Support HF-safe Space variable names

README.md

@@ -132,6 +132,14 @@ MODEL_NAME=<your-model-id>
 HF_TOKEN=<your-token>
 ```
 
+If your Hugging Face Space rejects underscores in variable names, FraudShield also accepts these aliases:
+
+```bash
+APIBASEURL=https://router.huggingface.co/v1
+MODELNAME=<your-model-id>
+HFTOKEN=<your-token>
+```
+
 Run it with:
 
 ```bash
@@ -260,6 +268,7 @@ Then verify:
 Do not commit or publish:
 
 - `HF_TOKEN`
+- `HFTOKEN`
 - `OPENAI_API_KEY`
 - `API_KEY`
 - `kaggle.json`
@@ -269,7 +278,9 @@ Do not commit or publish:
 Safe to keep public:
 
 - `API_BASE_URL`
+- `APIBASEURL`
 - `MODEL_NAME`
+- `MODELNAME`
 - `openenv.yaml`
 - `fraudshield_baseline_results.json`
 - `data/fraudshield_cases.json`

inference.py

@@ -19,6 +19,16 @@ logger = logging.getLogger(__name__)
 RESULTS_FILE = "fraudshield_baseline_results.json"
 
 
+def get_env(*names: str, default: str = "") -> str:
+    """Return the first non-empty environment variable from a list of aliases."""
+
+    for name in names:
+        value = os.getenv(name)
+        if value:
+            return value
+    return default
+
+
 def run_task(env: FraudShieldEnvironment, agent: object, task_name: str) -> Tuple[List[str], List[str], List[float]]:
     """Run one task episode and capture the full prediction trace."""
 
@@ -75,8 +85,8 @@ def main() -> Dict[str, object]:
     logger.info(
         "Agent mode: %s | API_BASE_URL=%s | MODEL_NAME=%s",
         getattr(agent, "name", agent.__class__.__name__),
-        os.getenv("API_BASE_URL", "https://router.huggingface.co/v1"),
-        os.getenv("MODEL_NAME", "<offline-heuristic>"),
+        get_env("API_BASE_URL", "APIBASEURL", default="https://router.huggingface.co/v1"),
+        get_env("MODEL_NAME", "MODELNAME", default="<offline-heuristic>"),
     )
 
     easy_predictions, easy_ground_truth, easy_confidences = run_task(env, agent, "easy")
@@ -96,8 +106,8 @@ def main() -> Dict[str, object]:
     )
     grading_result["metadata"] = {
         "agent_name": getattr(agent, "name", agent.__class__.__name__),
-        "api_base_url": os.getenv("API_BASE_URL", "https://router.huggingface.co/v1"),
-        "model_name": os.getenv("MODEL_NAME", ""),
+        "api_base_url": get_env("API_BASE_URL", "APIBASEURL", default="https://router.huggingface.co/v1"),
+        "model_name": get_env("MODEL_NAME", "MODELNAME"),
         "seed": 42,
         "data_snapshot": env.data_loader.get_bundle_summary(),
         "tasks": {

llm_agent.py

@@ -17,6 +17,16 @@ except ImportError:  # pragma: no cover - dependency installed in submission ima
 logger = logging.getLogger(__name__)
 
 
+def get_env(*names: str, default: Optional[str] = None) -> Optional[str]:
+    """Return the first non-empty environment variable from a list of aliases."""
+
+    for name in names:
+        value = os.getenv(name)
+        if value:
+            return value
+    return default
+
+
 class HeuristicFraudDetectionAgent:
     """Deterministic local fallback for offline testing."""
 
@@ -185,18 +195,24 @@ class OpenAIFraudDetectionAgent:
 def build_default_agent() -> object:
     """Create the required OpenAI client agent when configured, else use the offline fallback."""
 
-    model_name = os.getenv("MODEL_NAME")
-    api_key = os.getenv("HF_TOKEN") or os.getenv("OPENAI_API_KEY") or os.getenv("API_KEY")
-    api_base_url = os.getenv("API_BASE_URL", "https://router.huggingface.co/v1")
+    model_name = get_env("MODEL_NAME", "MODELNAME")
+    api_key = get_env("HF_TOKEN", "HFTOKEN", "OPENAI_API_KEY", "OPENAIAPIKEY", "API_KEY", "APIKEY")
+    api_base_url = get_env("API_BASE_URL", "APIBASEURL", default="https://router.huggingface.co/v1")
 
     if model_name or api_key:
         if not model_name or not api_key:
-            raise RuntimeError("Both MODEL_NAME and HF_TOKEN/OPENAI_API_KEY must be set for OpenAI baseline mode.")
+            raise RuntimeError(
+                "Both MODEL_NAME/MODELNAME and HF_TOKEN/HFTOKEN "
+                "(or OPENAI_API_KEY/API_KEY) must be set for OpenAI baseline mode."
+            )
         return OpenAIFraudDetectionAgent(
             model_name=model_name,
             api_key=api_key,
             api_base_url=api_base_url,
         )
 
-    logger.warning("MODEL_NAME and HF_TOKEN were not set. Falling back to the deterministic heuristic agent.")
+    logger.warning(
+        "MODEL_NAME/MODELNAME and HF_TOKEN/HFTOKEN were not set. "
+        "Falling back to the deterministic heuristic agent."
+    )
     return HeuristicFraudDetectionAgent()