Ahnii!
https://jonesrussell.github.io/blog/content-autopilot/ covers how this blog's Content Autopilot workflow mines, curates, and publishes without a human reading the draft first. Three things broke or needed hardening after that pipeline went live: how it pays for Claude, why the auth silently died, and the two gates bolted on afterward to catch a bad draft before it ships.
Switching off pay-per-token API credit
The produce step originally authenticated with ANTHROPIC_API_KEY, a pay-as-you-go API account billed per token. That account ran dry, and the daily cron started failing on the very first Claude call. Swapping to CLAUDE_CODE_OAUTH_TOKEN fixed it in one line: this env var runs the headless CLI against a Claude subscription instead.
env:
# Subscription auth (no per-token API billing). See CLAUDE_CODE_OAUTH_TOKEN secret.
CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
GH_TOKEN: ${{ secrets.CROSS_REPO_TOKEN }}
claude setup-token mints
Discussion
Start the conversation
Your voice can be the first to spark an engaging conversation.