@murk-security/runner-linux-arm64 0.7.0 → 0.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@murk-security/runner-linux-arm64",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "MURK local runner (prebuilt harness + adapter) for linux/arm64. Installed automatically by @murk-security/cli.",
   "os": [
     "linux"

package/runners/basic_harness_run.py

@@ -1093,17 +1093,28 @@ def main() -> int:
         "-max-cost", os.environ.get("BASIC_HARNESS_MAX_COST", prof["max_cost"]),
         "-compact-tokens", "100000", "-ui", "", "-hold=false",
     ]
+    # How far the agents may go. Pass the spec's action tier through to the harness so the Go
+    # side (the exploiter agent and its tier-gated behaviour) matches what prod_env enforces for
+    # its ops on the same spec. Without this the harness stayed at its "passive" default no matter
+    # the spec. The harness fail-closes to passive on anything unrecognized.
+    action_tier = str((spec.get("policy") or {}).get("actionTier") or "passive")
+    cmd += ["-action-tier", action_tier]
     # Route model calls through the murk model gateway when the control plane set
     # OPENROUTER_BASE_URL (then OPENROUTER_API_KEY is a signed gateway token, not the
     # OpenRouter key); direct to OpenRouter otherwise.
     base_url = os.environ.get("OPENROUTER_BASE_URL", "").strip()
     if base_url:
         cmd += ["-base-url", base_url]
-    # Prefer an explicit key file when one exists; otherwise the harness reads
-    # OPENROUTER_API_KEY straight from the environment (the hosted launch-env path,
-    # runnerLaunchEnv). Passing a -key-file that does not exist makes the harness
-    # fatal on a missing file, so only pass it when it is really there.
-    if os.path.exists(KEY_FILE):
+    # Key resolution:
+    #  - Gateway mode (base_url set): OPENROUTER_API_KEY in the env is a SIGNED gateway token
+    #    that the harness must send as-is. A -key-file would override it with a raw OpenRouter
+    #    key (which the gateway rejects -> the harness fails its first model call and exits 1),
+    #    so NEVER pass a key file when routing through the gateway. This also stops a developer's
+    #    ~/Code/keys/.env from hijacking a hosted/local-scan run that already has a token.
+    #  - Direct mode (no gateway): prefer an explicit key file when one exists; otherwise the
+    #    harness reads OPENROUTER_API_KEY straight from the environment. Passing a -key-file that
+    #    does not exist is fatal, so only pass it when it is really there.
+    if not base_url and os.path.exists(KEY_FILE):
         cmd += ["-key-file", KEY_FILE]
     # Each team gets a validator agent that independently re-tests a candidate finding
     # before the coordinator may confirm it (anti-false-positive). On by default; an