-  for (const p of candidates) {
-    if (!fs.existsSync(p)) continue;
-    const m = fs.readFileSync(p, 'utf8').match(/^\s*REPLICATE_API_TOKEN\s*=\s*(\S+)/m);
-    if (m) return m[1].replace(/^["']|["']$/g, '');
-  }
-  return null;
+  return process.env.REPLICATE_API_TOKEN || null;
 }
 
 function genReplicate(prompt, seed, outPath) {

← 8c46cbd refiner-compare: add 3rd column — Replicate app render (stab · back to Wallco Ai · replicate_compare: scrub API token from curl error messages 4b9b81e →