The OAuth token that authenticates the spawned `claude` CLI was only
readable from the container env, so an expired token meant editing
.env on the Unraid host and rebuilding. Now it can be rotated from
the Settings page like every other key.
- Adds CLAUDE_CODE_OAUTH_TOKEN to the settings registry and a "Claude"
card at the top of the settings UI.
- loadPipelineEnv() injects the DB value into every spawned subprocess
env (overrides the container env), covering both campaign launches
and chat sessions.
- checkIntegrationStatus() validates the token by hitting the Anthropic
messages API with a 1-token call, surfacing 401s as "Token expired
or invalid" instead of a generic "Not connected".
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Trey T
63698333ff