Claude Code CLI Environment Variables

# Claude Code CLI Environment Variables
# This file lists all environment variables used in v2.1.202 with explanations

## Anthropic API & Authentication

ANTHROPIC_API_KEY - Primary API key for Anthropic's Claude API; used as an auth source (source "ANTHROPIC_API_KEY") when no OAuth token is configured
ANTHROPIC_AUTH_TOKEN - Alternative bearer token for Anthropic services; sent as Authorization: Bearer and takes priority over ANTHROPIC_API_KEY, also used with gateway mode
ANTHROPIC_BASE_URL - Custom base URL for the Anthropic API; overrides the default api.anthropic.com endpoint (a non-api.anthropic.com host marks the client as non-first-party)
ANTHROPIC_BETAS - Comma-separated list of beta feature headers appended (trimmed, non-empty) to the internal beta flags on API requests
ANTHROPIC_CUSTOM_HEADERS - Custom HTTP headers for API requests, parsed as newline-separated "Key: Value" pairs
ANTHROPIC_FEDERATION_RULE_ID - Federation rule ID for OIDC federation (env-quad) auth mode; shown in the auth-mode "rule" descriptor
ANTHROPIC_ORGANIZATION_ID - Organization ID for OIDC federation (env-quad) auth mode; shown in the auth-mode "org" descriptor
ANTHROPIC_PROFILE - Explicit profile name to use from the credentials file; trimmed, defaults to "default"
ANTHROPIC_UNIX_SOCKET - Unix socket path for Anthropic API connections (Bun); when set, the request uses this socket and gates OAuth-token-based auth behavior
ANTHROPIC_WORKSPACE_ID - Workspace ID for federation rules scoped to multiple workspaces (env-quad auth); alternative to the 'workspace_id' config key / workspaceId option
CLAUDE_CODE_ADDITIONAL_PROTECTION - Boolean-truthy; adds the x-anthropic-additional-protection: true header to API requests.
CLAUDE_CODE_API_BASE_URL - Base URL for the Anthropic Files API; ANTHROPIC_BASE_URL takes precedence, then CLAUDE_CODE_API_BASE_URL, else https://api.anthropic.com.
CLAUDE_CODE_API_KEY_FILE_DESCRIPTOR - File descriptor to read the API key from; presence affects auth source selection and is surfaced in auth diagnostics.
CLAUDE_CODE_API_KEY_HELPER_TTL_MS - TTL in milliseconds for the apiKeyHelper credential cache; parsed with parseInt and must be a valid number >= 0, else warns and ignored.
CLAUDE_CODE_ASSUME_FIRST_PARTY_BASE_URL - Actual name has a leading underscore (_CLAUDE_CODE_ASSUME_FIRST_PARTY_BASE_URL); boolean-truthy that forces the configured base URL to be treated as the Anthropic first-party endpoint (zc()).
CLAUDE_CODE_ATTRIBUTION_HEADER - Controls the attribution/User-Agent header string on API requests; when explicitly disabled (Pl(), e.g. "0") the header is emptied.
CLAUDE_CODE_DISABLE_NONSTREAMING_FALLBACK - Disable fallback from streaming to non-streaming API mode; also gated by tengu_disable_streaming_to_non_streaming_fallback flag
CLAUDE_CODE_EXTRA_BODY - JSON object spread into the API request body; an anthropic_beta array is merge-deduplicated with built-in beta headers; must be a plain object (arrays/primitives rejected with an error log).
CLAUDE_CODE_EXTRA_METADATA - JSON object merged into API request metadata (combined with device_id/account_uuid/session_id); must be a plain object, else rejected with an error log.
CLAUDE_CODE_GZIP_REQUEST_BODIES - Enables gzip compression of API request bodies; defaults to the tengu_gzip_request_bodies feature flag (false).
CLAUDE_CODE_MAX_RETRIES - Maximum API request retries (parseInt, >=0); warns if set above the built-in cap.
CLAUDE_CODE_OAUTH_TOKEN - OAuth access token for authentication; auth source checked after ANTHROPIC_AUTH_TOKEN in priority order.
CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR - File descriptor number to read the OAuth token from (reported as source CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR).
CLAUDE_CODE_ORGANIZATION_UUID - Pre-set organization UUID, bypassing OAuth profile lookup; also sent as the X-Organization-Uuid header.
CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST - Boolean (ut); indicates the API provider/auth is managed by the host, altering auth checks and disabling Bedrock model upgrades.
CLAUDE_CODE_RATE_LIMIT_TIER - Rate limit tier for the OAuth session; used with CLAUDE_CODE_OAUTH_TOKEN.
CLAUDE_CODE_SESSION_ACCESS_TOKEN - Session-specific access token; sk-ant-sid tokens are sent as a sessionKey cookie, otherwise as Bearer auth.

## Model Configuration

ANTHROPIC_CUSTOM_MODEL_OPTION - Custom model ID added to the model selector dropdown; accepted as valid without a server probe during model validation
ANTHROPIC_CUSTOM_MODEL_OPTION_DESCRIPTION - Description text for the custom model option; falls back to "Custom model ({MODEL_ID})"
ANTHROPIC_CUSTOM_MODEL_OPTION_NAME - Display name (label) for the custom model option in the model selector; falls back to the model ID
ANTHROPIC_DEFAULT_FABLE_MODEL - Override the default Fable model ID; falls back to Fable 5, and enables the custom "fable" selector entry on first-party/gateway providers
ANTHROPIC_DEFAULT_FABLE_MODEL_DESCRIPTION - Description text for the custom Fable model override; falls back to "Custom Fable model"
ANTHROPIC_DEFAULT_FABLE_MODEL_NAME - Display name (label) for the custom Fable model override in the model selector; falls back to the model ID
ANTHROPIC_DEFAULT_HAIKU_MODEL - Override the default Haiku model ID (used for non-first-party providers); falls back to Haiku 4.5
ANTHROPIC_DEFAULT_HAIKU_MODEL_DESCRIPTION - Description text for the custom Haiku model override; falls back to "Custom Haiku model"
ANTHROPIC_DEFAULT_HAIKU_MODEL_NAME - Display name (label) for the custom Haiku model override; falls back to the model ID
ANTHROPIC_DEFAULT_OPUS_MODEL - Override the default Opus model ID; falls back to Opus 4.8
ANTHROPIC_DEFAULT_OPUS_MODEL_DESCRIPTION - Description text for the custom Opus model override; falls back to "Custom Opus model" (adds "1M context" when the model supports it)
ANTHROPIC_DEFAULT_OPUS_MODEL_NAME - Display name (label) for the custom Opus model override; falls back to the model ID
ANTHROPIC_DEFAULT_SONNET_MODEL - Override the default Sonnet model ID; falls back to Sonnet 4.6 (provider-dependent)
ANTHROPIC_DEFAULT_SONNET_MODEL_DESCRIPTION - Description text for the custom Sonnet model override; falls back to "Custom Sonnet model" (adds "1M context" when supported)
ANTHROPIC_DEFAULT_SONNET_MODEL_NAME - Display name (label) for the custom Sonnet model override; falls back to the model ID
ANTHROPIC_MODEL - Override the default Claude model; settable via CLI flag, env var, or settings file and validated against known model IDs
ANTHROPIC_SMALL_FAST_MODEL - Override the small/fast model used for quick operations (e.g. summarization); defaults to the Haiku model
CLAUDE_CODE_ALWAYS_ENABLE_EFFORT - Boolean-truthy; forces effort-level support on regardless of the per-model capability check (which otherwise excludes older claude-3/4-0/4-1/sonnet-4-5/haiku-4-5 models).
CLAUDE_CODE_AUTO_MODE_MODEL - [unverified] Registered as a string env var in the model-config env registry (alongside ANTHROPIC_MODEL); no consumer found in binary.
CLAUDE_CODE_BG_CLASSIFIER_MODEL - [unverified] Registered as a string env var in the model-config env registry (background classifier model); no consumer found in binary.
CLAUDE_CODE_DISABLE_1M_CONTEXT - Disable 1M-token context support; suppresses [1m] model variants and native_1m context
CLAUDE_CODE_DISABLE_ADAPTIVE_THINKING - Disable adaptive thinking; only takes effect for opus-4-6/sonnet-4-6 models, falling back to fixed-budget thinking
CLAUDE_CODE_DISABLE_FAST_MODE - Disable fast mode (first-party only)
CLAUDE_CODE_DISABLE_LEGACY_MODEL_REMAP - Disable legacy model-name remapping
CLAUDE_CODE_DISABLE_REFUSAL_FALLBACK - Disable switching models as a fallback when the model refuses; otherwise also gated by the switchModelsOnFlag setting
CLAUDE_CODE_DISABLE_THINKING - Disable extended thinking entirely
CLAUDE_CODE_EFFORT_LEVEL - Set reasoning effort level; accepted values low, medium (alias 'med'), high, xhigh, max; 'auto'/'unset' clears it and it overrides the session's effort from settings/ultracode
CLAUDE_CODE_ENABLE_OPUS_4_7_FAST_MODE - [unverified] Registered env flag with no read site found; name implies enabling opus-4-7 fast mode (otherwise gated by tengu_sunset_penguin_opus47), but effect not wired in this build
CLAUDE_CODE_FORCE_MID_CONVERSATION_SYSTEM - When truthy, forces the mid_conversation_system prompting behavior on (bypasses the per-model/settings gating).
CLAUDE_CODE_INVESTIGATE_FIRST - Sets investigate-first mode ("additive"/"compact"/off; truthy maps to additive) for claude-opus-4-7 only; otherwise defaults to the tengu_slate_harrier flag.
CLAUDE_CODE_MAX_OUTPUT_TOKENS - Maximum output tokens for responses; validated against a per-model upper limit.
CLAUDE_CODE_MID_CONVERSATION_SYSTEM - [unverified] String env var (Ue.str) in the env schema (related to CLAUDE_CODE_FORCE_MID_CONVERSATION_SYSTEM); no consuming code found in binary.
CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE - [unverified] Declared as a string env var (Ue.str) in the fast-mode model env group; no consuming read found in binary.
CLAUDE_CODE_SUBAGENT_MODEL - Forces a specific model for all sub-agent/teammate operations (value "inherit" is ignored); overrides normal model selection.
DISABLE_INTERLEAVED_THINKING - When truthy, disables the interleaved-thinking beta for supporting models.
DISABLE_PROMPT_CACHING - Truthy value disables prompt caching for all models.
DISABLE_PROMPT_CACHING_FABLE - Truthy value disables prompt caching for Fable models.
DISABLE_PROMPT_CACHING_HAIKU - Truthy value disables prompt caching for the Haiku model.
DISABLE_PROMPT_CACHING_MYTHOS - Disables prompt caching for Mythos models (checked via ke.DISABLE_PROMPT_CACHING_MYTHOS).
DISABLE_PROMPT_CACHING_OPUS - Truthy value disables prompt caching for the Opus model.
DISABLE_PROMPT_CACHING_SONNET - Truthy value disables prompt caching for the Sonnet model.
ENABLE_PROMPT_CACHING_1H - Truthy value enables 1-hour prompt caching (across providers); also requires not being on overage.
FALLBACK_FOR_ALL_PRIMARY_MODELS - When set, enables fallback-model behavior for all primary models (not just specific ones) on overload.
FORCE_PROMPT_CACHING_5M - Boolean-truthy (ut); when set, RVe() returns false to force 5-minute prompt-cache TTL and skip 1-hour caching (ENABLE_PROMPT_CACHING_1H).
MAX_STRUCTURED_OUTPUT_RETRIES - Max retries when re-prompting for structured output; parseInt(process.env...||"5",10), default 5
MAX_THINKING_TOKENS - Extended-thinking token budget; parsed as int, if >0 enables thinking with that fixed budget (overrides settings/adaptive), 0 disables

## Provider: AWS Bedrock

ANTHROPIC_BEDROCK_BASE_URL - Custom endpoint for Bedrock; passed as endpoint to the Bedrock client, defaults to https://bedrock-runtime.{region}.amazonaws.com
ANTHROPIC_BEDROCK_SERVICE_TIER - When set, sent as the X-Amzn-Bedrock-Service-Tier header on Bedrock requests and shown as "Bedrock service tier" in provider diagnostics
ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION - AWS region for the small/fast (haiku) model on Bedrock; used in place of the general region when the haiku model differs from the main model
AWS_ACCESS_KEY_ID - AWS access key (with AWS_SECRET_ACCESS_KEY) used for Bedrock SigV4 authentication and AWS credential detection
AWS_BEARER_TOKEN_BEDROCK - Bearer token for Bedrock; when set, skips SigV4 signing and sends Authorization: Bearer instead
AWS_CONFIG_FILE - Standard AWS SDK config-file path; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_CONTAINER_CREDENTIALS_FULL_URI - Standard AWS SDK container-credentials URI; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_CONTAINER_CREDENTIALS_RELATIVE_URI - Standard AWS SDK relative container-credentials URI; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_DEFAULT_REGION - Fallback AWS region used when AWS_REGION is unset; feeds Bedrock region resolution
AWS_LOGIN_CACHE_DIRECTORY - Directory for the AWS SSO login token cache; defaults to ~/.aws/login/cache (os.homedir()) when unset.
AWS_PROFILE - AWS named profile used as the default for AWS SDK credential/region config resolution (loadConfig).
AWS_REGION - AWS region for Bedrock/AWS SDK requests; falls back to AWS_DEFAULT_REGION.
AWS_ROLE_ARN - Standard AWS SDK var; ARN of the IAM role assumed via AssumeRoleWithWebIdentity (paired with AWS_WEB_IDENTITY_TOKEN_FILE); also a "proxy-injected" placeholder gate for the agent proxy.
AWS_SECRET_ACCESS_KEY - AWS secret access key for Bedrock/SDK auth, used together with AWS_ACCESS_KEY_ID and AWS_SESSION_TOKEN.
AWS_SESSION_TOKEN - AWS session token for temporary credentials.
AWS_SHARED_CREDENTIALS_FILE - Standard AWS SDK var; path to the shared credentials file for credential resolution; its presence also gates agent-proxy AWS placeholder injection.
AWS_WEB_IDENTITY_TOKEN_FILE - Standard AWS SDK var; path to the web-identity token file used with AWS_ROLE_ARN for AssumeRoleWithWebIdentity credential resolution.
CLAUDE_CODE_SKIP_BEDROCK_AUTH - Boolean-truthy; skips AWS credential resolution for Bedrock (uses no signed AWS auth).
CLAUDE_CODE_USE_BEDROCK - Boolean (ut()) provider selector; routes all API calls through AWS Bedrock (getAPIProvider returns "bedrock"), enables Bedrock-specific model-id error handling.
CLAUDE_ENABLE_BYTE_WATCHDOG_BEDROCK - Boolean (ut()); enables the byte-stream watchdog for the Bedrock provider (cGs gate feeding the overall watchdog eligibility check).
ENABLE_PROMPT_CACHING_1H_BEDROCK - On Bedrock, a truthy value enables 1-hour prompt caching.

## Provider: Bedrock Mantle

ANTHROPIC_BEDROCK_MANTLE_BASE_URL - Custom base URL for the Bedrock Mantle endpoint; defaults to https://bedrock-mantle.{region}.api.aws
CLAUDE_CODE_SKIP_MANTLE_AUTH - Boolean-truthy; skips Amazon Bedrock (Mantle) authentication (no AWS credential resolution).
CLAUDE_CODE_USE_MANTLE - Boolean (ut()) provider selector; routes API calls through Bedrock Mantle (getAPIProvider returns "mantle"; when Bedrock+Mantle, model routing uses "mantle").

## Provider: Anthropic AWS

ANTHROPIC_AWS_API_KEY - API key for the Claude-Platform-on-AWS (anthropicAws) provider; if absent falls back to AWS credential chain (temporarily deleted from env while constructing the SDK client)
ANTHROPIC_AWS_BASE_URL - Custom base URL for the Claude-Platform-on-AWS provider; defaults to https://aws-external-anthropic.{region}.api.aws
ANTHROPIC_AWS_WORKSPACE_ID - Workspace ID for the Claude-Platform-on-AWS provider; shown as "Workspace ID" in provider config diagnostics
CLAUDE_CODE_SKIP_ANTHROPIC_AWS_AUTH - Boolean-truthy; skips Claude-Platform-on-AWS (anthropicAws) authentication, sending no Authorization/using skipAuth.
CLAUDE_CODE_USE_ANTHROPIC_AWS - Boolean (ut()) provider selector; routes API calls through the Anthropic AWS service (getAPIProvider returns "anthropicAws"), suppresses OAuth/login and error reporting.

