feat: support CLAUDE_CODE_OAUTH_TOKEN, include user secrets in orchestrator

Author: noeljackson

redteam/cmd/redteam-ctl/main.go

@@ -92,7 +92,8 @@ func runAgent(ctx context.Context, client *codewire.Client, cfg agentConfig) {
 			"POD_NAME":         cfg.Name,
 			"CODEWIRE_ENABLED": "false",
 		},
-		SecretProject: strPtr(*secrets),
+		SecretProject:      strPtr(*secrets),
+		IncludeUserSecrets: boolPtr(true),
 		CpuMillicores: cpu,
 		MemoryMb:      memory,
 		DiskGb:        disk,
@@ -263,4 +264,5 @@ func crossPollinate(ctx context.Context, env *codewire.Environment, cfg agentCon
 	logger.Printf("cross-pollinated %d findings from other agents", len(allFindings))
 }
 
-func strPtr(s string) *string { return &s }
+func strPtr(s string) *string  { return &s }
+func boolPtr(b bool) *bool     { return &b }

redteam/main.go

@@ -207,7 +207,10 @@ func isNetworkError(err error) bool {
 func main() {
 	apiKey := os.Getenv("ANTHROPIC_API_KEY")
 	if apiKey == "" {
-		log.Fatal("ANTHROPIC_API_KEY not set")
+		apiKey = os.Getenv("CLAUDE_CODE_OAUTH_TOKEN")
+	}
+	if apiKey == "" {
+		log.Fatal("ANTHROPIC_API_KEY or CLAUDE_CODE_OAUTH_TOKEN must be set")
 	}
 	strategyID := os.Getenv("STRATEGY")
 	if strategyID == "" {