Project-2 baseline

worker-toolkit-potion-polyglot/scripts/setup-harnesses.sh

@@ -156,7 +156,12 @@ set -euo pipefail
 # ~/.local/bin, where the CLI itself lives. Both are set here so a launch works the
 # same either way, with the key .env holds right now.
 export PATH="\$HOME/.local/bin:\$PATH"
-if [ -f "\${RACCOON_ENV_FILE:-/workspace/.env}" ]; then
+# Through the lib, not a bare source: the key a custom codex provider authenticates with
+# is this env var, and a .env saved on Windows leaves a \\r on it that the proxy 401s.
+HARNESS_SCRIPTS_DIR="$_HARNESS_REGISTRY_DIR" . "$_HARNESS_REGISTRY_DIR/lib/harness-credentials.sh" 2>/dev/null || true
+if command -v harness_load_env >/dev/null 2>&1; then
+    harness_load_env || true
+elif [ -f "\${RACCOON_ENV_FILE:-/workspace/.env}" ]; then
     set -a
     . "\${RACCOON_ENV_FILE:-/workspace/.env}"
     set +a