## Provider: Google Vertex AI

ANTHROPIC_VERTEX_BASE_URL - Custom base URL for the Vertex AI endpoint; defaults to the region-derived Vertex URL
ANTHROPIC_VERTEX_PROJECT_ID - GCP project ID for Vertex AI calls (ignored if GOOGLE/GCP project or credentials env vars are set)
CLAUDE_CODE_SKIP_VERTEX_AUTH - Boolean-truthy; skips GCP authentication for Vertex AI (does not build Google auth).
CLAUDE_CODE_USE_VERTEX - Boolean (ut()) provider selector; routes all API calls through Google Vertex AI (getAPIProvider returns "vertex"; "global" region affects endpoint resolution).
CLOUDSDK_AUTH_ACCESS_TOKEN - Google Cloud SDK OAuth access token for Vertex AI auth; if it and GOOGLE_APPLICATION_CREDENTIALS are both unset, the proxy/bridge injects the placeholder value "proxy-injected".
CLOUDSDK_CONFIG - Google Cloud SDK configuration directory (defaults to APPDATA or HOME/.config/gcloud); scanned for gcloud configurations.
CLOUD_ML_REGION - Default GCP region for Vertex AI; defaults to "us-east5".
DETECT_GCP_RETRIES - Number of retries for GCP metadata-server detection; parsed via Number(), defaults to 0.
GCE_METADATA_HOST - Overrides GCE metadata server hostname for GCP auth (Xeo: GCE_METADATA_IP||GCE_METADATA_HOST||default HOST_ADDRESS); presence also skips the BIOS residency probe.
GCE_METADATA_IP - Overrides GCE metadata server IP for GCP auth, taking precedence over GCE_METADATA_HOST; presence also skips the BIOS residency probe.
GCLOUD_PROJECT - Legacy GCP project ID; first in the resolution chain (GCLOUD_PROJECT||GOOGLE_CLOUD_PROJECT||gcloud_project||google_cloud_project) for Vertex project.
GOOGLE_APPLICATION_CREDENTIALS - Path to GCP service-account credentials JSON (GOOGLE_APPLICATION_CREDENTIALS||google_application_credentials); used for Vertex/ADC auth and to gate proxy credential injection.
GOOGLE_CLOUD_PROJECT - GCP project ID in the Vertex project resolution chain (GCLOUD_PROJECT||GOOGLE_CLOUD_PROJECT||...); presence also used to detect "gcp" platform.
GOOGLE_CLOUD_QUOTA_PROJECT - GCP quota/billing project applied as quotaProjectId on the resolved ADC credential (defaults to null).
METADATA_SERVER_DETECTION - Controls GCP metadata-server detection mode (google-auth-library); trimmed/lowercased and validated against allowed METADATA_SERVER_DETECTION values, throws on unknown

## Provider: Microsoft Foundry

ANTHROPIC_FOUNDRY_API_KEY - API key for Microsoft Foundry auth; if absent falls back to Azure DefaultAzureCredential (unless CLAUDE_CODE_SKIP_FOUNDRY_AUTH)
ANTHROPIC_FOUNDRY_BASE_URL - Custom base URL for the Microsoft Foundry API endpoint; shown as "Microsoft Foundry base URL" in provider diagnostics
ANTHROPIC_FOUNDRY_RESOURCE - Microsoft Foundry resource identifier; shown as "Microsoft Foundry resource" in provider diagnostics
CLAUDE_CODE_SKIP_FOUNDRY_AUTH - Boolean-truthy; skips Microsoft Foundry auth by using an empty bearer-token provider (when ANTHROPIC_FOUNDRY_API_KEY is unset).
CLAUDE_CODE_USE_FOUNDRY - Boolean (ut()) provider selector; routes all API calls through Microsoft Foundry (getAPIProvider returns "foundry").

## OAuth & Login

CLAUDE_CODE_ACCOUNT_UUID - Pre-set account UUID used in place of the OAuth account lookup (combined with CLAUDE_CODE_USER_EMAIL and CLAUDE_CODE_ORGANIZATION_UUID).
CLAUDE_CODE_CUSTOM_OAUTH_URL - Custom OAuth base URL; must be in the approved endpoints list (ALLOWED_OAUTH_BASE_URLS) or Claude throws, and it tags the OAuth mode as "-custom-oauth".
CLAUDE_CODE_DESIGN_OAUTH_CLIENT_ID - Override the Claude Design OAuth client id (falls back to the build's DESIGN_CLIENT_ID; a placeholder 00000000- id means unconfigured)
CLAUDE_CODE_HFI_BEARER_TOKEN - [unverified] String env var (Ue.str) in the env schema, grouped with host/OAuth auth vars (HFI); no consuming code found in binary.
CLAUDE_CODE_HOST_AUTH_ENV_VAR - Names the env var holding the host-provided auth token (default ANTHROPIC_AUTH_TOKEN); its presence marks the session as managed-by-host.
CLAUDE_CODE_HOST_AUTH_REFRESH_TIMEOUT_MS - Timeout in ms (Number) for host auth token refresh; used when CLAUDE_CODE_SDK_HAS_HOST_AUTH_REFRESH is set.
CLAUDE_CODE_HOST_CREDS_FILE - Path to a host credentials file loaded when the provider is managed-by-host; must be absolute, <=65536 bytes, and (non-Windows) owner-only readable or it is ignored.
CLAUDE_CODE_OAUTH_401_WAIT_MS - Integer ms wait window for OAuth 401 recovery/retry; returns the set value, else 60000 when CLAUDE_CODE_REMOTE_SESSION_ID is set, else 0.
CLAUDE_CODE_OAUTH_CLIENT_ID - Custom OAuth client ID; overrides the default CLIENT_ID for login and refresh-token flows.
CLAUDE_CODE_OAUTH_REFRESH_TOKEN - OAuth refresh token used to obtain access tokens at startup; requires CLAUDE_CODE_OAUTH_SCOPES to be set.
CLAUDE_CODE_OAUTH_SCOPES - Whitespace-separated OAuth scopes to request; defaults to ["user:inference"] when unset/empty.
CLAUDE_CODE_SUBSCRIPTION_TYPE - Overrides the OAuth session subscriptionType (set from bg auth snapshot or used with CLAUDE_CODE_OAUTH_TOKEN).
CLAUDE_CODE_USER_EMAIL - Pre-sets the user email (used with CLAUDE_CODE_ACCOUNT_UUID and CLAUDE_CODE_ORGANIZATION_UUID) to seed the OAuth account, bypassing lookup.
CLAUDE_LOCAL_OAUTH_API_BASE - Local-dev OAuth API base URL (trailing slash stripped), default http://localhost:8000; used to build BASE_API_URL.
CLAUDE_LOCAL_OAUTH_APPS_BASE - Local-dev OAuth apps base URL (trailing slash stripped), default http://localhost:4000; used to build the claude.ai authorize URL.
CLAUDE_LOCAL_OAUTH_CONSOLE_BASE - Local-dev OAuth console base URL (trailing slash stripped), default http://localhost:3000; used to build the console authorize URL.
CLAUDE_TRUSTED_DEVICE_TOKEN - Pre-set trusted device token; when set it takes precedence and skips proactive trusted-device enrollment.
ENVIRONMENT_SERVICE_KEY - [unverified] Declared as a string in the OAuth/secrets env schema (Ue.str()); no consuming code found in the binary.
USE_LOCAL_OAUTH - Truthy flag (ut()); routes the Chrome bridge to local ws://localhost:8765 (dev), also treated like LOCAL_BRIDGE
USE_STAGING_OAUTH - Truthy flag (ut()); routes the Chrome bridge to wss://bridge-staging.claudeusercontent.com (staging)

## Core Settings

ANTHROPIC_CONFIG_DIR - Override for the Anthropic config directory; falls back to XDG_CONFIG_HOME/anthropic, then HOME/.config/anthropic
API_TIMEOUT_MS - API request timeout in milliseconds; primary client default 600000 (10 min), shown in timeout error messages with a suggestion to increase it
CLAUBBIT - Boolean (Ue.bool getter) flagging Claubbit mode (reported as isClaubbit in telemetry; skips the trust dialog).
CLAUDE_CODE_DISABLE_FILE_CHECKPOINTING - Disable file checkpointing (undo/restore); also gated by the fileCheckpointingEnabled setting
CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC - Restrict network to essential traffic only (returns 'essential-traffic' mode, disabling feature-flag fetches/telemetry)
CLAUDE_CODE_DISABLE_NOTIFICATION_PRESENCE_CHECK - Skip the user-presence check before sending notifications (otherwise a present user suppresses them)
CLAUDE_CODE_DISABLE_VIRTUAL_SCROLL - Disable virtual scrolling in the transcript UI
CLAUDE_CODE_EAGER_FLUSH - Eagerly flush pending messages after each turn (also implied by CLAUDE_CODE_IS_COWORK)
CLAUDE_CODE_ENABLE_MENU_KIND_LANES - Enable grouping menu entries into 'kind lanes'; otherwise gated by tengu_mint_lanes feature flag
CLAUDE_CODE_ENTRYPOINT - Identifies how Claude Code was launched (e.g., cli, sdk-ts/sdk-py/sdk-cli, mcp, claude-vscode, claude-desktop, remote_*, local-agent, claude-in-slack/teams, claude-code-github-action).
CLAUDE_CODE_MANAGED_SETTINGS_PATH - Path to managed (admin) settings; Claude Code sets it to the config dir when spawning host/sandbox child processes.
CLAUDE_CODE_QUESTION_PREVIEW_FORMAT - Format for question preview rendering; accepts "markdown" or "html".
CLAUDE_CODE_REPL - Explicitly enables/disables REPL mode (disable check + ut()); takes precedence over the tengu_slate_harbor feature-flag default.
CLAUDE_CODE_SESSIONEND_HOOKS_TIMEOUT_MS - Timeout in ms for SessionEnd hook execution (parsed int, must be >0).
CLAUDE_CODE_SIMPLE - Boolean-truthy simplified/bare mode (equivalent to --bare, sets CLAUDE_CODE_SIMPLE=1); disables attachments, auto memory, and other advanced features.
CLAUDE_CODE_SIMPLE_SYSTEM_PROMPT - Boolean-truthy forces the simple system prompt (ut() returns true); a disable-style value (Pl()) forces it off; also implied by CLAUDE_CODE_SIMPLE.
CLAUDE_CODE_SKIP_FAST_MODE_NETWORK_ERRORS - Boolean-truthy; when fast-mode availability check fails with a network_error/unknown reason, suppresses reporting it as unavailable (returns null).
CLAUDE_CODE_SKIP_FAST_MODE_ORG_CHECK - Boolean-truthy (VRr()) that skips the fast-mode organization eligibility check.
CLAUDE_CODE_SKIP_PROMPT_HISTORY - Boolean-truthy; disables saving prompts to (and persisting) prompt history.
CLAUDE_CODE_SYNTAX_HIGHLIGHT - Controls code syntax highlighting: value is used as the highlight theme (falling back to BAT_THEME), and a disable-style value (Pl()) turns highlighting off.
CLAUDE_CODE_TUI_JUST_SWITCHED - Set by the harness when TUI mode just switched (e.g. to "fullscreen"); used to gate showing the flicker-free rendering hint.
CLAUDE_CODE_USER_DIALOG_TIMEOUT_MS - Integer ms timeout (via ke) for user dialogs; defaults to 300000.
CLAUDE_CONFIG_DIR - Overrides the Claude config directory (default ~/.claude), NFC-normalized; used for config files, jobs dir, secure-storage hashing and env passthrough.
CLAUDE_ENV_FILE - Path to a session environment file; its trimmed contents are read and loaded into the session environment (logged with char count).
EDITOR - Default text editor (used after VISUAL) for editing prompts/config.
VISUAL - Preferred visual editor; trimmed and checked before EDITOR when resolving the external editor command
XDG_CONFIG_HOME - XDG config directory; used to locate git ignore, anthropic config (XDG_CONFIG_HOME/anthropic), and fish/alacritty config files

## Enable Flags

CLAUDE_CODE_ENABLE_AUTO_MODE - Opt-in to enable Claude Code auto (permission) mode for third-party providers; first-party and anthropicAws are enabled automatically
CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION - Enable the prompt-suggestion feature; set '0'/false to force off
CLAUDE_CODE_OWNERSHIP_FRAME - Arms the "ownership frame" experiment (source=env); otherwise gated by the tengu_walnut_prism feature flag.
CLAUDE_CODE_PEWTER_OWL - Master override for the "pewter_owl" experiment (header/tool/brief variants); if unset, falls back to model allowlist and tengu_pewter_owl_* flags.
CLAUDE_CODE_PEWTER_OWL_TOOL - Override for the pewter_owl tool variant specifically; if unset, falls back to hro("pewter_owl_tool") gating.
CLAUDE_CODE_PROACTIVE - Boolean (ut); enables proactive assistant mode.
CLAUDE_CODE_SHOJI_ENGINE - Boolean-truthy (ut()) that enables the internal "shoji engine"; otherwise falls back to GrowthBook flag tengu_shoji_engine (default false).
CLAUDE_CODE_VERIFY_PROMPT - Boolean (ut()); arms the verify-prompt feature (logs verify_prompt_arm_active source=env), otherwise gated by tengu_sparrow_ledger flag.
CLAUDE_IMPORT_CONVERSATIONS - Boolean (ut()); gates the import-conversations feature (returns "import-conversations is not enabled" when unset).
CLAUDE_PREVIEW_CLASSIFIER_FLOOR - Boolean (ke.CLAUDE_PREVIEW_CLASSIFIER_FLOOR??false); enables the "preview classifier floor" (previewClassifierFloorEnabled) alongside the cowork/chrome automode classifier settings.

## Disable Flags

CLAUDE_CODE_DISABLE_AGENT_VIEW - Disable the agent view UI; equivalent to the disableAgentView setting
CLAUDE_CODE_DISABLE_ATTACHMENTS - Disable file attachments in messages (also disabled by CLAUDE_CODE_SIMPLE or bareFork)
CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS - Disable experimental API beta features/headers (also disabled under HIPAA org policy)
CLAUDE_CODE_DISABLE_FEEDBACK_SURVEY - Disable feedback survey prompts
DISABLE_AUTOUPDATER - Disables the automatic updater; DISABLE_UPDATES takes precedence over it.
DISABLE_COST_WARNINGS - When set, suppresses cost warning notifications (checked via ke.DISABLE_COST_WARNINGS).
DISABLE_ERROR_REPORTING - When set, disables error reporting to Anthropic.
DISABLE_GROWTHBOOK - Disables the GrowthBook feature-flag/experimentation service (V8() returns false when set); also blocks Remote Control.
DISABLE_INSTALLATION_CHECKS - When truthy, skips installation verification checks (e.g. during auto-update).
DISABLE_TELEMETRY - When set, puts the client in "no-telemetry" mode, disabling telemetry.
DISABLE_UPDATES - Admin-level disable of all updates; takes precedence over DISABLE_AUTOUPDATER and shows "Updates are disabled by your administrator".
DO_NOT_TRACK - Truthy value puts the client in "no-telemetry" mode, disabling telemetry/tracking.

## Command Disablers

DISABLE_BUG_COMMAND - Disables the /bug command (message: "/feedback has been disabled via the DISABLE_BUG_COMMAND environment variable").
DISABLE_DOCTOR_COMMAND - Disables the /doctor command.
DISABLE_EXTRA_USAGE_COMMAND - Disables the extra-usage (/usage) command.
DISABLE_FEEDBACK_COMMAND - Disables the /feedback command.
DISABLE_INSTALL_GITHUB_APP_COMMAND - Disables the install-GitHub-app command.
DISABLE_LOGIN_COMMAND - Disables the /login command.
DISABLE_LOGOUT_COMMAND - Disables the /logout command.
DISABLE_UPGRADE_COMMAND - Disables the /upgrade command.

