ward agent/container: inject claude credentials (ANTHROPIC_API_KEY) for in-container runs #128

New issue

Closed

opened 2026-06-18 01:00:46 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-06-18 01:00:46 +00:00

Owner

`ward agent`/`container` injects no claude credentials

Surfaced alongside ward#127 during the first real ward agent claude headless e2e (ward#126). The container injects the forgejo push token but no claude credentials - no ANTHROPIC_API_KEY, no ~/.claude credential mount. Headless claude -p needs ANTHROPIC_API_KEY (Claude Code headless docs).

Proposed

Mirror the forgejo-token path: resolve the key on the host and inject it via the same private 0600 --env-file (so it never enters argv/audit), as ANTHROPIC_API_KEY. The in-container claude picks it up from env.

Open decision (needs Kai)

Which credential, from where?

An Anthropic API key from SSM (e.g. a /anthropic/... path) - simplest for headless, but a billable raw key in every container.
A scoped/subscription token, or OAuth-token forwarding from the host ~/.claude (macOS Keychain - not trivially portable to a linux container).

Blocks ward agent claude from running once the non-root blocker (ward#127) is cleared. The two are needed together for an end-to-end claude run.

## `ward agent`/`container` injects no claude credentials Surfaced alongside ward#127 during the first real `ward agent claude headless` e2e (ward#126). The container injects the forgejo push token but **no claude credentials** - no `ANTHROPIC_API_KEY`, no `~/.claude` credential mount. Headless `claude -p` needs `ANTHROPIC_API_KEY` (Claude Code headless docs). ### Proposed Mirror the forgejo-token path: resolve the key **on the host** and inject it via the same private 0600 `--env-file` (so it never enters argv/audit), as `ANTHROPIC_API_KEY`. The in-container claude picks it up from env. ### Open decision (needs Kai) **Which credential, from where?** - An Anthropic **API key** from SSM (e.g. a `/anthropic/...` path) - simplest for headless, but a billable raw key in every container. - A scoped/subscription token, or OAuth-token forwarding from the host `~/.claude` (macOS Keychain - not trivially portable to a linux container). Blocks `ward agent claude` from running once the non-root blocker (ward#127) is cleared. The two are needed together for an end-to-end claude run.

coilysiren referenced this issue from a commit

2026-06-18 01:24:27 +00:00

feat(container): run claude as non-root + inject Max OAuth creds (ward#127, #128)

coilysiren closed this issue

2026-06-18 01:24:27 +00:00