Handle Claude action credentials explicitly

Author: cmungall

.github/workflows/scan-watched-repos.yml

@@ -116,13 +116,24 @@ jobs:
           name: watcher-context-${{ matrix.slug }}
           path: build/context/${{ matrix.slug }}.*
 
+      - name: Verify Claude credentials are configured
+        env:
+          HAS_ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY != '' && 'true' || 'false' }}
+          HAS_CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN != '' && 'true' || 'false' }}
+        run: |
+          if [ "${HAS_ANTHROPIC_API_KEY}" != "true" ] && [ "${HAS_CLAUDE_CODE_OAUTH_TOKEN}" != "true" ]; then
+            echo "::error::Set either ANTHROPIC_API_KEY or CLAUDE_CODE_OAUTH_TOKEN for the Claude review workflow."
+            exit 1
+          fi
+
       - name: Ask Claude for qualitative review
         uses: anthropics/claude-code-action@v1
         env:
           GH_TOKEN: ${{ github.token }}
         with:
           github_token: ${{ github.token }}
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           prompt: |
             Review the last `${{ needs.select-targets.outputs.lookback_days }}` days of agent-related GitHub activity for `${{ matrix.repo }}`.
 

README.md

@@ -56,7 +56,7 @@ python3 scripts/run_watch.py \
 The scheduled workflow expects:
 
 - `WATCHER_SOURCE_TOKEN`: token with read access to watched repositories
-- `ANTHROPIC_API_KEY`: used by the Claude Code Action
+- one of `ANTHROPIC_API_KEY` or `CLAUDE_CODE_OAUTH_TOKEN`: used by the Claude Code Action
 - `GITHUB_TOKEN`: the default workflow token is used by Claude to create or append issues in this repo
 
 `WATCHER_SOURCE_TOKEN` can be a fine-grained PAT or GitHub App token. The collector only needs read access to issues, pull requests, metadata, comments, and reviews on watched repos.

docs/design.md

@@ -103,8 +103,8 @@ Two token roles are enough for the first pass:
 - `WATCHER_SOURCE_TOKEN`
   - read access on watched repos
   - used for listing issues, comments, PRs, and reviews in watched repos
-- `ANTHROPIC_API_KEY`
-  - used by the Claude Code Action
+- `ANTHROPIC_API_KEY` or `CLAUDE_CODE_OAUTH_TOKEN`
+  - one of these must be present for the Claude Code Action
 - `GITHUB_TOKEN`
   - write access on this repo issues
   - used by Claude for issue creation, reopening, body updates, and appended comments