## Bash & Shell

BASH_MAX_OUTPUT_LENGTH - Max Bash tool output length before truncation; parsed with default 30000 and clamped to an upper limit of 150000.
CLAUDE_BASH_MAINTAIN_PROJECT_WORKING_DIR - Truthy flag (ut()); keeps the project working directory persistent across Bash tool commands.
CLAUDE_CODE_BASH_SANDBOX_SHOW_INDICATOR - Boolean-truthy; when the bash sandbox is active, shows the tool label as "SandboxedBash" instead of "Bash".
CLAUDE_CODE_DONT_INHERIT_ENV - Boolean; when set, don't inherit the parent process env into shell-snapshot/env-probe spawns (uses empty base env)
CLAUDE_CODE_GIT_BASH_PATH - Path to git bash on Windows; if set but the path does not exist, prints an error and exits.
CLAUDE_CODE_POWERSHELL_RESPECT_EXECUTION_POLICY - When unset/false, appends "-ExecutionPolicy Bypass" to PowerShell args; when truthy, respects the system execution policy.
CLAUDE_CODE_PWSH_PARSE_TIMEOUT_MS - PowerShell command parse timeout in ms (parsed int, must be >0). Default: 5000.
CLAUDE_CODE_SCRIPT_CAPS - JSON object mapping script names to numeric capability limits; scripts not listed have no caps.
CLAUDE_CODE_SHELL - Override the shell binary for Bash tool execution; only honored if it contains "bash" or "zsh" and is executable, else logged as invalid.
CLAUDE_CODE_SHELL_PREFIX - Prefix command wrapped around shell/MCP-stdio invocations (via P3r), inserted before eval of the command.
CLAUDE_CODE_USE_POWERSHELL_TOOL - Enables the PowerShell tool (preview): non-Windows uses ut(); on Windows Pl() disables, ut() enables, else gated by tengu_cobalt_ridge flag.
COMSPEC - Windows command interpreter path; used as fallback after SHELL to detect the shell name.
SHELL - User's default shell path; used for shell type detection (zsh/bash), completion install, and on Windows overwritten with the detected Git Bash path

## Tool Configuration

BAT_THEME - Fallback syntax-highlighting theme (read after BAT_HIGHLIGHT via ??) for the bat-style code highlighter.
CLAUDE_CODE_DISABLE_ADVISOR_TOOL - Disable the advisor server tool
CLAUDE_CODE_DISABLE_ARTIFACT - Disable the Artifact tool (read via ke.); equivalent to the disableArtifact setting
CLAUDE_CODE_ENABLE_EXPERIMENTAL_ADVISOR_TOOL - Force-enable the experimental advisor tool (first-party and N1 only); otherwise gated by tengu_sage_compass2 flag
CLAUDE_CODE_ENABLE_FINE_GRAINED_TOOL_STREAMING - Enable fine-grained tool-use input streaming; set '0'/false to force off; otherwise gated per-provider (tengu_fgts, eagerInputStreaming)
CLAUDE_CODE_ENABLE_TASKS - Controls the task tracking system; enabled by default and disabled only when set to a falsy value (Pl check).
CLAUDE_CODE_FILE_READ_MAX_OUTPUT_TOKENS - Maximum output tokens when reading files (parseInt, must be >0); default 25000.
CLAUDE_CODE_GLOB_HIDDEN - Include hidden files in glob searches (adds --hidden to ripgrep); defaults to true.
CLAUDE_CODE_GLOB_NO_IGNORE - Ignore .gitignore in glob searches (adds --no-ignore to ripgrep); defaults to true.
CLAUDE_CODE_GLOB_TIMEOUT_SECONDS - Glob/ripgrep timeout in seconds (parseInt); default 20s (60s on WSL).
CLAUDE_CODE_MAX_TOOL_USE_CONCURRENCY - Maximum concurrent tool-use operations (parseInt, >0); default 10.
CLAUDE_CODE_PARKED_PERMISSION_WAIT_MS - Integer ms wait for parked-permission prefetch; defaults to 2000.
CLAUDE_CODE_USE_NATIVE_FILE_SEARCH - [unverified] Boolean env (x3u=Ue.bool schema) registered in the env schema; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_CODE_WEBFETCH_USE_CCR_PROXY - Truthy read (ke.); when firstParty provider and CCR active, routes the WebFetch tool through the CCR proxy (web-fetch route).
CLAUDE_CODE_WEBSEARCH_USE_CCR_PROXY - Truthy read (ke.); when firstParty provider and CCR active, routes the WebSearch tool through the CCR proxy (web-search route).
EMBEDDED_SEARCH_TOOLS - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_LSP_TOOL - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_TOOL_SEARCH - Controls tool-search/deferred tool-loading mode; accepts true/auto/auto:N or a 0-100 percentage (0=tst, 100=standard), a truthy value enables tst mode.
SLASH_COMMAND_TOOL_CHAR_BUDGET - Character budget for the slash-command tool listing; if Number(env) is truthy it directly overrides the computed budget (default fraction 0.01 of context), result floored at 1
TASK_MAX_OUTPUT_LENGTH - Max character length of Task/sub-agent tool output before truncation; parseInt base-10, must be >0 else default 32000, clamped to max 160000
USE_BUILTIN_RIPGREP - When set to a disabling value (0/false/no/off via Pl()), uses the system 'rg' instead; otherwise (default/unset) uses the bundled built-in ripgrep

## MCP (Model Context Protocol)

ALLOW_ANT_COMPUTER_USE_MCP - [unverified] Boolean env var (Ue.bool()) registered in the env registry; name implies enabling an Anthropic computer-use MCP server, but no consumer found in the binary
CLAUDE_CODE_ENABLE_DESIGN_MCP - Enable the Claude Design MCP (http) server; when unset falls back to a feature-flag default
CLAUDE_CODE_ENABLE_XAA - Truthy-enables XAA (cross-app auth) support, exposing the xaaIdp OIDC IdP settings schema for MCP servers.
CLAUDE_CODE_MCP_ALLOWLIST_ENV - Enables env-var allowlist filtering for MCP servers; truthy on / falsy off, default enabled only for the local-agent entrypoint.
CLAUDE_CODE_MCP_AUTO_BACKGROUND_MS - [unverified] Integer env var (Ue.int) in the env schema; no consuming code found in binary.
CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT - Idle timeout in ms for MCP tool responses before aborting; clamped to a min of 1000 and a per-tool max, with 0 disabling.
CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS - Boolean env flag (Ue.bool()); when set, plugin-provided MCP servers are not launched (logged "(CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS is set)"), except those listed in CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT.
CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT - String env var (Ue.str()) listing plugin MCP servers exempted from CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS (logged "exempted via CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT").
CLAUDE_CODE_TERMINAL_MCP_TOOLS - Comma-separated list of MCP tool names (split/trim/filter into a Set); tool_use of these tools is treated as terminal/end-turn content.
ENABLE_CLAUDEAI_MCP_SERVERS - Gates Claude.ai-hosted MCP connectors; an explicit false value (Pl()) disables them (also controlled by the disableClaudeAiConnectors setting).
ENABLE_MCP_LARGE_OUTPUT_FILES - When set to an explicit false value (Pl()), large MCP tool results are truncated instead of written to files.
MAX_MCP_OUTPUT_TOKENS - Max output tokens for MCP tool results; parseInt if >0, else tengu_velvet_ibis flag's mcp_tool value, else default 25000
MCP_CLIENT_SECRET - Client secret for MCP OAuth; returned directly if set, otherwise prompted via TTY (error if no TTY)
MCP_CONNECTION_NONBLOCKING - Truthy flag; when set (via Pl()) makes MCP server connections non-blocking rather than awaited at startup
MCP_CONNECT_TIMEOUT_MS - MCP server connect timeout in ms; read as int via ke.MCP_CONNECT_TIMEOUT_MS, used if >0 else default 5000
MCP_OAUTH_CALLBACK_PORT - Fixed port for the MCP OAuth callback server; parseInt, used if >0 else a port is auto-selected from a range
MCP_OAUTH_CLIENT_METADATA_URL - Overrides the MCP OAuth CIMD client-metadata URL; used verbatim if set, else built-in default
MCP_REMOTE_SERVER_CONNECTION_BATCH_SIZE - Number of remote MCP servers to connect concurrently; parseInt, used if >0 else default 20
MCP_SERVER_CONNECTION_BATCH_SIZE - Number of MCP servers to connect concurrently; parseInt, used if >0 else default 3
MCP_TIMEOUT - MCP server connection timeout in ms; read as int via ke.MCP_TIMEOUT, used if >0 else default 30000
MCP_TOOL_TIMEOUT - MCP tool execution timeout in ms; parseInt, clamped to [1000, max] and used when >0
MCP_TRUNCATION_PROMPT_OVERRIDE - Overrides MCP output truncation prompt mode; any value except 'legacy' enables the subagent prompt, else falls back to tengu_mcp_subagent_prompt flag
MCP_XAA_IDP_CLIENT_SECRET - IdP client secret for MCP XAA auth; required by the --client-secret CLI flag (errors if flag set without this var)

## Plugins & Extensions

CLAUDE_CODE_DISABLE_BUNDLED_SKILLS - Hide bundled skills from the model (they stay typable); plugins, .claude/skills and .claude/commands unaffected; equivalent to the disableBundledSkills setting
CLAUDE_CODE_DISABLE_CLAUDE_API_SKILL - Skip registering the built-in Claude API skill
CLAUDE_CODE_DISABLE_CLAUDE_CODE_SKILL - Skip registering the built-in Claude Code skill
CLAUDE_CODE_DISABLE_OFFICIAL_MARKETPLACE_AUTOINSTALL - Disable automatic installation of official marketplace plugins
CLAUDE_CODE_DISABLE_POLICY_SKILLS - Disable loading of policy (managed-settings) skills
CLAUDE_CODE_ENABLE_BACKGROUND_PLUGIN_REFRESH - Enable background plugin refresh after install/init when a refresh is needed
CLAUDE_CODE_PLUGIN_BINARY_ASSETS - Enables plugin binary assets; if unset, gated by the tengu_plugin_binary_assets flag.
CLAUDE_CODE_PLUGIN_CACHE_DIR - Custom cache directory for plugin storage (used for plugin cache and zip cache).
CLAUDE_CODE_PLUGIN_GIT_TIMEOUT_MS - Git operation timeout for plugin installation in ms (parsed int, must be >0). Default: 120000.
CLAUDE_CODE_PLUGIN_KEEP_MARKETPLACE_ON_FAILURE - Keeps the existing marketplace clone when git pull fails instead of re-cloning.
CLAUDE_CODE_PLUGIN_PREFER_HTTPS - Boolean (ut); prefers HTTPS over SSH for plugin git operations (also forced in remote mode).
CLAUDE_CODE_PLUGIN_SEED_DIR - Path-delimiter-separated list of directories containing seed/pre-installed plugins.
CLAUDE_CODE_PLUGIN_USE_ZIP_CACHE - Boolean (ut); enables zip-based caching for plugin downloads.
CLAUDE_CODE_SKILL_DESC_REFRAME - Boolean-truthy (via ke) enabling the skill-description-reframe arm; otherwise falls back to GrowthBook flag tengu_russet_linnet (default false).
CLAUDE_CODE_SYNC_PLUGINS - Boolean-truthy (ut()) enabling synchronous plugin sync/reconcile at startup.
CLAUDE_CODE_SYNC_PLUGINS_BUFFERED_DOWNLOAD - Boolean env flag (via ke); when set, uses the buffered plugin-download code path (Otf) instead of the streaming/stall-guarded one.
CLAUDE_CODE_SYNC_PLUGINS_DOWNLOAD_STALL_MS - Integer ms (via ke) for the plugin-download stall timeout; defaults to 60000.
CLAUDE_CODE_SYNC_PLUGINS_INSTALL_TIMEOUT_MS - Integer ms (parseInt) plugin-sync install timeout; defaults to 30000 when unset or not >0.
CLAUDE_CODE_SYNC_PLUGINS_MCP_TIMEOUT_MS - Integer ms (parseInt) plugin-sync MCP timeout; used if finite and >=0, otherwise defaults to 10000.
CLAUDE_CODE_SYNC_PLUGIN_INSTALL - Boolean env flag (via ke) that installs plugins synchronously instead of async; drives plugin_install progress markers.
CLAUDE_CODE_SYNC_PLUGIN_INSTALL_TIMEOUT_MS - Integer ms (parseInt) timeout for synchronous plugin installation.
CLAUDE_CODE_SYNC_SKILLS - Boolean-truthy (ut()) enabling synchronous skill sync/install.
CLAUDE_CODE_SYNC_SKILLS_INSTALL_TIMEOUT_MS - Integer ms (via ke) skill-sync install timeout; defaults to 30000 when unset or not >0.
CLAUDE_CODE_SYNC_SKILLS_WAIT_TIMEOUT_MS - Integer ms (via ke) to wait for skill sync; defaults to 5000 when unset or not >0.
CLAUDE_CODE_USE_COWORK_PLUGINS - Boolean (ut()); enables cowork-mode plugins, switches settings file to cowork_settings.json and uses the cowork plugin cache dir.
FORCE_AUTOUPDATE_PLUGINS - When truthy, forces plugin auto-update even when local/dev plugins are present.

## Context & Compaction

API_MAX_INPUT_TOKENS - [unverified] Integer env var (Ue.int()) registered in the env registry; name implies a maximum input-token limit, but no consumer found in the binary
API_TARGET_INPUT_TOKENS - [unverified] Integer env var (Ue.int()) registered in the env registry; name implies a target input-token count, but no consumer found in the binary
CLAUDE_AFTER_LAST_COMPACT - Boolean; when fetching session messages, only return those after the last compaction.
CLAUDE_AUTOCOMPACT_PCT_OVERRIDE - Overrides the auto-compaction trigger threshold as a percentage (parseFloat) of the context window.
CLAUDE_CODE_AUTO_COMPACT_WINDOW - Overrides the auto-compaction context window size; parsed/validated as int and clamped to at least the internal minimum (zln).
CLAUDE_CODE_BLOCKING_LIMIT_OVERRIDE - Test override for the blocking context limit; parsed as int (parseInt base 10) and passed as testBlockingOverride.
CLAUDE_CODE_COLD_COMPACT - Boolean-truthy (ut()); enables cold-compaction behavior in the auto-compaction path.
CLAUDE_CODE_DISABLE_PRECOMPACT_SKIP - Disable the transcript pre-compaction boundary-skip optimization when reading large transcripts
CLAUDE_CODE_ENABLE_TOKEN_USAGE_ATTACHMENT - When truthy, attaches a token_usage context block (used/total/remaining) to the conversation.
CLAUDE_CODE_MAX_CONTEXT_TOKENS - Max context tokens override (parseInt, >0); only applied when DISABLE_COMPACT is set.
CLAUDE_CODE_TODO_REMINDER_MODE - String override (via ke) for the todo-reminder mode; when unset, mode comes from GrowthBook tengu_soft_slate_nudge ("off" or "baseline").
CLAUDE_CODE_TOTAL_TOKENS_REMINDER - Overrides the totalTokensReminder mode (off/infinite/fixed/countdown/padded-countdown) that emits a <total_tokens>N tokens left</total_tokens> block; else from settings or GrowthBook tengu_lapis_anchor (default "off").
CLAUDE_CODE_TOTAL_TOKENS_REMINDER_AFTER_USER_TURN - Overrides whether the total-tokens reminder is also emitted after each regular user prompt (re-anchoring padded-countdown); defaults off, server-controlled via GrowthBook tengu_lapis_anchor_user_turn.
CLAUDE_CODE_TOTAL_TOKENS_REMINDER_BUDGET - Overrides the starting budget (tokens) for totalTokensReminder 'padded-countdown' mode; defaults to 15000000, server-controlled via GrowthBook.
CLAUDE_CONTEXT_COLLAPSE - [unverified] Boolean env (Vju=Ue.bool schema) in the model-config schema associated with the context-collapse feature (snapshots/commits/resets); only in name-list/getter, no consuming read found in binary.
CLAUDE_CONTEXT_COLLAPSE_MODEL - [unverified] String env (Gju=Ue.str schema) in the model-config schema, apparently a model override for the context-collapse feature; only in name-list/getter, no consuming read found in binary.
DISABLE_AUTO_COMPACT - Truthy value disables automatic context compaction (auto-compact).
DISABLE_COMPACT - Disables context compaction; when set together with CLAUDE_CODE_MAX_CONTEXT_TOKENS, that manual max-context-token override is honored.
USE_API_CLEAR_TOOL_RESULTS - [unverified] Boolean env flag (Ue.bool()) registered alongside USE_API_CONTEXT_MANAGEMENT; no consumption found in binary; name implies gating API context-editing to clear tool results
USE_API_CLEAR_TOOL_USES - [unverified] Boolean env flag (Ue.bool()) registered alongside USE_API_CONTEXT_MANAGEMENT; no consumption found in binary; name implies gating API context-editing clear_tool_uses
USE_API_CONTEXT_MANAGEMENT - Truthy flag (ut()) intended to enable API-side context-management edits, but the read is ANDed with false (&&!1) so it is currently effectively disabled/no-op

