added potion-polyglot worker folder w/o repos

worker-toolkit-potion-polyglot/scripts/lib/codex_auth.py

@@ -0,0 +1,36 @@
+"""How codex is handed its API key, kept out of codex_agent so it is testable without
+harbor (whose venv has no pytest, so anything importing it SKIPs in CI).
+
+codex reads its key from `$CODEX_HOME/auth.json` and its proxy URL from config.toml —
+`OPENAI_API_KEY` / `OPENAI_BASE_URL` in the environment are both ignored, verified against
+0.146.0 and 0.152.0 (an env-var-only run sends no `authorization` header at all).
+"""
+
+from __future__ import annotations
+
+import json
+import shlex
+
+# Characters harbor's own auth.json writer cannot survive: it interpolates the key into a
+# shell heredoc, so `"` closes the JSON string and `\` starts an escape.
+_UNESCAPABLE = '"\\\n\r'
+
+
+AUTH_JSON_ENV_VAR = "RACCOON_CODEX_AUTH_JSON"
+
+
+def auth_json_setup(key: str, remote_auth_path: str) -> tuple[dict[str, str], str]:
+    """The one extra env var — returned separately so it reaches ONLY the setup exec — plus
+    shell writing a parseable auth.json. Subshell: the umask must not outlive this write."""
+    env = {AUTH_JSON_ENV_VAR: json.dumps({"OPENAI_API_KEY": key})}
+    command = (
+        f"(umask 077; printf '%s\\n' \"${AUTH_JSON_ENV_VAR}\" "
+        f">{shlex.quote(remote_auth_path)})\n"
+    )
+    return env, command
+
+
+def unescapable_chars(key: str) -> list[str]:
+    """Which characters in `key` harbor's stock heredoc writer would corrupt — empty for
+    every ordinary key, so the caller can refuse instead of 401ing three layers down."""
+    return sorted({c for c in _UNESCAPABLE if c in key})