ren worker folder adding orig, mv new one into root

worker-toolkit-potion-polyglot/.devcontainer/devcontainer.json

@@ -3,7 +3,7 @@
   "build": {
     "dockerfile": "Dockerfile",
     "args": {
-      "TOOLKIT_BUILD_ID": "1788802488308-63ncdn"
+      "TOOLKIT_BUILD_ID": "1789430760274-eddbpv"
     }
   },
   "workspaceMount": "source=${localWorkspaceFolder},target=/workspace,type=bind",

worker-toolkit-potion-polyglot/.devcontainer/post-create.sh

@@ -50,7 +50,15 @@ AUTH_BASE_URL=$(set -a; . /workspace/.env 2>/dev/null || true; set +a; printf '%
 # SKIP_FAST_MODE_NETWORK_ERRORS: the LLM proxy doesn't forward claude's fast-mode
 # availability probe, and claude reads the failed probe as "no network" and refuses
 # /fast. The override makes /fast toggleable; fast serving stays OFF until toggled.
-AUTH_BASE_URL="$AUTH_BASE_URL" node -e '
+# Names this container as the surface a proxy call came from: claude reads it from the
+# settings env below, codex from the shell (its config maps the header to this var name).
+# Only on the proxy — a provider endpoint must not carry this attribution.
+CALL_METADATA=""
+case "$AUTH_BASE_URL" in
+  */llm_proxy/*) CALL_METADATA='{"origin":"authoring"}' ;;
+esac
+
+AUTH_BASE_URL="$AUTH_BASE_URL" CALL_METADATA="$CALL_METADATA" node -e '
   const fs = require("fs");
   const env = {
     CLAUDE_CODE_API_KEY_HELPER_TTL_MS: "60000",
@@ -58,6 +66,10 @@ AUTH_BASE_URL="$AUTH_BASE_URL" node -e '
     CLAUDE_CODE_SKIP_FAST_MODE_NETWORK_ERRORS: "1",
   };
   if (process.env.AUTH_BASE_URL) env.ANTHROPIC_BASE_URL = process.env.AUTH_BASE_URL;
+  if (process.env.CALL_METADATA) {
+    env.ANTHROPIC_CUSTOM_HEADERS =
+      `X-Surge-Client-Metadata: ${process.env.CALL_METADATA}`;
+  }
   fs.writeFileSync(
     "/root/.claude/settings.json",
     JSON.stringify({ apiKeyHelper: "/root/.claude/anthropic-key-helper.sh", env }, null, 2) + "\n"
@@ -73,6 +85,13 @@ if [ -d /workspace/data/zeta-corpus ]; then
 fi
 
 # Shell setup
+# Ahead of the block below so every shell exports it, interactive or not.
+if [ -n "$CALL_METADATA" ]; then
+  # A file rather than a .bashrc line alone: the launcher and refresh-harness-auth
+  # read it too, so a non-login shell does not silently lose the attribution.
+  printf 'export LLM_CALL_METADATA=%s\n' "'$CALL_METADATA'" > ~/.raccoon-call-origin
+  printf '. "$HOME/.raccoon-call-origin"\n' >> ~/.bashrc
+fi
 cat >> ~/.bashrc <<'BASHRC'
 test -f .env && set -a && source .env && set +a
 
@@ -93,16 +112,16 @@ esac
 # These pin the ASSISTANT's model and effort, not the agent-under-test's, so they don't
 # track the registry: here we want the strongest available model, a trial wants a pinned id.
 alias claude="env -u ANTHROPIC_API_KEY claude --model opus[1m] --effort max"
-# codex keeps its key in a file written at container create, with no live helper of its
-# own, so each launch re-derives it from .env first. Fails open — see the script.
+# codex reads its key from the environment per request, so each launch re-exports it from
+# the live .env and re-derives the base URL its config holds. Fails open — see the script.
 alias codex="/workspace/scripts/refresh-harness-auth codex --model gpt-5.6-sol -c model_reasoning_effort=max"
 export PS1="\[\033[1;33m\][raccoon-authoring]\[\033[0m\] \w\$ "
 bash scripts/welcome.sh authoring 2>/dev/null
 
 _AK="fde503c3bdb6e5cc9c48b1f8e4c2abeb"
 _DK="e966e45af5ad1a18005f9fdb831186ea"
-_WID="w-mtriw5pe-u8me"
-_VER="2f696c53b4"
+_WID="w-mu1wvj9k-gtnk"
+_VER="037cfcf94b"
 _CT="authoring"
 _RP=$(node -e "try{process.stdout.write(require('$PWD/toolkit.json').repo)}catch{}" 2>/dev/null)
 _SID="$(date +%s)-$$"