feat: add option to authenticate with claude token

Author: kasin-it

env.ts

@@ -27,7 +27,8 @@ export const env = createEnv({
     CHAT_SDK_BOT_NAME: z.string().default("blazebot"),
 
     // Agent
-    ANTHROPIC_API_KEY: z.string().min(1),
+    ANTHROPIC_API_KEY: z.string().min(1).optional(),
+    CLAUDE_CODE_OAUTH_TOKEN: z.string().min(1).optional(),
     CLAUDE_MODEL: z.string().default("claude-opus-4-6"),
     COMMIT_AUTHOR: z.string().default("ai-workflow-blazity"),
     COMMIT_EMAIL: z.string().default("ai-workflow@blazity.com"),

src/sandbox/manager.ts

@@ -14,7 +14,8 @@ export interface SandboxConfig {
   githubToken: string;
   owner: string;
   repo: string;
-  anthropicApiKey: string;
+  anthropicApiKey?: string;
+  claudeCodeOauthToken?: string;
   claudeModel: string;
   commitAuthor: string;
   commitEmail: string;
@@ -61,7 +62,9 @@ export class SandboxManager {
       runtime: "node24",
       timeout: this.config.jobTimeoutMs,
       env: {
-        ANTHROPIC_API_KEY: this.config.anthropicApiKey,
+        ...(this.config.claudeCodeOauthToken
+          ? { CLAUDE_CODE_OAUTH_TOKEN: this.config.claudeCodeOauthToken }
+          : { ANTHROPIC_API_KEY: this.config.anthropicApiKey! }),
         CLAUDE_MODEL: this.config.claudeModel,
       },
     });
@@ -75,6 +78,14 @@ export class SandboxManager {
     // Install Claude Code
     await sandbox.runCommand("npm", ["install", "-g", "@anthropic-ai/claude-code"]);
 
+    // Skip interactive onboarding (required for headless OAuth token auth)
+    if (this.config.claudeCodeOauthToken) {
+      await sandbox.runCommand("bash", [
+        "-c",
+        `mkdir -p ~/.claude && echo '{"hasCompletedOnboarding":true}' > ~/.claude.json`,
+      ]);
+    }
+
     // Install skills globally (outside the client repo)
     await this.installGlobalSkills(sandbox);
 

src/workflows/implementation.ts

@@ -54,6 +54,7 @@ async function runAgentInSandbox(
     owner: env.GITHUB_OWNER,
     repo: env.GITHUB_REPO,
     anthropicApiKey: env.ANTHROPIC_API_KEY,
+    claudeCodeOauthToken: env.CLAUDE_CODE_OAUTH_TOKEN,
     claudeModel: env.CLAUDE_MODEL,
     commitAuthor: env.COMMIT_AUTHOR,
     commitEmail: env.COMMIT_EMAIL,

src/workflows/review-fix.ts

@@ -71,6 +71,7 @@ async function runFixingAgentInSandbox(
     owner: env.GITHUB_OWNER,
     repo: env.GITHUB_REPO,
     anthropicApiKey: env.ANTHROPIC_API_KEY,
+    claudeCodeOauthToken: env.CLAUDE_CODE_OAUTH_TOKEN,
     claudeModel: env.CLAUDE_MODEL,
     commitAuthor: env.COMMIT_AUTHOR,
     commitEmail: env.COMMIT_EMAIL,