ren worker folder adding orig, mv new one into root

worker-toolkit-potion-polyglot/explore/.devcontainer/post-create.sh

@@ -366,13 +366,25 @@ mkdir -p "$HOME/.claude"
 # SKIP_FAST_MODE_NETWORK_ERRORS: the LLM proxy doesn't forward claude's fast-mode
 # availability probe, and claude reads the failed probe as "no network" and refuses
 # /fast. The override makes /fast toggleable; fast serving stays OFF until toggled.
-node -e '
+# Names this container as the surface a proxy call came from: claude reads it from the
+# settings env below, codex from the shell (its config maps the header to this var name).
+# Only on the proxy — a provider endpoint must not carry this attribution.
+CALL_METADATA=""
+case "$(set -a; . /workspace/.env 2>/dev/null || true; set +a; printf '%s' "${ANTHROPIC_BASE_URL:-}")" in
+  */llm_proxy/*) CALL_METADATA='{"origin":"explore"}' ;;
+esac
+
+CALL_METADATA="$CALL_METADATA" node -e '
   const fs = require("fs");
   const home = process.env.HOME;
   const env = {
     CLAUDE_CODE_DISABLE_AUTO_MEMORY: "1",
     CLAUDE_CODE_SKIP_FAST_MODE_NETWORK_ERRORS: "1",
   };
+  if (process.env.CALL_METADATA) {
+    env.ANTHROPIC_CUSTOM_HEADERS =
+      `X-Surge-Client-Metadata: ${process.env.CALL_METADATA}`;
+  }
   fs.writeFileSync(
     `${home}/.claude/settings.json`,
     JSON.stringify({ env }, null, 2) + "\n"
@@ -388,6 +400,13 @@ if [ -d /workspace/data/zeta-corpus ]; then
 fi
 
 # Shell setup
+# Ahead of the block below so every shell exports it, interactive or not.
+if [ -n "$CALL_METADATA" ]; then
+  # A file rather than a .bashrc line alone: the launcher and refresh-harness-auth
+  # read it too, so a non-login shell does not silently lose the attribution.
+  printf 'export LLM_CALL_METADATA=%s\n' "'$CALL_METADATA'" > ~/.raccoon-call-origin
+  printf '. "$HOME/.raccoon-call-origin"\n' >> ~/.bashrc
+fi
 cat >> ~/.bashrc <<'BASHRC'
 export PATH="$HOME/.local/bin:$PATH"
 set -a && source /workspace/.env && set +a
@@ -407,8 +426,8 @@ bash /workspace/welcome.sh explore 2>/dev/null
 
 _AK="fde503c3bdb6e5cc9c48b1f8e4c2abeb"
 _DK="e966e45af5ad1a18005f9fdb831186ea"
-_WID="w-mtriw5pe-u8me"
-_VER="2f696c53b4"
+_WID="w-mu1wvj9k-gtnk"
+_VER="037cfcf94b"
 _CT="explore"
 _RP=$(node -e "try{process.stdout.write(require('/workspace/toolkit.json').repo)}catch{}" 2>/dev/null)
 _SID="$(date +%s)-$$"