Merge user security changes

.gitignore

@@ -1,40 +1,8 @@
-# Python
 __pycache__/
-*.py[cod]
-*$py.class
-.venv/
-.venv_fix/
-venv/
-env/
-ENV/
-
-# OS
-.DS_Store
-Thumbs.db
-desktop.ini
-
-# Logs
-*.log
-server.log
-
-# Credentials
+*.pyc
+*.pyo
+serviceAccountKey*.json
 .env
-serviceAccountKey_dev.json
-.google-credentials.json
-
-# Backups
-*.bak
-
-# Models & Large Binaries (Unused)
-phonikud-1.0.int8.onnx
-
-# Temporary / Cache
-.pytest_cache/
-test_results/
-temp/
-tmp/
 output_locus.txt
-
-# Media (Ignore test recordings)
-*.wav
-!welcome_speech_fixed.wav
+*.log
+.DS_Store

firebase_manager.py

@@ -25,22 +25,37 @@ class FirebaseManager:
         """Initialize Firebase Admin SDK with service account."""
         try:
             from config import FIREBASE_CREDENTIALS_PATH, STORAGE_BUCKET, IS_PRODUCTION
-
-            cred_path = FIREBASE_CREDENTIALS_PATH
-            
-            if not os.path.exists(cred_path):
-                logger.warning(f"MISSING: [FIREBASE] Missing credentials at {cred_path}. Audio/Storage will fail!")
-                return
+            import json
 
             if not firebase_admin._apps:
-                cred = credentials.Certificate(cred_path)
+                cred_dict = None
+                
+                # Try loading from environment variable first (for HF Secrets)
+                env_creds = os.environ.get("FIREBASE_CREDENTIALS_JSON")
+                if env_creds:
+                    try:
+                        cred_dict = json.loads(env_creds)
+                        logger.info("INFO: [FIREBASE] Loading credentials from environment variable.")
+                    except Exception as e:
+                        logger.error(f"ERROR: [FIREBASE] Failed to parse FIREBASE_CREDENTIALS_JSON: {e}")
+
+                # Fallback to file if environment variable not set or failed
+                if not cred_dict:
+                    if os.path.exists(FIREBASE_CREDENTIALS_PATH):
+                        with open(FIREBASE_CREDENTIALS_PATH, "r", encoding="utf-8") as f:
+                            cred_dict = json.load(f)
+                        logger.info(f"INFO: [FIREBASE] Loading credentials from {FIREBASE_CREDENTIALS_PATH}.")
+                    else:
+                        logger.warning(f"MISSING: [FIREBASE] Missing credentials at {FIREBASE_CREDENTIALS_PATH} and env var unset.")
+                        return
+
+                cred = credentials.Certificate(cred_dict)
                 firebase_admin.initialize_app(cred, {
                     'storageBucket': STORAGE_BUCKET
                 })
                 logger.info(f"SUCCESS: [FIREBASE] Initialized successfully for {'PROD' if IS_PRODUCTION else 'DEV'}.")
             
             self._bucket = storage.bucket()
-            
         except Exception as e:
             logger.error(f"ERROR: [FIREBASE] Initialization failed: {e}")