## Idle & Session Resume

CLAUDE_AFK_COUNTDOWN_MS - Integer (Ue.int getter); ms threshold before the AFK timeout at which the countdown UI appears (default 20000, min'd with the timeout).
CLAUDE_AFK_TIMEOUT_MS - Integer (Ue.int getter); away-from-keyboard idle timeout in ms before onTimeout fires (default 60000).
CLAUDE_CLIENT_PRESENCE_FILE - Path to a client-presence file; its existence is stat-checked to determine whether a client is present.
CLAUDE_CODE_DISABLE_NESTED_CHAIN_IDLE - Disable nested-prompt-blocking idle notifications for nested agent chains
CLAUDE_CODE_ENABLE_AWAY_SUMMARY - Override the away-summary feature; '0'/false forces off, truthy forces on; default from tengu_sedge_lantern flag and awaySummaryEnabled setting
CLAUDE_CODE_EXIT_AFTER_STOP_DELAY - Delay in ms (parseInt, must be >0) before exiting after a stop; arms a timeout on stop.
CLAUDE_CODE_FORCE_SESSION_PERSISTENCE - When set, forces session persistence by disabling the child-session logic that would otherwise skip persisting.
CLAUDE_CODE_IDLE_THRESHOLD_MINUTES - Idle minutes before prompting for a session action; default 75 (Number(env ?? 75)).
CLAUDE_CODE_IDLE_TOKEN_THRESHOLD - Context-token threshold before prompting for a session action; default 100000 (Number(env ?? 1e5)).
CLAUDE_CODE_RESUME_FROM_SESSION - Source session ID to hydrate/teleport from when resuming a session.
CLAUDE_CODE_RESUME_INTERRUPTED_TURN - Boolean (ut); resumes an interrupted turn (restoring background-task state) on reconnect.
CLAUDE_CODE_RESUME_PROMPT - Custom prompt text used when resuming; defaults to "Continue from where you left off."
CLAUDE_CODE_RESUME_THRESHOLD_MINUTES - Minutes since last message before prompting to resume the session. Default: 70.
CLAUDE_CODE_RESUME_TOKEN_THRESHOLD - Token threshold for the resume prompt. Default: 100000.
CLAUDE_CODE_SESSION_ID - Holds the current session identifier; if set, it is regenerated to the new session id on a conversation_reset event.
CLAUDE_CODE_SESSION_NAME - Overrides the session name (used before falling back to a derived name).
CLAUDE_INTERNAL_WARM_RESUME_QA - [unverified] Boolean env (Mqu=Ue.bool schema) named for warm-resume QA; only appears in env name-list and getter, no consuming logic found in binary.
ENABLE_SESSION_PERSISTENCE - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consumer found (session-persistence gating in code uses TEST_ENABLE_SESSION_PERSISTENCE instead).

## Agent SDK

CLAUDE_AGENT_SDK_CLIENT_APP - Client-app identifier from the Agent SDK, sent as the x-client-app request header.
CLAUDE_AGENT_SDK_DISABLE_BUILTIN_AGENTS - Boolean; disables built-in agent definitions when running under the Agent SDK.
CLAUDE_AGENT_SDK_MCP_NO_PREFIX - Boolean; suppresses prefixing MCP tool names with the server name in SDK mode.
CLAUDE_AGENT_SDK_VERSION - Agent SDK version string; recorded as agentSdkVersion in telemetry and reported context.
CLAUDE_CODE_AGENT - Agent name for the current session; set from the --agent option (process.env is assigned from it) and recorded in session metadata.
CLAUDE_CODE_EMIT_SESSION_STATE_EVENTS - Emit session_state_changed system events on idle/running transitions
CLAUDE_CODE_EMIT_TOOL_USE_SUMMARIES - Emit tool-use summary descriptions (gate reported in session gates)
CLAUDE_CODE_ENABLE_SDK_FILE_CHECKPOINTING - Truthy-enables file checkpointing in SDK mode; also requires CLAUDE_CODE_DISABLE_FILE_CHECKPOINTING to be unset.
CLAUDE_CODE_INCLUDE_PARTIAL_MESSAGES - When truthy, includes partial/streaming messages in the output stream.
CLAUDE_CODE_MAX_TURNS - Max agentic turns; parsed as a positive integer (throws on non-positive/invalid); used as the fallback when not passed as an option.
CLAUDE_CODE_SDK_HAS_HOST_AUTH_REFRESH - Boolean (ut); when set and host-managed, registers an SDK host auth token refresh callback (timeout from CLAUDE_CODE_HOST_AUTH_REFRESH_TIMEOUT_MS).
CLAUDE_CODE_SDK_HAS_OAUTH_REFRESH - Boolean (ut); indicates the SDK host supports OAuth refresh; triggers requestOAuthTokenRefresh for known entrypoints.
CLAUDE_CODE_TEE_SDK_STDOUT - Boolean-truthy (ut()) that tees SDK transport stdout (sets teeStdout).
CLAUDE_RUNNER_ACTIVITY_FD - Integer file descriptor (>2, must be a pipe/socket per fstat) that the SDK runner uses to signal activity; ignored if not a FIFO/socket.
CLAUDE_RUNNER_DISABLE_AWAITING_ACTION_OVERRIDE - [unverified] Boolean env (B3u=Ue.bool schema) in the runner/disable schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_RUNNER_FETCH_DEPTH - [unverified] String env (x8u=Ue.str schema) in the runner schema group (name suggests a fetch/clone depth); only in name-list/getter, no consuming logic found in binary.
DEBUG_CLAUDE_AGENT_SDK - When truthy, writes Agent SDK debug logs to a per-session file (debug/sdk-<uuid>.txt).
SDK_NATIVE_BIN - Base name of the native SDK binary used when locating/launching the per-platform executable (linux/darwin/android/win32, .exe/-musl variants); read via ??, default 'claude'

## Agent Teams & Orchestration

BUGHUNTER_DEV_BUNDLE_B64 - Base64-encoded development bundle passed into the bughunter agent subprocess.
BUGHUNTER_FLEET_SIZE - Number of agents in the bughunter fleet, set (String of a server-config value clamped ~5-20) when spawning the fleet; its presence also suppresses the "ccr" environment tag.
CLAUDE_AGENTS_SELECT - String (Ue.str getter) carrying the agent(s) to preselect/auto-open in the FleetView "claude agents" UI; consumed then deleted from the env.
CLAUDE_ASYNC_AGENT_STALL_TIMEOUT_MS - Async agent stall timeout in ms (default 600000) after which a stalled background/async agent turn is handled.
CLAUDE_CODE_CHILD_SESSION - Set to "1" for child/nested sessions; read (ke.) to detect a child session for team-context and session-persistence decisions, and stripped from freshly spawned subprocess env.
CLAUDE_CODE_COORDINATOR_EXTRA_TOOLS - Comma-separated list of extra tool names permitted for the CCR coordinator (split on ",", trimmed, empties filtered).
CLAUDE_CODE_COORDINATOR_MODE - Boolean-truthy; enables CCR coordinator mode (IA()); also set/cleared to "1" internally when switching session mode.
CLAUDE_CODE_DISABLE_EXPLORE_PLAN_AGENTS - Disable the Explore/Plan agents; otherwise gated by tengu_slate_ibis feature flag
CLAUDE_CODE_ENABLE_APPEND_SUBAGENT_PROMPT - Enable appending to a subagent's system prompt via the appendSubagentSystemPrompt option
CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS - A truthy value (or the --agent-teams flag) plus the tengu_amber_flint feature flag enables experimental multi-agent teams.
CLAUDE_CODE_EXPERIMENTAL_OBSERVER_AGENTS - Truthy flag enabling observer agents; also requires background tasks not disabled and the tengu_observer_agents_enabled flag.
CLAUDE_CODE_FORK_SUBAGENT - Truthy value enables forking subagents ("env"); a falsy value or HV()/mn() (e.g., signed in with Claude AI OAuth) disables it; otherwise falls back to a GrowthBook rollout flag.
CLAUDE_CODE_PLAN_V2_AGENT_COUNT - Number of agents in plan v2 orchestration; parsed int, valid 1-10, else tier-based default (3 or 1).
CLAUDE_CODE_PLAN_V2_EXPLORE_AGENT_COUNT - Number of explore agents in plan v2; parsed int, valid 1-10, default 3.
CLAUDE_CODE_SUBAGENT_CACHE_EVICT - Boolean-truthy (via ke) enabling evict-on-complete prompt-cache control for subagents (only for firstParty/anthropicAws); otherwise falls back to GrowthBook flag tengu_subagent_cache_evict (default false).
CLAUDE_CODE_TASK_LIST_ID - Overrides the task-list id used for task tracking; when unset it falls back to the team name or session id.
CLAUDE_INTERNAL_ASSISTANT_TEAM_NAME - Sets the inherited assistant team name for the session; read once then deleted from process.env (stored via Xdr).

## Workflows & Automation

AUTOMODE_DECISION_LOG - When set to "1", enables logging of automode decisions to a .automode_decisions.jsonl file in the working directory
CLAUDE_CODE_DISABLE_CRON - Disable cron/scheduled prompts; otherwise gated by tengu_kairos_cron feature flag
CLAUDE_CODE_DISABLE_WORKFLOWS - Disable workflows; equivalent to the disableWorkflows setting; also gated by the allow_workflows permission
CLAUDE_CODE_LOOP_KEEPALIVE - Truthy-enables autonomous-loop keepalive; otherwise defaults to the tengu_kairos_loop_keepalive flag.
CLAUDE_CODE_LOOP_PERSISTENT - Truthy-enables the persistent autonomous loop; otherwise defaults to the tengu_kairos_loop_persistent flag.
CLAUDE_CODE_PLAN_MODE_INTERVIEW_PHASE - Controls the interview phase in plan mode (string env var).
CLAUDE_CODE_PLAN_MODE_REQUIRED - Requires plan-mode approval before implementation; used as the planModeRequired default.
CLAUDE_CODE_REPO_CHECKOUTS - Env-map of repo name to checkout path for multi-repo workflows; paired with CLAUDE_CODE_BASE_REFS.
CLAUDE_CODE_STOP_HOOK_BLOCK_CAP - Integer cap (parseInt, default 8) on how many consecutive Stop-hook blocks are allowed before the loop stops (only enforced when >0).
CLAUDE_CODE_WORKFLOWS - Boolean; when truthy (ut()) makes Workflows available gated by tengu_workflows_enabled (default true); when explicitly disabled (Pl()) marks Workflows unavailable.
CLAUDE_REMOTE_WORKFLOW_ARGS - JSON args (ke.) for the remote (CCR) workflow script; JSON.parse'd, size-limited to 524288 bytes; errors reported as args-too-large/args-parse.
CLAUDE_REMOTE_WORKFLOW_SCRIPT - Shell/workflow script (ke.) delivered via env for a remote (CCR) session; deterministic entry point, validated (<=524288 bytes, no control chars); missing yields env-missing.
CLAUDE_WORKFLOW_NAME_ONLY - Boolean (ke.); when set, restricts the Workflow tool to named bundled workflows only, throwing if a scriptPath workflow is requested.
ULTRAPLAN_PROMPT_FILE - [unverified] String env var (Ue.str()) registered in the env registry (Ultraplan/workflow family); no direct read found in binary; name implies a file supplying the Ultraplan prompt

## Background Tasks & Isolation

ANTHROPIC_ENVIRONMENT_ID - Environment ID for Anthropic managed-agent self-hosted sandboxes; read (non-null asserted) by the EnvironmentWorker to identify the self-hosted environment
ANTHROPIC_ENVIRONMENT_KEY - Environment auth key (sk-ant-oat01-... generated in Console) for Anthropic managed-agent self-hosted sandboxes; read by the EnvironmentWorker to authenticate
CLAUDE_AUTO_BACKGROUND_TASKS - Truthy flag (ut()); when enabled the auto-background-task timeout returns 120000ms (else 0), enabling automatic backgrounding.
CLAUDE_BG_AUTH_SNAPSHOT_PATH - Path to a JSON auth-snapshot file read (then unlinked and unset) to restore credentials in a background session.
CLAUDE_BG_BACKEND - When set to "daemon", adjusts terminal/output handling for daemon-managed background sessions (skips OSC theme queries, treats stdout as a pipe, disables title updates).
CLAUDE_BG_CLAIM_AUTH - String (Ue.str getter) auth token consumed (then deleted) to claim a background session's socket credentials.
CLAUDE_BG_ISOLATION - String (Ue.str getter) selecting background-task isolation mode; recognizes "worktree" or "none", else falls back to the job/config bgIsolation setting.
CLAUDE_BG_MEMORY_TOGGLED_OFF - Set to "1" together with CLAUDE_CODE_SESSION_KIND=="bg" to disable memory in the background session.
CLAUDE_BG_POST_CLEAR_RESPAWN - Boolean (Ue.bool getter) set to "1" when a background session respawns after a /clear (session id changed on retry attempt>1); relaxes --agent validation on respawn.
CLAUDE_BG_RENDEZVOUS_SOCK - Path to the background rendezvous Unix socket; when set (and not already serving) Claude creates the bg server on it; consumed and deleted after read.
CLAUDE_BG_RV_AUTH - Auth token for the background rendezvous socket; consumed and deleted after read, and overridden by rvAuth from the socket tokens file if provided.
CLAUDE_BG_SESSION_PERMISSION_RULES - JSON string of {allow:[],deny:[]} permission rules applied only when CLAUDE_CODE_SESSION_KIND==="bg"; parsed via JSON.parse and validated as arrays.
CLAUDE_BG_SOCKET_TOKENS_PATH - Path to a tokens file holding ptyAuth/rvAuth/claimAuth for bg sockets; read to hydrate those auth tokens then unlinked/deleted after read.
CLAUDE_BG_SOURCE - Source label recorded for bg-agent dispatch telemetry (defaults to "shell"); value "spare" also marks a spare-session REPL bridge.
CLAUDE_BG_STARTUP_WEDGE_MS - Milliseconds before the bg startup wedge timeout fires (read via ke.); defaults to 45000.
CLAUDE_BG_TCC_DISCLAIMED - macOS only; when set, Claude skips the TCC responsibility-disclaim relaunch step and deletes the var.
CLAUDE_CODE_BG_TASKS_REPORT_RUNNING - Boolean-truthy (ke.); when set, active teammates/running bg tasks/pending notifications keep the session reported as active (not idle).
CLAUDE_CODE_DAEMON_COLD_START - Daemon cold-start mode; accepts "transient" or "ask" from the env, otherwise falls back to settings/default "transient".
CLAUDE_CODE_DISABLE_BACKGROUND_TASKS - Disable background task execution and the run_in_background parameter
CLAUDE_CODE_DISABLE_BG_EXIT_HANDOFF - Disable handing off background shells/workflows/agents on exit (returns empty handoff state)
CLAUDE_CODE_DISABLE_BG_SHELL_PRESSURE_REAP - Disable reaping of idle background shells under memory/notification pressure
CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS - Max ms to wait for background tasks before terminating in print mode; default 600000, set 0 to wait indefinitely.
CLAUDE_CODE_SESSION_KIND - Read directly; when equal to "bg", "daemon", or "daemon-worker" marks the session as a background/daemon session (rs()==="bg"), forcing alt-screen/flicker behavior and non-interactive paths.
CLAUDE_CODE_SUPERVISED - Boolean-truthy (ut(), memoized); marks the process as supervised so uncaught exceptions/unhandled rejections are logged specially rather than exiting immediately.
CLAUDE_CODE_WORKSPACE_HOST_PATHS - Pipe-delimited ("|") list of host paths for containerized workspace mapping; split and attached to telemetry as workspace.host_paths.
CLAUDE_DISABLE_ADOPT - Boolean (ke.); when set, disables adoption of detached background shell tasks (iKr returns !CLAUDE_DISABLE_ADOPT).
CLAUDE_JOB_DIR - Directory for a background job/session; stores bg exit cause file, tmp files, and job state; basename used as jobId; validated under the config jobs/ dir for bg sessions.
CLAUDE_SUBAGENT_BG_SHELL_MAX_MS - Integer (parseInt) max runtime in ms for a subagent background shell; default 3600000 (1h).
ENABLE_SESSION_BACKGROUNDING - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
JAVA_TOOL_OPTIONS - Read when building sandbox subprocess env under weaker network isolation; appends -Djava.net.preferIPv4Stack=true to JAVA_TOOL_OPTIONS.
SRT_DEBUG - Sandbox-runtime: when set (truthy), enables sandbox debug logging with '[SandboxDebug]' prefix via console error/warn/log (not Secure Reliable Transport)
SRT_WIN_PATH - Override path to the sandbox-runtime Windows binary (srt-win.exe); if set and the file exists it is used, otherwise vendor srt-win dirs are searched

