Project-2 baseline

worker-toolkit-potion-polyglot/scripts/refresh-harness-auth

@@ -40,7 +40,12 @@ _scripts_dir="${HARNESS_SCRIPTS_DIR:-/workspace/scripts}"
 # .bashrc (the key, the call origin) nor the profile that puts the CLI on PATH.
 # Failures stay swallowed — an unreadable .env must not stop the agent starting.
 export PATH="$HOME/.local/bin:$PATH"
-if [ -f "${RACCOON_ENV_FILE:-/workspace/.env}" ]; then
+# shellcheck disable=SC1091
+HARNESS_SCRIPTS_DIR="$_scripts_dir" . "$_scripts_dir/lib/harness-credentials.sh" 2>/dev/null || true
+if command -v harness_load_env >/dev/null 2>&1; then
+    harness_load_env || true
+elif [ -f "${RACCOON_ENV_FILE:-/workspace/.env}" ]; then
+    # Untrimmed, but a key with a stray \r beats no key at all.
     set -a
     # shellcheck disable=SC1090
     . "${RACCOON_ENV_FILE:-/workspace/.env}" 2>/dev/null || true