@murk-security/runner-darwin-arm64 0.7.0 → 0.7.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@murk-security/runner-darwin-arm64",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "MURK local runner (prebuilt harness + adapter) for darwin/arm64. Installed automatically by @murk-security/cli.",
   "os": [
     "darwin"

package/runners/basic_harness_run.py

@@ -1099,11 +1099,16 @@ def main() -> int:
     base_url = os.environ.get("OPENROUTER_BASE_URL", "").strip()
     if base_url:
         cmd += ["-base-url", base_url]
-    # Prefer an explicit key file when one exists; otherwise the harness reads
-    # OPENROUTER_API_KEY straight from the environment (the hosted launch-env path,
-    # runnerLaunchEnv). Passing a -key-file that does not exist makes the harness
-    # fatal on a missing file, so only pass it when it is really there.
-    if os.path.exists(KEY_FILE):
+    # Key resolution:
+    #  - Gateway mode (base_url set): OPENROUTER_API_KEY in the env is a SIGNED gateway token
+    #    that the harness must send as-is. A -key-file would override it with a raw OpenRouter
+    #    key (which the gateway rejects -> the harness fails its first model call and exits 1),
+    #    so NEVER pass a key file when routing through the gateway. This also stops a developer's
+    #    ~/Code/keys/.env from hijacking a hosted/local-scan run that already has a token.
+    #  - Direct mode (no gateway): prefer an explicit key file when one exists; otherwise the
+    #    harness reads OPENROUTER_API_KEY straight from the environment. Passing a -key-file that
+    #    does not exist is fatal, so only pass it when it is really there.
+    if not base_url and os.path.exists(KEY_FILE):
         cmd += ["-key-file", KEY_FILE]
     # Each team gets a validator agent that independently re-tests a candidate finding
     # before the coordinator may confirm it (anti-false-positive). On by default; an