## PTY & Process Management

CLAUDE_BG_PTY_AUTH - Auth token gating DATA access to the background PTY host socket; read then deleted, and overridden by ptyAuth from CLAUDE_BG_SOCKET_TOKENS_PATH if present.
CLAUDE_PTY_HEARTBEAT_MS - Integer (Number) PTY server heartbeat/ping interval in ms, default 60000 (non-Windows); missed pings (>=3) destroy the connection.
CLAUDE_PTY_HOST_EXEC - When "1", the PTY exec runs on the host; read once then deleted from process.env.
CLAUDE_PTY_ORPHAN_CHECK_MS - Integer (Number) interval in ms for the PTY orphan check, default 2000; after ~30 misses with no parent/connections it exits as orphaned.
CLAUDE_PTY_RECORD - Configures PTY session recording (passed to G1m with terminal dimensions); registered in the same group as CLAUDE_CODE_TERMINAL_RECORDING.

## Bridge & Gateway

CLAUDE_BRIDGE_BASE_URL - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BRIDGE_OAUTH_TOKEN - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BRIDGE_REATTACH_OUTBOUND_ONLY - Boolean-truthy (ut()) flag marking a bridge reattach as outbound-only; read at reattach and deleted from the environment after read.
CLAUDE_BRIDGE_REATTACH_SEQ - Sequence number for bridge session reattach; parsed as int (Number.parseInt); consumed and deleted after read.
CLAUDE_BRIDGE_REATTACH_SESSION - Session ID to reattach to in bridge/repl mode; consumed and deleted after read.
CLAUDE_BRIDGE_SESSION_INGRESS_URL - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BRIDGE_USE_CCR_V2 - Boolean-truthy (ut()); forces the CCR v2 code-sessions protocol for bridge worker/session registration (also enabled when use_code_sessions===true).
CLAUDE_CODE_BRIDGE_SESSION_ID - Set by Claude Code to the current bridge/repl session id (exported for child processes) and deleted when there is no active session.
CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY - Enable gateway model discovery; requires first-party auth, non-Anthropic endpoint, and ANTHROPIC_BASE_URL set
CLAUDE_CODE_FABLE_BRIDGE_DIALOG_TIMEOUT_MS - Timeout in ms for the Fable bridge dialog; uses the value when >0, otherwise defaults to 60000.
CLAUDE_CODE_FORCE_BRIDGE - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_CODE_USE_CCR_V2 - Boolean flag for CCR v2 remote sessions; set to "1" (with CLAUDE_CODE_WORKER_EPOCH) by the bridge when spawning a session with useCcrV2.
CLAUDE_CODE_USE_GATEWAY - Boolean (ut()); enables Cloud gateway provider mode requiring ANTHROPIC_BASE_URL and ANTHROPIC_AUTH_TOKEN; changes token-expiry message to "refresh ANTHROPIC_AUTH_TOKEN and restart".
CLAUDE_CODE_WEBSOCKET_AUTH_FILE_DESCRIPTOR - Integer file descriptor (parseInt) to read the session/websocket ingress auth token from; falls back to CLAUDE_SESSION_INGRESS_TOKEN_FILE when unset.
CLAUDE_CODE_WORKER_EPOCH - Integer (parseInt) worker epoch for bridge/SDK session lifecycle; required at initialize (throws missing_epoch if NaN); used to ignore stale end_session events on epoch>1.
CLAUDE_GATEWAY_ALLOW_LOOPBACK - Boolean (ut()); when set, allows loopback/IPv4-mapped addresses in the gateway address validation (E0n).
CLAUDE_GATEWAY_LOG_LEVEL - Sets the gateway logger level (lowercased, looked up in level map S0n); defaults to "info" when unset or unrecognized.
CLAUDE_SESSION_INGRESS_TOKEN_FILE - Path to the file containing the session ingress token; read (with fallback default Hwr) when no websocket auth FD is provided.
LOCAL_BRIDGE - Truthy flag (ut()) that forces the chrome/remote-control bridge to use ws://localhost:8765 instead of the hosted bridge.claudeusercontent.com

## Remote & Cowork

AGENT_PROXY_AUTH_TOKEN - Auth token for the Claude Code Remote (CCR) agent proxy; read at startup in initAgentProxy then unset from env, used only when CLAUDE_CODE_REMOTE and CCR_AGENT_PROXY_ENABLED are set with a CLAUDE_CODE_REMOTE_SESSION_ID
AGENT_PROXY_URL - URL of the Claude Code Remote (CCR) agent proxy; read at startup in initAgentProxy then unset from env, gated on CLAUDE_CODE_REMOTE being truthy and CCR_AGENT_PROXY_ENABLED
CCR_AGENT_PROXY_ENABLED - Boolean (Ue.bool getter); in a Claude Code Remote session, enables the agent proxy (git/gh credential shim) that unsets AGENT_PROXY_URL/AUTH_TOKEN.
CCR_ENABLE_BUNDLE - Truthy flag (ut()) enabling git bundle seeding/upload for Claude Code Remote (alongside the tengu_ccr_bundle_seed_enabled flag).
CCR_FORCE_BUNDLE - Truthy flag (ut()) forcing git bundle seeding/upload for Claude Code Remote regardless of the feature flag.
CCR_SPAWN_TIMESTAMP_MS - Spawn epoch-ms timestamp (parseInt) used to compute Claude Code Remote startup latency metrics (spawn_to_first_checkpoint_ms, spawn_to_exec_ms, etc.); falls back to CLAUDE_CODE_SPAWN_TIMESTAMP_MS.
CLAUDE_CODE_ARTIFACT - Boolean toggle for the artifact/frame feature; ut() enables it while Pl() (explicitly-off) disables it.
CLAUDE_CODE_ARTIFACTS_API_BASE_URL - String base-URL override for the Claude Code artifacts API; registered among provider base-URL env vars and stripped from spawned-subprocess environments (direct consumer not observed).
CLAUDE_CODE_ARTIFACT_AUTO_OPEN - When explicitly set (Pl()), suppresses auto-opening the artifact frame (telemetry reason "auto_open_skipped_env").
CLAUDE_CODE_ARTIFACT_DIRECT_UPLOAD - Boolean-truthy (ke.); enables the direct/inline artifact upload lane (also enabled by feature gate tengu_cobalt_plinth_direct).
CLAUDE_CODE_AUTH_FAIL_EXIT_MS - Threshold in ms after which a remote child session exits following continuous auth failure; default 600000, and <=0 disables the exit.
CLAUDE_CODE_AUTO_MODE_EXTERNAL_PERMISSIONS - [unverified] Registered as an env var in the auto-mode env registry; no consumer found in binary.
CLAUDE_CODE_CONTAINER_ID - Container ID for remote sessions; sent as the x-claude-remote-container-id request header and used for temp-dir ownership checks and progress gating.
CLAUDE_CODE_DISABLE_LAUNCH_COMPOSER - [unverified] Registered env flag with no read site found; the launch-composer feature is stubbed off in this build (isLaunchComposerEnabled/shouldShowLaunchComposer return false)
CLAUDE_CODE_DISABLE_WORKING_SYNC - Disable the synced-file syncer for remote SDK sessions (skips startSyncedFileSyncer)
CLAUDE_CODE_ENABLE_LAUNCH_COMPOSER - [unverified] Registered env flag with no read site found; the launch-composer feature is stubbed off in this build (isLaunchComposerEnabled/shouldShowLaunchComposer return false)
CLAUDE_CODE_ENABLE_REMOTE_RECAP - Override remote recap; when unset defaults to the tengu_harbor_moth feature flag
CLAUDE_CODE_ENVIRONMENT_KIND - Classifies the runtime environment; recognized values include "byoc", "anthropic_cloud", and "bridge", driving ccr/bridge/desktop tagging and Datadog gating.
CLAUDE_CODE_ENVIRONMENT_RUNNER_VERSION - Version string of the environment runner; sent as the x-environment-runner-version header on remote I/O requests.
CLAUDE_CODE_IS_COWORK - Truthy indicates cowork mode; forces disableSkillShellExecution on.
CLAUDE_CODE_MOCK_REMOTE_SETTINGS - [unverified] Boolean env var listed in the remote-settings override group (alongside CLAUDE_CODE_REMOTE_SETTINGS_PATH) to mock remote settings value-read code not found in binary.
CLAUDE_CODE_POST_FOR_SESSION_INGRESS_V2 - Use POST for the session ingress v2 protocol.
CLAUDE_CODE_REMOTE - Boolean (ut); indicates Claude Code is running in remote/headless (CCR) mode.
CLAUDE_CODE_REMOTE_ENVIRONMENT_TYPE - Type of remote environment; included in telemetry and enables remote upload/file features.
CLAUDE_CODE_REMOTE_HERMETIC_MODE - With CLAUDE_CODE_REMOTE set, enables hermetic mode which filters/drops MCP servers.
CLAUDE_CODE_REMOTE_MEMORY_DIR - Directory for remote memory storage; when unset in remote mode, auto-memory is disabled.
CLAUDE_CODE_REMOTE_RAW_EVENTS_FILE - [unverified] Declared as a string env var (Ue.str) in the remote env group; no consuming read found in binary.
CLAUDE_CODE_REMOTE_SEND_KEEPALIVES - Boolean (ut); sends session keepalive/heartbeat activity callbacks in remote mode.
CLAUDE_CODE_REMOTE_SESSION_ID - Remote (CCR) session ID; included in telemetry and X-Claude-Code session headers.
CLAUDE_CODE_REMOTE_SETTINGS_PATH - Path to a local override file for remote managed settings; when set, uses it and skips the API fetch.
CLAUDE_CODE_REMOTE_SETTINGS_POLL_MS - [unverified] Declared as an integer env var (Ue.int) in the remote-settings env group; no consuming read found in binary.
CLAUDE_CODE_SUPPRESS_SESSION_ATTRIBUTION - Boolean env flag (via ke); when set, suppresses session-URL attribution (returns null instead of the session attribution info).
CLAUDE_CODE_SYSTEM_PROMPT_GB_FEATURE - GrowthBook feature name from which to fetch a remote system-prompt override; only read when CLAUDE_CODE_REMOTE is set.
CLAUDE_REMOTE_CONTROL_SESSION_NAME_PREFIX - Prefix for remote-control session names; defaults to os.hostname(), sanitized to lowercase-dashed (fallback "remote-control"); also settable via --remote-control-session-name-prefix.
CLAUDE_SSH_LOCAL_BINARY - [unverified] String env (I8u=Ue.str schema) in the SSH-related schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_SSH_VERSION - [unverified] String env (H8u=Ue.str schema) in the SSH-related schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_STAGE_FILE_ROOT - Root directory (ke., must be an absolute path or it throws) for staging files synced/pushed to the remote workspace mount; unset falls back to DEFAULT_STAGE_FILE_ROOT and read-only mounts no-op.
SESSION_INGRESS_URL - Base URL for session ingress used to build remote session/share URLs; read via ??, falls back to ANTHROPIC_BASE_URL

## Memory

CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD - Boolean-truthy; loads CLAUDE.md (and .claude/CLAUDE.md) files from the additional directories in addition to the primary project.
CLAUDE_CODE_DISABLE_AUTO_MEMORY - Disable the automatic memory system; set to '0'/false to force-enable it (overriding the autoMemoryEnabled setting)
CLAUDE_CODE_DISABLE_CLAUDE_MDS - Disable loading of CLAUDE.md instruction files (also forced on in safe mode)
CLAUDE_CODE_DISABLE_MEMORY_BULK_INFLATE - Disable bulk-inflate (exportAll) of memory stores during multi-store sync; also gated by tengu_memory_bulk_inflate flag
CLAUDE_CODE_DISABLE_MEMORY_PERIODIC_RESYNC - Disable periodic memory-store resync; when unset the interval comes from tengu_memory_store_resync_interval_minutes
CLAUDE_CODE_FORCE_EVALUATE_MEMORY - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_CODE_FORCE_MEMORY_SURVEY - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_COWORK_MEMORY_EXTRA_GUIDELINES - Extra guidelines text appended to the cowork/persistent-agent memory prompt (added to memory dir guidelines when non-empty).
CLAUDE_COWORK_MEMORY_GUIDELINES - Guidelines text for auto memory; when set (with team memory enabled) prepends "# auto memory" guidelines and triggers memory_load_prompt.
CLAUDE_COWORK_MEMORY_INDEX_CONTENT - Provides auto-memory index content directly (parsed via FMp) instead of loading from disk; empty string ("") disables/skips the auto-memory index entry.
CLAUDE_COWORK_MEMORY_PATH_OVERRIDE - Overrides the cowork/auto-memory directory path (validated/normalized with trailing sep; rejects null bytes, drive-only or UNC roots).
CLAUDE_MEMORY_STORES - JSON config of memory stores (parsed; throws if invalid JSON); when non-empty enables team/persistent memory features and blocks default team memory dir.
TEAM_MEMORY_SYNC_URL - URL override for the team memory synchronization service (string env var; team memory sync feature present)

## IDE Integration

CLAUDE_CODE_AUTO_CONNECT_IDE - Controls auto-connecting to a detected IDE; when set to false (===!1) it force-disables, otherwise permits auto-connect.
CLAUDE_CODE_IDE_HOST_OVERRIDE - Overrides the IDE host address (returned directly instead of 127.0.0.1/WSL detection).
CLAUDE_CODE_IDE_SKIP_AUTO_INSTALL - When truthy, skips automatic IDE extension installation.
CLAUDE_CODE_IDE_SKIP_VALID_CHECK - When truthy, skips the IDE connection validity/port check.
CLAUDE_CODE_SSE_PORT - Port (parseInt) used to locate/connect the SSE endpoint for IDE lockfile discovery.
CURSOR_TRACE_ID - Trace ID set by the Cursor IDE; its presence is used to detect Cursor as the host terminal/IDE.
VSCODE_GIT_ASKPASS_MAIN - Path to VS Code git askpass helper; inspected to detect Cursor/Windsurf/Antigravity/Devin and remote server variants

