teknium1 94053d75a6 fix: custom endpoint no longer leaks OPENROUTER_API_KEY (#560) ...

API key selection is now base_url-aware: when the resolved base_url
targets OpenRouter, OPENROUTER_API_KEY takes priority (preserving the
#289 fix). When hitting any other endpoint (Z.ai, vLLM, custom, etc.),
OPENAI_API_KEY takes priority so the OpenRouter key doesn't leak.

Applied in both the runtime provider resolver (the real code path) and
the CLI initial default (for consistency).

Fixes #560.

2026-03-06 17:16:14 -08:00

6.7 KiB

Raw Blame History

View Raw