From 17f2d1d659d89b76beef14d9a770e0e2880b3f51 Mon Sep 17 00:00:00 2001
From: Felix Delattre <felix@delattre.de>
Date: Wed, 10 Jun 2026 14:47:06 +0200
Subject: [PATCH] foo

---
 3-sentinel-data.py | 5 +++--
 AGENTS.md          | 2 +-
 README.md          | 2 +-
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/3-sentinel-data.py b/3-sentinel-data.py
index 16287f8..55dcde2 100644
--- a/3-sentinel-data.py
+++ b/3-sentinel-data.py
@@ -11,7 +11,7 @@ Outputs (``data/``):
 - ``sentinel_data/{year}/{sitename}/prepared/s3/`` — S3 composite GeoTIFFs
 - ``sentinel_data/{year}/{sitename}/data.json`` — run summary
 
-Requires ``CDSE_USER`` / ``CDSE_PASSWORD`` (``uv sync`` installs efast).
+Requires ``CDSE_USER`` / ``CDSE_PASSWORD`` in ``../.env`` (workspace root; ``uv sync`` installs efast).
 
 CLI:
 
@@ -108,6 +108,7 @@ S3_COLLECTION = "SENTINEL3_SYN_L2_SYN"
 
 DATA_DIR = Path("data")
 DEFAULT_YEAR = 2025
+WORKSPACE_ROOT = Path(__file__).resolve().parent.parent
 
 
 # ---------------------------------------------------------------------------
@@ -116,7 +117,7 @@ DEFAULT_YEAR = 2025
 
 
 def _cdse_credentials() -> dict[str, str | None]:
-    load_dotenv()
+    load_dotenv(WORKSPACE_ROOT / ".env")
     return {
         "username": os.getenv("CDSE_USER"),
         "password": os.getenv("CDSE_PASSWORD"),
diff --git a/AGENTS.md b/AGENTS.md
index 2e1029f..da30c1b 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -46,7 +46,7 @@ Run any script as `uv run python <script>.py …`. Python version is pinned in `
 - `CDSE_USER` — Copernicus Data Space username
 - `CDSE_PASSWORD` — Copernicus Data Space password
 
-Required for step 3 S3 download (CDSE OpenEO). Step 3 S2 download uses AWS Earth Search (no auth).
+Set in `../.env` at the workspace root (not under `processing/`). Required for step 3 S3 download (CDSE OpenEO). Step 3 S2 download uses AWS Earth Search (no auth).
 
 ---
 
diff --git a/README.md b/README.md
index 96aa4f6..a33db10 100644
--- a/README.md
+++ b/README.md
@@ -32,7 +32,7 @@ uv run python 4-fusion.py --evaluation-year 2025 --site innsbruck
 uv run python 5-metrics.py --evaluation-year 2025 --site innsbruck
 ```
 
-Step 3 S3 uses CDSE OpenEO (`SENTINEL3_SYN_L2_SYN`); S2 uses AWS Earth Search COG range reads (no auth).
+Step 3 S3 uses CDSE OpenEO (`SENTINEL3_SYN_L2_SYN`); S2 uses AWS Earth Search COG range reads (no auth). CDSE credentials live in `../.env` at the workspace root (`CDSE_USER`, `CDSE_PASSWORD`).
 
 ---