## OpenTelemetry (OTEL)

ANT_CLAUDE_CODE_METRICS_ENDPOINT - [unverified] String env var registered in the OTEL/telemetry env registry; no consumer found in the binary (Claude Code telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_ENDPOINT - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_ENDPOINT; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_HEADERS - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_HEADERS; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_PROTOCOL - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_PROTOCOL; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_LOGS_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_LOGS_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_METRICS_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_METRICS_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_RESOURCE_ATTRIBUTES - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_RESOURCE_ATTRIBUTES; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_TRACES_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_TRACES_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
BETA_TRACING_ENDPOINT - OTLP endpoint URL for the beta tracing exporter; beta tracing activates only when ENABLE_BETA_TRACING_DETAILED is truthy AND this is set (plus tengu_trace_lantern flag).
CLAUDE_CODE_ACCOUNT_TAGGED_ID - Tagged account ID emitted as user.account_id in OTEL metrics (gated by OTEL_METRICS_INCLUDE_ACCOUNT_UUID); falls back to a hash of the account UUID.
CLAUDE_CODE_ENABLE_FEEDBACK_SURVEY_FOR_OTEL - Allow the feedback survey to show even when OTEL/telemetry reporting is enabled
CLAUDE_CODE_ENABLE_TELEMETRY - Truthy-enables third-party OpenTelemetry metrics/traces collection (isTelemetryEnabled).
CLAUDE_CODE_ENHANCED_TELEMETRY_BETA - Truthy-enables enhanced telemetry beta; also honored via alias ENABLE_ENHANCED_TELEMETRY_BETA, with a falsy value disabling it.
CLAUDE_CODE_OTEL_DIAG_STDERR - When truthy, writes OTEL diagnostic error messages to stderr; its presence also prevents stripping OTEL env vars from subprocesses.
CLAUDE_CODE_OTEL_FLUSH_TIMEOUT_MS - OTEL metrics/traces force-flush timeout in ms. Default: 5000.
CLAUDE_CODE_OTEL_HEADERS_HELPER_DEBOUNCE_MS - Debounce interval in ms for the OTEL headers helper. Default: 1740000.
CLAUDE_CODE_OTEL_SHUTDOWN_TIMEOUT_MS - OTEL provider shutdown timeout in ms. Default: 2000.
CLAUDE_CODE_PROPAGATE_TRACEPARENT - Boolean (ut); propagates the W3C traceparent header on outbound API requests.
CLAUDE_CODE_TAGS - Custom tags string attached (as tags) to session/event metadata for telemetry.
ENABLE_ENHANCED_TELEMETRY_BETA - Alternative to CLAUDE_CODE_ENHANCED_TELEMETRY_BETA; a truthy value enables enhanced telemetry beta, an explicit false value disables it.
OTEL_EXPORTER_OTLP_ENDPOINT - Base OTLP exporter endpoint URL; fallback when signal-specific endpoint vars are unset
OTEL_EXPORTER_OTLP_HEADERS - Headers for OTLP exporter requests; parsed as key=value pairs, merged with signal-specific headers
OTEL_EXPORTER_OTLP_INSECURE - Allow insecure (non-TLS) OTLP connections; effective when value equals "true" (or the signal-specific variant)
OTEL_EXPORTER_OTLP_LOGS_ENDPOINT - Logs-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP_{LOGS}_ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_EXPORTER_OTLP_LOGS_PROTOCOL - Overrides OTLP protocol for logs; falls back to OTEL_EXPORTER_OTLP_PROTOCOL
OTEL_EXPORTER_OTLP_METRICS_ENDPOINT - Metrics-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP_{METRICS}_ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_EXPORTER_OTLP_METRICS_PROTOCOL - Overrides OTLP protocol for metrics (grpc/http/json); falls back to OTEL_EXPORTER_OTLP_PROTOCOL
OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE - Metrics temporality preference (cumulative/delta); defaulted to "delta" when unset
OTEL_EXPORTER_OTLP_PROTOCOL - OTLP transport protocol (grpc, http/protobuf, http/json) used for all signals unless a signal-specific protocol is set
OTEL_EXPORTER_OTLP_TRACES_ENDPOINT - Traces-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP_{TRACES}_ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_EXPORTER_OTLP_TRACES_PROTOCOL - Overrides OTLP protocol for traces (grpc/http/json); falls back to OTEL_EXPORTER_OTLP_PROTOCOL
OTEL_EXPORTER_PROMETHEUS_HOST - Host for the Prometheus metrics exporter; falls back to the exporter's DEFAULT_OPTIONS.host
OTEL_EXPORTER_PROMETHEUS_PORT - Port for the Prometheus metrics exporter (Number()); falls back to the exporter's DEFAULT_OPTIONS.port
OTEL_LOGS_EXPORTER - Comma-separated logs exporter types (otlp, console, none); split and filtered
OTEL_LOGS_EXPORT_INTERVAL - Logs export scheduled-delay interval in ms; parsed via OY() with a built-in default
OTEL_LOG_ASSISTANT_RESPONSES - Tri-state boolean (ke.OTEL_LOG_ASSISTANT_RESPONSES); when truthy logs assistant response text in telemetry (else redacted), falling back to OTEL_LOG_USER_PROMPTS
OTEL_LOG_RAW_API_BODIES - Enable raw API body logging; "file:/path" writes to file, other truthy value logs inline, falsy disables
OTEL_LOG_TOOL_CONTENT - Truthy flag (ut()) to log tool content (input/output) in telemetry
OTEL_LOG_TOOL_DETAILS - Boolean (ke.OTEL_LOG_TOOL_DETAILS) controlling whether detailed tool-use info is logged in telemetry
OTEL_LOG_USER_PROMPTS - Truthy flag (ut()) to log user prompt text in telemetry; otherwise prompts are recorded as "<REDACTED>"
OTEL_METRICS_EXPORTER - Comma-separated metrics exporter types (otlp, prometheus, console, none); split and filtered
OTEL_METRIC_EXPORT_INTERVAL - Metrics export interval in ms; parsed via OY() with a built-in default
OTEL_RESOURCE_ATTRIBUTES - Standard OTEL resource attributes (key=value list) parsed by the SDK EnvDetector into resource attributes; also registered as a string in the env registry
OTEL_TRACES_EXPORTER - Comma-separated traces exporter types (otlp, console, none); split and filtered
OTEL_TRACES_EXPORT_INTERVAL - Traces export scheduled-delay interval in ms; parsed via OY() with a built-in default
TRACEPARENT - W3C Trace Context traceparent; when OTEL is enabled it is extracted as the parent span for the interaction span
TRACESTATE - W3C Trace Context tracestate; passed with TRACEPARENT into OTEL context propagation

## Datadog

CLAUDE_CODE_BYOC_ENABLE_DATADOG - Boolean-truthy; in a BYOC environment (CLAUDE_CODE_ENVIRONMENT_KIND==="byoc") Datadog is disabled unless this flag is set.
CLAUDE_CODE_DATADOG_FLUSH_INTERVAL_MS - Datadog log flush interval in ms; parsed with parseInt, defaults to 15000.
CLAUDE_CODE_DD_ERROR_TRACKING_FLUSH_INTERVAL_MS - Datadog error-tracking log flush interval in ms; parseInt with default 30000 (30s)

## Profiling & Diagnostics

ANTHROPIC_LOG - Anthropic SDK internal logging level (e.g. debug); read by the SDK as ClientOptions.logLevel, suggested in slow/failed request warnings
CLAUDE_CODE_COMMIT_LOG - When set, enables React commit (render) performance timing logging (performance.now around prepareForCommit); unrelated to git commits.
CLAUDE_CODE_DEBUG_LOGS_DIR - Custom directory for debug log files; default CONFIG_DIR/debug/SESSION.txt
CLAUDE_CODE_DEBUG_LOG_LEVEL - Debug log level; one of verbose, debug, info, warn, error (default debug)
CLAUDE_CODE_DEBUG_REPAINTS - Enable debug logging/inspection of terminal UI repaints (read as boolean via env)
CLAUDE_CODE_DIAGNOSTICS_FILE - Path to write the diagnostics output file (returned directly from process.env)
CLAUDE_CODE_EXIT_AFTER_FIRST_RENDER - When truthy, exits immediately after the first UI render (testing/startup instrumentation).
CLAUDE_CODE_FRAME_TIMING_LOG - Path to a file to which frame-timing logs are appended (openSync append).
CLAUDE_CODE_FRAME_TIMING_SAMPLE_EVERY - Sample-every-N-frames interval for frame-timing logging; coerced via Math.max(1, value||1), default 1.
CLAUDE_CODE_PERFETTO_TRACE - Path/value that enables Perfetto trace collection (logged during initializePerfettoTracing).
CLAUDE_CODE_PERFETTO_WRITE_INTERVAL_S - [unverified] Declared as an integer env var (Ue.int) in the Perfetto tracing env group; no consuming read found in binary.
CLAUDE_CODE_PROFILE_QUERY - Boolean (ut); enables query profiling (set =1; otherwise "Query profiling not enabled").
CLAUDE_CODE_PROFILE_STARTUP - Boolean (ut); enables startup profiling.
CLAUDE_CODE_SESSION_LOG - Path recorded as logPath in session metadata where the session log is written.
CLAUDE_CODE_SLOW_OPERATION_THRESHOLD_MS - Numeric ms threshold for logging slow operations; parsed as Number and used only if >=0, otherwise defaults to Infinity (disabled).
CLAUDE_CODE_SPAWN_TIMESTAMP_MS - Integer spawn epoch-ms (parseInt); with CCR_SPAWN_TIMESTAMP_MS taking precedence, used to compute the spawn_to_first_checkpoint_ms telemetry metric.
CLAUDE_CODE_TERMINAL_RECORDING - [unverified] Registered as a string env var (Ue.str()) in the typed env registry (grouped with recording/logging vars); no consumer/read site found in the binary.
CLAUDE_DEBUG - Boolean (ke.CLAUDE_DEBUG); enables debug logging including printing internal/node process warnings via C() at warn level.
DEBUG - Truthy value (or --debug/-d) enables debug mode/logging; also read by the bundled debug module for namespace filtering.
DEBUG_AUTH - When set, logs GCP metadata-server authentication errors/info to the console.
DEBUG_SDK - Truthy value enables debug mode (checked alongside DEBUG and --debug).
ENABLE_BETA_TRACING_DETAILED - When truthy AND BETA_TRACING_ENDPOINT is set, enables detailed beta (Lantern) tracing.

## Proxy & TLS

CLAUDE_CODE_AGENT_PROXY_GH_SHIM - Boolean-truthy (ke.); when set, writes a gh CLI shim pointing at the agent-proxy port.
CLAUDE_CODE_AGENT_PROXY_GIT_CONFIG - Boolean-truthy (ke.); when set, appends governed git config entries pointing at the agent-proxy port.
CLAUDE_CODE_CERT_STORE - CA cert stores to trust; comma-separated list of "bundled" and/or "system" (split on ",", lowercased); unrecognized values are ignored with a warning.
CLAUDE_CODE_CLIENT_CERT - Path to the mTLS client certificate file; presence also suppresses the background connectivity probe.
CLAUDE_CODE_CLIENT_KEY - Path to the mTLS client private key file; presence also suppresses the background connectivity probe.
CLAUDE_CODE_CLIENT_KEY_PASSPHRASE - Passphrase for the mTLS client private key.
CLAUDE_CODE_ENABLE_PROXY_AUTH_HELPER - Enable the proxy authentication helper (reads the helper from project/local config)
CLAUDE_CODE_PROXY_AUTH_HELPER_TTL_MS - Proxy auth helper cache TTL in ms (parsed int, must be >=0). Default: 300000.
CLAUDE_CODE_PROXY_RESOLVES_HOSTS - Boolean (ut); indicates the proxy handles DNS resolution (installs a custom lookup passthrough on the proxy agent).
CLAUDE_CODE_SIMULATE_PROXY_USAGE - Boolean-truthy that simulates proxy behavior by stripping all but one beta header from API requests (logs "SIMULATE_PROXY_USAGE: stripping N beta headers").
HTTPS_PROXY - HTTPS proxy URL for outbound connections (https_proxy||HTTPS_PROXY); presence suppresses built-in proxy setup and is forwarded to subprocess env.
HTTP_PROXY - HTTP proxy URL for outbound connections (http_proxy||HTTP_PROXY); presence suppresses built-in proxy setup and is forwarded to subprocess env.
JAVA_HOME - Java installation root; JAVA_HOME/bin/keytool is used to locate the keytool binary for reading the Java CA truststore.
NODE_EXTRA_CA_CERTS - Path to a PEM file of extra CA certificates; read for TLS trust and auto-populated from config if unset
NODE_TLS_REJECT_UNAUTHORIZED - Standard Node var; set to '0' to disable TLS certificate validation (insecure)
NODE_USE_ENV_PROXY - Truthy flag read by shouldUseEnvProxy(); false when unset/"0", otherwise makes Node's built-in fetch honor http(s)_proxy env vars (Node >=22.21)
NODE_USE_SYSTEM_CA - Use the system CA store; enabled when getUseSystemCA() is true or the var equals "1"
NO_PROXY - Comma-separated list of hosts/domains (also lowercased no_proxy) that bypass the proxy; "*" bypasses all
SSL_CERT_FILE - Path to SSL certificate bundle; forwarded to spawned proxy-related processes when set with HTTPS_PROXY

## Tmux

CLAUDE_CODE_TMUX_PREFIX - The tmux prefix key Claude uses, shown in the detach hint (e.g. "<prefix> d").
CLAUDE_CODE_TMUX_PREFIX_CONFLICTS - When set, indicates Claude's tmux prefix conflicts with the outer one, changing the detach hint to press the prefix twice.
CLAUDE_CODE_TMUX_SESSION - tmux session name; presence activates the "tmux session: ... detach with" info notification.
CLAUDE_CODE_TMUX_TRUECOLOR - When set, prevents the automatic downgrade to 256 colors inside tmux (preserves detected truecolor level).
TMUX - Set when running inside tmux; drives multiplexer detection, clipboard (tmux-buffer), and control-mode probing
TMUX_PANE - Current tmux pane identifier

