diff --git a/nix/templates/harness-base.nix b/nix/templates/harness-base.nix
index 43a63bb..9ec301b 100644
--- a/nix/templates/harness-base.nix
+++ b/nix/templates/harness-base.nix
@@ -317,7 +317,7 @@
         USER=$(curl -sf --max-time 5 \
           -H "Authorization: token $TOKEN" \
           "$FORGE_URL/api/v1/user" \
-          | python3 -c "import sys,json; print(json.load(sys.stdin).get('login',''))" \
+          | python3 -c 'import sys,json; print(json.load(sys.stdin).get("login",""))' \
           2>/dev/null || true)
         if [ -z "$USER" ]; then
           echo "tea-login: could not resolve username from forge API; skipping"