Project-2 baseline

worker-toolkit-potion-polyglot/explore/scripts/lib/harness-credentials.sh

@@ -53,6 +53,38 @@ _harness_trim() {
     printf '%s' "${out:-$1}"
 }
 
+# Every env var a harness authenticates from, registry-derived so a new harness row is
+# covered without touching this. ANTHROPIC_* unconditionally: it is what .env carries and
+# what harbor-run hands the trial sandbox, registry or not.
+_harness_credential_vars() {
+    local id key_env base_url_env proxy_path
+    printf '%s\n' ANTHROPIC_API_KEY ANTHROPIC_BASE_URL
+    while IFS=$'\t' read -r id key_env base_url_env proxy_path; do
+        if [ -n "$key_env" ]; then printf '%s\n' "$key_env"; fi
+        if [ -n "$base_url_env" ]; then printf '%s\n' "$base_url_env"; fi
+    done < <(_harness_query --authoring-credentials 2>/dev/null || true)
+}
+
+# Source .env into the CALLER's environment and trim what a harness reads its key from.
+# For codex the live value is now the env var, not the auth file harness_write_auth
+# cleans, so a raw `set -a; . .env` is the 401 all over again on a Windows-saved file.
+harness_load_env() {
+    local file="${1:-${RACCOON_ENV_FILE:-/workspace/.env}}" v
+    if [ -f "$file" ]; then
+        set -a
+        # shellcheck disable=SC1090
+        . "$file" 2>/dev/null || true
+        set +a
+    fi
+    # Trimming twice is a no-op, so a var named by several rows needs no dedupe.
+    while read -r v; do
+        [ -n "$v" ] || continue
+        if [ -n "${!v:-}" ]; then
+            export "$v=$(_harness_trim "${!v}")"
+        fi
+    done < <(_harness_credential_vars)
+}
+
 # The proxy root: the worker's ANTHROPIC_BASE_URL minus its provider path.
 _harness_proxy_root() {
     local base_url