## Git & CI Detection

BUILDKITE - Presence indicates running under Buildkite CI.
CIRCLECI - Presence indicates running under CircleCI.
CLAUDE_CODE_ACTION - Boolean-truthy; indicates running as the GitHub Action and sets CLAUDE_CODE_ENTRYPOINT to "claude-code-github-action".
CLAUDE_CODE_BASE_REF - Overrides the base git ref for diff operations (per checkout via CLAUDE_CODE_BASE_REFS); when unset, auto-detects the default branch/merge-base.
CLAUDE_CODE_BASE_REFS - Map (parsed by ZVs) of base git refs keyed per repo checkout; used together with CLAUDE_CODE_REPO_CHECKOUTS.
CLAUDE_CODE_DISABLE_GIT_INSTRUCTIONS - Disable git-related instructions in the system prompt; set to '0'/false to force-enable; also controlled by the includeGitInstructions setting
CLAUDE_CODE_PERFORCE_MODE - Boolean (ut); enables Perforce workspace mode, adding read-only file / `p4 edit` handling to system context.
GCM_INTERACTIVE - For git subprocesses, Claude forces GCM_INTERACTIVE="never" when the user hasn't set it, disabling Git Credential Manager interactive prompts (k6t defaults).
GH_ENTERPRISE_TOKEN - GitHub Enterprise auth token; used (GH_ENTERPRISE_TOKEN||GITHUB_ENTERPRISE_TOKEN) when the target host matches GH_HOST for gh PR/auth lookups.
GH_HOST - Configured GitHub Enterprise host; NTr(process.env.GH_HOST,e) tests whether a host is the GHE host to select the enterprise token; also passed to gh shim.
GH_TOKEN - GitHub CLI auth token for github.com (GH_TOKEN||GITHUB_TOKEN); used for gh PR/auth lookups and set to "proxy-injected" placeholder when proxy handles auth.
GITHUB_ACTIONS - Boolean-truthy; detected when running in GitHub Actions, selecting the "github-action" entrypoint and emitting GitHub Actions telemetry metadata.
GITHUB_ACTION_INPUTS - JSON-encoded GitHub Action inputs; recorded as githubActionInputs in telemetry.
GITHUB_ACTION_PATH - Path to the GitHub Action directory; parsed for claude-code-action ref telemetry and used to build allowed path dirs.
GITHUB_ACTOR - GitHub username that triggered the workflow; reported in telemetry and used as user-identity fallback (GITHUB_ACTOR??USER??USERNAME).
GITHUB_ACTOR_ID - GitHub user ID that triggered the workflow; reported as actorId in GitHub Actions telemetry.
GITHUB_ENTERPRISE_TOKEN - GitHub Enterprise auth token fallback (GH_ENTERPRISE_TOKEN||GITHUB_ENTERPRISE_TOKEN) for GHE hosts matching GH_HOST.
GITHUB_ENV - Path to the GitHub Actions environment file; its directory is used as the runner file-commands dir for path resolution.
GITHUB_EVENT_NAME - Name of the GitHub event that triggered the workflow; reported as githubEventName in telemetry.
GITHUB_EVENT_PATH - Path to the GitHub Actions event payload JSON; stored in yV and added to allowed path dirs.
GITHUB_REPOSITORY - GitHub repository in owner/repo format; reported in GitHub Actions telemetry metadata.
GITHUB_REPOSITORY_ID - GitHub repository numeric ID; reported as repositoryId in telemetry.
GITHUB_REPOSITORY_OWNER - GitHub repository owner login; reported as repositoryOwner in telemetry.
GITHUB_REPOSITORY_OWNER_ID - GitHub repository owner numeric ID; reported as repositoryOwnerId in telemetry.
GITHUB_TOKEN - GitHub auth token; fallback for github.com (GH_TOKEN||GITHUB_TOKEN), used as repo-clone authorization_token, and set to "proxy-injected" placeholder when proxy handles auth.
GITHUB_WORKSPACE - GitHub Actions workspace directory; used as the workspace root and to add its .git paths to allowed dirs.
GITLAB_CI - Boolean-truthy; detected when running in GitLab CI (returns "gitlab-ci" deployment environment).
GIT_ASKPASS - For git subprocesses, Claude forces GIT_ASKPASS="" when the user hasn't set it to disable the interactive credential askpass helper (k6t defaults).
GIT_CONFIG_COUNT - Existing count of ad-hoc git config entries; read and extended (GIT_CONFIG_KEY_N/VALUE_N) to inject credential.interactive=false into git subprocesses.
GIT_CONFIG_GLOBAL - Path to the isolated global git config file; agent-proxy governed git config is written here, and the arm is skipped if unset (refuses to write a shared global config).
GIT_SSH_COMMAND - Set for git subprocesses to configure ssh (StrictHostKeyChecking, ControlMaster/Path disabled, nc/socat ProxyCommand) when routing through the agent proxy; user value preserved via ke.
GIT_TERMINAL_PROMPT - For git subprocesses, Claude forces GIT_TERMINAL_PROMPT="0" when the user hasn't set it, disabling interactive terminal credential prompts (k6t defaults).
P4PORT - Perforce server address; when set, "perforce" is added to detected version-control systems
RUNNER_ENVIRONMENT - GitHub Actions runner environment identifier; reported in telemetry when GITHUB_ACTIONS is set
RUNNER_OS - GitHub Actions runner OS; recorded (as githubActionsRunnerOs) in telemetry when GITHUB_ACTIONS is set
SSH_AUTH_SOCK - SSH agent socket path; its absence (together with GIT_SSH_COMMAND unset) is checked to gate git/GitHub SSH auth behavior

## SWE-Bench & Testing

CLAUDE_CODE_BENCH_LIVE_COUNTS - Boolean-truthy; enables live-counts rendering in the Ink renderer (benchmarking instrumentation).
CLAUDE_CODE_STALL_TIMEOUT_MS_FOR_TESTING - Numeric stall-timeout override (Number()) for testing; falls back to the built-in default when unset/zero.
CLAUDE_CODE_TEST_FIXTURES_ROOT - Root directory (defaults to cwd) under which test fixtures/<name>.json are read.
CLAUDE_CODE_TEST_FORCE_DENY - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TEST_NO_GIT_BASH - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TEST_NO_PWSH - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_ULTRAREVIEW_PREFLIGHT_FIXTURE - Test fixture (JSON, zod-parsed) used to stub the ultrareview preflight check instead of hitting /v1/ultrareview/preflight.
FORCE_VCR - [unverified] Registered as a boolean env-backed feature flag (R4u=Ue.bool()) alongside USE_API_* flags; name suggests VCR fixture replay (cf. VCR_RECORD) but no direct usage found in binary.
SWE_BENCH_INSTANCE_ID - SWE-bench instance identifier; emitted in telemetry (sweBenchInstanceId)
SWE_BENCH_RUN_ID - SWE-bench run identifier; emitted in telemetry (sweBenchRunId)
SWE_BENCH_TASK_ID - SWE-bench task identifier; emitted in telemetry (sweBenchTaskId)
TEST_ENABLE_SESSION_PERSISTENCE - Truthy flag (ut()) that keeps session/prompt-history persistence enabled in the test NODE_ENV (otherwise disabled in 'test')
TEST_GRACEFUL_FS_GLOBAL_PATCH - When set, applies the graceful-fs global monkey-patch to the fs module (test-only)
VCR_RECORD - VCR fixture recording mode for tests; set VCR_RECORD=1 to re-record and commit fixtures

## Terminal Detection

ALACRITTY_LOG - Presence indicates the Alacritty terminal emulator; used for terminal-type detection
CLAUDE_CODE_ALT_SCREEN_FULL_REPAINT - Boolean-truthy; forces full repaint of the alternate screen buffer; defaulted to "1" on Windows/Windows Terminal.
CLAUDE_CODE_DECSTBM - Force-enable DECSTBM (terminal scroll-region) support; otherwise gated by tengu_marlin_porch feature flag
CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN - Don't use the terminal alternate-screen buffer (also triggered when CLAUDE_CODE_NO_FLICKER===false)
CLAUDE_CODE_DISABLE_MOUSE - Disable mouse input in the terminal UI (mouse mode off vs full)
CLAUDE_CODE_DISABLE_MOUSE_CLICKS - Disable mouse click handling while keeping scroll (mouse mode 'scroll' instead of 'full'); superseded by CLAUDE_CODE_DISABLE_MOUSE
CLAUDE_CODE_DISABLE_TERMINAL_TITLE - Disable setting the terminal window title
CLAUDE_CODE_FORCE_STRIKETHROUGH - When set, forces terminal strikethrough support to be treated as available.
CLAUDE_CODE_FORCE_SYNC_OUTPUT - When truthy, forces synchronized terminal output mode regardless of the detected terminal.
CLAUDE_CODE_NO_FLICKER - Forces the fullscreen anti-flicker (alt-screen) renderer; set to 1 to enable (overrides tmux -CC auto-disable), 0 to force-disable.
CLAUDE_CODE_SCROLL_SPEED - Terminal scroll speed multiplier (parseFloat, must be >0, clamped to max 20); default 3 on Windows Terminal else 1.
CLI_WIDTH - Integer (parseInt) terminal width override for formatting, used when tty/output columns are unavailable (ignored if NaN or 0).
COLORFGBG - Terminal foreground/background color hint; last ';'-separated value (0-15) parsed to infer dark (<=6 or ==8) vs light theme.
COLORTERM - Terminal color capability (e.g. "truecolor"); absence with low color level triggers a tip to set COLORTERM=truecolor.
FORCE_CODE_TERMINAL - Boolean-truthy; forces terminal detection to treat the host as an IDE/code terminal (cU=Yjt()||d8r()||Boolean(process.env.FORCE_CODE_TERMINAL)).
FORCE_COLOR - Forces color output regardless of terminal detection; overrides NO_COLOR, values ""/"1"/"true"=basic, "2"=256, "3"=truecolor (Node/Bun getColorDepth).
GNOME_TERMINAL_SERVICE - Presence identifies the terminal as gnome-terminal in terminal detection.
INTELLIJ_TERMINAL_COMMAND_BLOCKS - Presence (defined) detects the JetBrains/IntelliJ terminal command-blocks feature, enabling related terminal handling (qNr sets jio=true).
INTELLIJ_TERMINAL_COMMAND_BLOCKS_REWORKED - Presence (defined) detects the reworked IntelliJ terminal command-blocks feature, enabling related terminal handling (qNr sets jio=true).
ITERM_SESSION_ID - iTerm2 session identifier; presence marks the terminal as iTerm2 and is split (pane id after ":") for tmux/pane handling.
KITTY_WINDOW_ID - Kitty terminal window ID; presence marks the terminal as kitty in terminal detection.
KONSOLE_VERSION - KDE Konsole version; presence marks terminal as konsole and version>=211200 is treated as a capable terminal.
LC_TERMINAL - Terminal identifier from locale; "iTerm2" value triggers iTerm2-specific key/clipboard handling; reported in tmux clipboard diagnostics.
MODIFIERS_NODE_PATH - Overrides the require() path for the native keyboard-modifiers addon (getModifiers/isModifierPressed) instead of the bundled default
MSYSTEM - MSYS2/MinGW system type; when set, terminal detection returns its lowercased value as the terminal name
NO_COLOR - Standard NO_COLOR var; disables ANSI colors when set unless FORCE_COLOR is also defined
SESSIONNAME - Windows session name; combined with TERM==='cygwin' to detect a Cygwin terminal
SSH_CLIENT - SSH client connection info; one of the vars (with SSH_CONNECTION/SSH_TTY) used to detect an SSH session
SSH_CONNECTION - SSH connection details; used to detect an SSH session (affects mux/clipboard/terminal behavior)
SSH_TTY - SSH TTY device; used to detect an SSH session
STY - GNU Screen session identifier; presence detects the 'screen' multiplexer
TERM - Terminal type identifier; 'dumb' disables interactive features and specific values (xterm-ghostty, kitty, cygwin, etc.) drive detection
TERMINAL - Generic terminal executable identifier; on Linux used to resolve/launch the terminal emulator command
TERMINAL_EMULATOR - Terminal emulator identifier; value 'JetBrains-JediTerm' detects PyCharm/JetBrains terminals
TERMINATOR_UUID - Terminator terminal UUID; presence detects the Terminator terminal
TERM_PROGRAM - Terminal program name (e.g. iTerm.app, Apple_Terminal, vscode); 'devin' maps to windsurf and drives multiple detections
TERM_PROGRAM_VERSION - Terminal program version; parsed/coerced for feature gating (ghostty>=1.2.0, iTerm, vscode/cursor ranges)
TILIX_ID - Tilix terminal ID; presence detects the Tilix terminal
VTE_VERSION - VTE (GNOME Terminal) version; presence detects vte-based terminals and parseInt>=6800 gates a capability
WAYLAND_DISPLAY - Wayland display; presence selects wl-copy for Linux clipboard and, when absent with DISPLAY unset, marks a headless Linux session
WT_SESSION - Windows Terminal session ID; presence detects Windows Terminal and gates progress reporting/scroll behavior
XTERM_VERSION - xterm version; presence detects an xterm terminal
ZED_TERM - Set when running inside the Zed editor terminal; presence gates a terminal capability
ZELLIJ - Set when running inside the Zellij multiplexer; drives multiplexer detection

## Cloud Platform Detection

APP_URL - Application URL; checked for an "ondigitalocean.app" host to detect the DigitalOcean App Platform
AWS_EXECUTION_ENV - AWS execution environment; value AWS_ECS_FARGATE maps to aws-fargate and AWS_ECS_EC2 to aws-ecs in cloud platform detection
AWS_LAMBDA_FUNCTION_NAME - Presence detected during cloud-platform detection to report the runtime as "aws-lambda".
AZURE_FUNCTIONS_ENVIRONMENT - Azure Functions environment; presence used for cloud-platform detection.
C9_PID - AWS Cloud9 process ID; presence used for platform detection.
C9_USER - AWS Cloud9 user; presence used for platform detection.
CF_PAGES - Presence detected as the "cloudflare-pages" cloud platform.
CLOUD_RUN_JOB - Presence indicates running as a Google Cloud Run Job (used in GCP serverless environment detection).
CODER - Truthy value indicates running inside a Coder workspace.
CODER_WORKSPACE_NAME - Coder workspace name; presence contributes to detecting a Coder workspace environment.
CODESPACES - Truthy value indicates running inside GitHub Codespaces.
DAYTONA_WS_ID - Daytona workspace ID; presence indicates a Daytona workspace environment.
DENO_DEPLOYMENT_ID - Deno Deploy deployment ID; presence identifies the Deno Deploy platform.
DEVPOD - Truthy value indicates running inside a DevPod workspace.
DEVPOD_WORKSPACE_UID - DevPod workspace UID; presence contributes to DevPod environment detection.
DYNO - Heroku dyno identifier; presence identifies the Heroku platform.
FLY_APP_NAME - Fly.io application name; presence (with FLY_MACHINE_ID) identifies the Fly.io platform.
FLY_MACHINE_ID - Fly.io machine ID; presence identifies the Fly.io platform.
FUNCTION_NAME - Presence detects Google Cloud Functions/Cloud Run (ajs/JKd: !!(CLOUD_RUN_JOB||FUNCTION_NAME||K_SERVICE) and !!(FUNCTION_NAME||FUNCTION_TARGET)).
FUNCTION_TARGET - Presence detects Google Cloud Functions target (JKd: !!(FUNCTION_NAME||FUNCTION_TARGET)).
GAE_MODULE_NAME - Presence detects Google App Engine (YKd: !!(GAE_SERVICE||GAE_MODULE_NAME)).
GAE_SERVICE - Presence detects Google App Engine service (YKd: !!(GAE_SERVICE||GAE_MODULE_NAME)).
GITPOD_WORKSPACE_ID - Presence detects a Gitpod workspace (returns "gitpod").
GOOGLE_CLOUD_WORKSTATIONS - Boolean-truthy; presence detects a GCP Cloud Workstations environment (returns "gcp-cloud-workstations").
KUBERNETES_SERVICE_HOST - Presence detects a Kubernetes environment (returns "kubernetes").
K_CONFIGURATION - Presence detects Google Cloud Run/Knative configuration (XKd: !!K_CONFIGURATION).
K_SERVICE - Google Cloud Run/Knative service name; presence detects "gcp-cloud-run" (and part of Cloud Functions detection ajs).
NETLIFY - Truthy flag (ut()) marking the deployment environment as Netlify
PROJECT_DOMAIN - Presence marks the deployment environment as Glitch
RAILWAY_ENVIRONMENT_NAME - Presence (with RAILWAY_SERVICE_NAME) marks the deployment environment as Railway
RAILWAY_SERVICE_NAME - Presence (with RAILWAY_ENVIRONMENT_NAME) marks the deployment environment as Railway
RENDER - Truthy flag (ut()) marking the deployment environment as Render
REPL_ID - Presence (with REPL_SLUG) marks the deployment environment as Replit
REPL_SLUG - Presence (with REPL_ID) marks the deployment environment as Replit
SPACE_CREATOR_USER_ID - Presence detects the huggingface-spaces hosting platform
VERCEL - Truthy (ut()) presence detects the Vercel hosting platform
WEBSITE_SITE_NAME - Azure App Service site name; presence (or WEBSITE_SKU) detects the azure-app-service platform
WEBSITE_SKU - Azure App Service SKU; presence (or WEBSITE_SITE_NAME) detects the azure-app-service platform

## Azure Identity

AZURE_ADDITIONALLY_ALLOWED_TENANTS - Semicolon-separated (.split(";")) list of additional Azure AD tenant IDs allowed for token acquisition.
AZURE_AUTHORITY_HOST - Azure AD authority host URL for @azure/identity; default login.microsoftonline.com.
AZURE_CLIENT_CERTIFICATE_PASSWORD - Password protecting the Azure client certificate used for certificate-based auth.
AZURE_CLIENT_CERTIFICATE_PATH - Path to the Azure client certificate for certificate-based service-principal authentication.
AZURE_CLIENT_ID - Azure application (client) ID for @azure/identity EnvironmentCredential.
AZURE_CLIENT_SECRET - Azure client secret for service-principal authentication.
AZURE_CLIENT_SEND_CERTIFICATE_CHAIN - Boolean; when set, sends the full x5c certificate chain for subject-name/issuer (SNI) certificate auth.
AZURE_FEDERATED_TOKEN_FILE - Path to the federated/workload-identity token file for @azure/identity.
AZURE_IDENTITY_DISABLE_MULTITENANTAUTH - Boolean; disables multi-tenant authentication in @azure/identity.
AZURE_PASSWORD - Password for Azure username/password (ROPC) authentication.
AZURE_POD_IDENTITY_AUTHORITY_HOST - Authority host for the Azure Pod Identity / IMDS managed-identity endpoint.
AZURE_REGIONAL_AUTHORITY_NAME - Regional STS authority name for Azure AD token requests (e.g., AutoDiscoverRegion).
AZURE_TENANT_ID - Azure AD tenant ID for @azure/identity EnvironmentCredential.
AZURE_TOKEN_CREDENTIALS - Selects DefaultAzureCredential mode; valid values 'prod' or 'dev' (trimmed/lowercased), otherwise throws an error.
AZURE_USERNAME - Username for Azure username/password (ROPC) authentication.
SYSTEM_OIDCREQUESTURI - Azure Pipelines OIDC request URI required by AzurePipelinesCredential; throws if unset when that credential is used

