From 66225559173e072fc0c230f7992e26489be290a7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=9C=BF=20corey=20=28they/them=29?= <c@rey.foo>
Date: Wed, 11 Mar 2026 17:09:10 -0700
Subject: [PATCH] fix: set ANTHROPIC_API_KEY from agenix secret for Claude Code

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 home/secrets/claude-code-api-key.age | Bin 0 -> 431 bytes
 lib/secrets/home.nix                 |   1 +
 modules/home/development.nix         |   8 ++++++++
 3 files changed, 9 insertions(+)
 create mode 100644 home/secrets/claude-code-api-key.age

diff --git a/home/secrets/claude-code-api-key.age b/home/secrets/claude-code-api-key.age
new file mode 100644
index 0000000000000000000000000000000000000000..de12f0a779fc3ac6f77b647193d854aa234638ce
GIT binary patch
literal 431
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCU7GRSsK4^)WE_I0cb
zPBL&Q%dX7w@Tf@kD>5qyGYhD2^~otW&a*J}Ow1}vDKOJ_FXnPeG<9)yFE=kq@h^$+
zi89J^5BD^)v`h-E@G}SxO?NE{Fs#hUFZK;JbVaw#*fl&OFHoV%$UnW<#k8^@J0-+7
z!aUu@DAV6PEXyL>$Ir~IGRnuhqAbANP~XJ0+>y&YOWQ0lJ=D$D$Tuu3U*FQuG|$~H
zFWf!Z(ab2))FRb4Ej=PJEL+<%HIPeJS688+GOx5ey(~vRHOoCGG14#DrzFwO-K@|p
zG0!;B-6yihG9)J>$KNEpJe?~b&iXaSgL#z_vv>ubPg*XZ|LNz($BTBV9l6_6HN9cZ
z^5x}bM;NY0WPkpmlJe}LTojiLi@w~oP1z6Hx5Yh7o%a8Zor?GCGf7{!v4)+VFLUux
zViCXBA_;cmKE1uwGgmz;zbPwvE6o0W>FbHU%LJe7{r*~2J7R|KAO1NtGaD1GzI>pv
QUwTux>qL$RWtXE<0M{g>tpET3

literal 0
HcmV?d00001

diff --git a/lib/secrets/home.nix b/lib/secrets/home.nix
index 0da6c71c..5ca04cd9 100644
--- a/lib/secrets/home.nix
+++ b/lib/secrets/home.nix
@@ -2,4 +2,5 @@ let
   keys = with (import ../keys.nix); [home Rhizome];
 in {
   "home/secrets/aichat-env.age".publicKeys = keys;
+  "home/secrets/claude-code-api-key.age".publicKeys = keys;
 }
diff --git a/modules/home/development.nix b/modules/home/development.nix
index 92111297..296c1195 100644
--- a/modules/home/development.nix
+++ b/modules/home/development.nix
@@ -27,6 +27,14 @@ in {
 
   config = lib.mkMerge [
     (mkIf cfg.ai.enable {
+      age.secrets.claude-code-api-key = {
+        file = ../../home/secrets/claude-code-api-key.age;
+      };
+
+      programs.zsh.initExtra = ''
+        export ANTHROPIC_API_KEY="$(cat ${config.age.secrets.claude-code-api-key.path})"
+      '';
+
       programs.claude-code = {
         enable = true;
         memory.source = "${llm-profile}/README.md";