## System & Runtime

APPDATA - Windows application data directory; used for config-file discovery (e.g. VS Code, gcloud, Alacritty config)
AWS_LAMBDA_BENCHMARK_MODE - Set to "1" (compared ==="1") to enable benchmark testing mode in the vendored AWS Lambda InvokeStore, exposing a _testing reset helper.
BROWSER - Overrides the default browser command used to open URLs.
CHOKIDAR_INTERVAL - Polling interval in ms for the Chokidar file watcher.
CHOKIDAR_USEPOLLING - Forces the Chokidar file watcher to use polling instead of native filesystem events.
CLAUDECODE - Boolean (Ue.bool getter), set to "1" by the CLI to mark that a process is running inside Claude Code.
CLAUDE_BYTE_STREAM_IDLE_TIMEOUT_MS - Byte-stream idle timeout in ms (Number()); if finite and >0 it overrides the watchdog timeout, otherwise falls back to feature gate tengu_byte_stream_idle_timeout_ms.
CLAUDE_CODE_HOST_PLATFORM - Overrides the detected host platform; honored only for values win32/darwin/linux, else falls back to the real platform.
CLAUDE_CODE_PACKAGE_MANAGER_AUTO_UPDATE - Boolean (ut); enables auto-updating Claude Code via the host package manager (homebrew/winget).
CLAUDE_CODE_RETRY_WATCHDOG - Boolean (ut); enables retry-watchdog behavior that keeps retrying on 529/overload errors instead of dropping or falling back.
CLAUDE_CODE_TMPDIR - Override the temp directory used by Claude Code (falls back to /tmp or /tmp/claude for sandbox TMPDIR); alternative to CLAUDE_TMPDIR.
CLAUDE_ENABLE_BYTE_WATCHDOG - Enables the byte-level stream watchdog: Pl() disables, ut() enables, otherwise defaults on via tengu_stream_watchdog_default_on (default true).
CLAUDE_ENABLE_STREAM_WATCHDOG - Tri-state boolean (ke.CLAUDE_ENABLE_STREAM_WATCHDOG??true); enables stream health watchdog, default on unless set false.
CLAUDE_MOCK_HEADERLESS_429 - [unverified] Boolean env (MWu=Ue.bool schema) in the streaming/watchdog schema group, name implies mocking a headerless HTTP 429; only in name-list/getter, no consuming logic found in binary.
CLAUDE_SERVE_DRAIN_TIMEOUT_MS - [unverified] Integer env (fju=Ue.int schema), name implies a serve-mode drain timeout in ms; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_SLOW_FIRST_BYTE_MS - Integer (parseInt) threshold in ms for logging a "Slow first byte" warning when no stream chunk arrives; default 30000.
CLAUDE_STREAM_IDLE_TIMEOUT_MS - Integer (Number) stream idle timeout in ms; effective value is max(env, 300000), i.e. floored at 300000ms before the watchdog acts.
CLAUDE_TMPDIR - Overrides the temp directory used by Claude Code (default /tmp/claude, after CLAUDE_CODE_TMPDIR); exported as TMPDIR into sandboxed bash env.
DISPLAY - X11 display; required for xclip/xsel clipboard on Linux and passed to child processes (defaulting to ":99" if unset).
ENABLE_LOCKLESS_UPDATES - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_PID_BASED_VERSION_LOCKING - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
HOME - User home directory; used across config path resolution (e.g. HOME/.config/anthropic, gcloud ADC, XDG_STATE_HOME fallback) and safety checks.
LANG - System locale; used (LC_ALL||LC_TIME||LANG) to derive date/time formatting locale.
LC_ALL - Overrides all locale settings; highest precedence in locale resolution (LC_ALL||LC_TIME||LANG).
LC_TIME - Time-related locale; used (LC_ALL||LC_TIME||LANG) to derive date/time formatting locale.
LOCALAPPDATA - Windows Local AppData directory; used to locate PowerShell (pwsh.exe) and winget.exe under Microsoft\WindowsApps for install/upgrade
OSTYPE - OS type identifier; treated as cygwin/msys shell when equal to "cygwin" or "msys" (affects PATH delimiter)
PATH - Executable search path; split on the platform delimiter for command lookup and forwarded to sandboxed subprocesses
PATHEXT - Windows executable file extensions (default ".COM;.EXE;.BAT;.CMD"); split on ";" for command resolution
PKG_CONFIG_PATH - pkg-config search path; included when assembling PKG_CONFIG_PATH for building native dependencies
PREFIX - Termux install prefix; combined with TERMUX_VERSION to resolve $PREFIX/tmp for the daemon temp directory
PWD - Shell working directory; compared against the process cwd to detect a session-provided cwd
SAFEUSER - Preferred username source (checked before USER) for telemetry/metadata and a sanitized filesystem-safe user identity
SYSTEMROOT - Windows system root; read with default 'C:\\Windows', used to locate System32 where.exe and WindowsPowerShell
TEMP - Windows-style temp dir; third fallback in Node os.tmpdir() chain (TMPDIR || TMP || TEMP || '/tmp')
TERMUX_VERSION - Termux version string; with PREFIX set, resolves Termux tmp dir ($PREFIX/tmp) for the daemon path
TMP - Temp dir; second fallback in Node os.tmpdir() chain (TMPDIR || TMP || TEMP || '/tmp')
TMPDIR - Primary temp directory; first in Node os.tmpdir() chain and forwarded into the env of spawned bash subprocesses
USER - Current username; used for user identity (kL()), temp/daemon paths, and metadata (falls back to userInfo)
USERNAME - Fallback username (e.g. Windows); used when USER is unset for identity resolution
USERPROFILE - Windows user profile directory; used for HOME fallback, Desktop/PowerShell path resolution, and WSL path mapping
WSL_DISTRO_NAME - WSL distribution name; yields the 'wsl-<name>' environment id and drives WSL<->Windows path translation for IDE/config lookups
XDG_RUNTIME_DIR - XDG runtime directory; used as the base directory for the VS Code IPC socket path

## Node.js & Bun

API_FORCE_IDLE_TIMEOUT - Force the idle timeout to stay enabled on Anthropic API fetch connections; when falsy (default) the body idle watchdog may disable the timeout, when truthy it is kept
BUN_DISABLE_DYNAMIC_CHUNK_SIZE - Set to "1" (compared !=="1") to disable Bun's dynamic chunk-size adjustment.
BUN_ENV - Bun runtime environment selector (paired with NODE_ENV).
BUN_FEEDBACK_URL - Endpoint for Bun crash/feedback uploads; defaults to https://bun.report/v1/feedback.
BUN_INSPECT_NOTIFY - Inspector notify socket URL (unix://) for the Bun debugger; cleared after being read.
BUN_INSTALL - Bun installation directory; defaults to ~/.bun (homedir()/.bun).
BUN_JS_DEBUG - Enables Bun JavaScript debug logging.
COREPACK_ENABLE_AUTO_PIN - Claude Code sets this to "0" at startup to disable Corepack auto-pinning of package managers.
GRACEFUL_FS_PLATFORM - Overrides platform string for the graceful-fs shim (defaults to "darwin").
NODE_CLUSTER_SCHED_POLICY - Node.js cluster scheduling policy, read into schedulingPolicyEnv by the cluster module
NODE_DEBUG - Node.js debuglog section filter (regex-tested for names like gfs4/semver) to enable internal debug output
NODE_ENV - Node.js environment mode (development/production/test)
NODE_OPTIONS - Additional Node.js CLI options; split on whitespace to check flags and appended with --max-old-space-size=8192 when CLAUDE_CODE_REMOTE=true
NODE_UNIQUE_ID - Node.js cluster worker unique ID; used to set worker id and deleted after worker setup
UV_THREADPOOL_SIZE - libuv thread pool size for async I/O; reported in the diagnostics env dump ('default' when unset)

## gRPC

BUF_BIGINT_DISABLE - Set to "1" (compared !=="1") to disable the native BigInt setBigInt64/setBigUint64 fast-path in the @bufbuild/protobuf runtime, forcing the fallback implementation.
GRPC_DEFAULT_SSL_ROOTS_FILE_PATH - Path to a custom SSL roots (CA) file that gRPC reads (readFileSync) as default root certificates.
GRPC_EXPERIMENTAL_ENABLE_OUTLIER_DETECTION - Enables experimental gRPC outlier detection; enabled by default ((...??"true")==="true"), set to a non-"true" value to disable.
GRPC_NODE_TRACE - gRPC Node.js trace categories (comma-separated, with "-" prefix to exclude); falls back to GRPC_TRACE, default "".
GRPC_NODE_USE_ALTERNATIVE_RESOLVER - Boolean string; when "true" uses gRPC's alternative DNS resolver in Node.js (default "false").
GRPC_NODE_VERBOSITY - gRPC Node.js log verbosity (DEBUG/INFO/ERROR); falls back to GRPC_VERBOSITY.
GRPC_SSL_CIPHER_SUITES - Overrides the SSL cipher suites used for gRPC TLS connections (CIPHER_SUITES).
GRPC_TRACE - gRPC trace categories for debugging; used as fallback when GRPC_NODE_TRACE is unset.
GRPC_VERBOSITY - gRPC log verbosity level (DEBUG/INFO/ERROR); used as fallback when GRPC_NODE_VERBOSITY is unset.

## Brief Mode

CLAUDE_CODE_BRIEF - Boolean-truthy (ke.); enables brief mode, gated on brief entitlement (isBriefEntitled) or the tengu_kairos_brief feature gate.
CLAUDE_CODE_BRIEF_UPLOAD - Boolean-truthy; enables uploading brief attachments (also enabled when replBridgeEnabled, CLAUDE_CODE_REMOTE_ENVIRONMENT_TYPE, or CLAUDE_CODE_REMOTE are set).
DISABLE_BRIEF_MODE_STOP_HOOK - When truthy, disables the brief-mode Stop hook that runs after the main thread when brief mode and the brief tool are enabled.

## Accessibility

CLAUDE_AX_SCREEN_READER - Tri-state boolean (Ue.triBool getter); enables screen-reader-friendly flat-text output (no borders/animations), overridable by --ax-screen-reader; propagated to children as "1".
CLAUDE_CODE_ACCESSIBILITY - Boolean-truthy (ke.); enables accessibility mode which disables cursor hiding and visual animations and keeps the native cursor visible.
CLAUDE_CODE_NATIVE_CURSOR - Truthy-enables native cursor rendering; also on under accessibility mode; otherwise defaults to the tengu_native_cursor flag.
INK_SCREEN_READER - Boolean-truthy (ut); when set on a TTY, enables Ink screen-reader rendering mode (isScreenReaderEnabled).

## Chrome Extension

CLAUDE_CHROME_CLASSIFIER_FLOOR - Boolean-truthy override enabling the Chrome auto-mode classifier floor; when unset falls back to feature gate tengu_cowork_chrome_automode_default (default false).
CLAUDE_CHROME_PERMISSION_MODE - Sets the permission mode for the Claude-in-Chrome extension; validated against the allowed value list and warns/ignored if invalid.
CLAUDE_CODE_ENABLE_CFC - Force-enable (true) or disable (false) the Claude-in-Chrome browser-extension integration; overrides the claudeInChromeDefaultEnabled default

## Voice

CLAUDE_CODE_VOICE_FORWARD_INTERIMS_TYPED - Boolean (ut()); when set, forwards interim typed voice-transcription results, otherwise gated by tengu_brick_follow flag.
VOICE_STREAM_BASE_URL - Override base URL for the voice streaming websocket; when set it is used instead of deriving from BASE_API_URL

## Security

CLAUDE_CODE_BUBBLEWRAP - Set to indicate running inside a Bubblewrap sandbox; when set (ke.), bypasses the root-user block so --dangerously-skip-permissions is allowed as root.
CLAUDE_CODE_SAFE_MODE - Boolean (ut) or --safe-mode flag; enables safe mode, forcing CLAUDE_CODE_DISABLE_CLAUDE_MDS=1 and dropping MCP servers.
CLAUDE_CODE_SANDBOXED - Boolean (ut); indicates a sandboxed environment and bypasses the trust dialog.
CLAUDE_CODE_SUBPROCESS_ENV_SCRUB - Boolean-truthy (ut()) forces scrubbing of env vars from spawned subprocesses; a disable-style value (Pl()) forces it off; otherwise defaults based on entrypoint.
CLAUDE_SECURESTORAGE_CONFIG_DIR - Overrides the config dir used for secure storage of credentials (.oauth_token/.api_key/.session_ingress_token), NFC-normalized; forwarded to child processes.
IS_SANDBOX - Set to "1" to indicate running inside a sandbox; disables internet-access probes and permits root use of --dangerously-skip-permissions.

## Miscellaneous & Internal

AI_AGENT - Agent/harness identifier; if unset or starting with "claude-code_"/"claude-code/" it is overwritten with a generated harness id (version-tagged), propagated for telemetry/attribution
API_TOKEN - [unverified] String env var (Ue.str()) registered in the env registry; only literal reference is an example "Authorization: Bearer ${API_TOKEN}" doc snippet, no functional consumer found
CLAUDE_CODE_ACT_DONT_REDERIVE - Boolean override for the "act don't re-derive" arm (read via ke.); when unset falls back to feature gate tengu_cedar_lantern (default true).
CLAUDE_CODE_CLASSIFIER_SUMMARY - Selects classifier summary mode: when set truthy -> "llm", set falsy -> "heuristic", unset -> computed default; tengu_cobalt_wren gate can force "heuristic".
CLAUDE_CODE_DEV_RAW_CHANGELOG_URL - [unverified] Registered as a string env var (Ue.str()); name implies a dev override for the raw CHANGELOG.md fetch URL, but no read site found (changelog fetch uses a hardcoded raw.githubusercontent.com/anthropics/claude-code URL)
CLAUDE_CODE_ENABLE_DESIGN_SYNC - [unverified] Registered env flag included in the reported-metadata env allowlist; no functional read site found (companion to CLAUDE_CODE_ENABLE_DESIGN_MCP)
CLAUDE_CODE_FORCE_FULLSCREEN_UPSELL - Forces display of the fullscreen-mode upsell prompt (bypasses dismiss count).
CLAUDE_CODE_FORCE_FULL_LOGO - When set, forces rendering of the full ASCII logo (skips the compact-logo branch).
CLAUDE_CODE_FORCE_TIP_ID - When set (Boolean), forces a fixed spinner tip to display and suppresses normal tip rotation/clearing.
CLAUDE_CODE_GB_BASE_URL - [unverified] String env var (Ue.str) in the env schema, named for the GrowthBook (GB) feature-flag service base URL; no consuming code found in binary.
CLAUDE_CODE_GB_REFRESH_INTERVAL_MS - [unverified] Integer env var (Ue.int) in the env schema, named for the GrowthBook (GB) feature-flag refresh interval in ms; no consuming code found in binary.
CLAUDE_CODE_HIDE_CWD - When set, hides the current working directory from the UI header line.
CLAUDE_CODE_HIDE_SETTINGS_HINT - When truthy, suppresses the settings hint shown on startup.
CLAUDE_CODE_JSONL_TRANSCRIPT - [unverified] String env var (Ue.str) in the env schema; no consuming code found in binary.
CLAUDE_CODE_KB_COHESION_FIXES - Boolean flag (read via ke) enabling "KB cohesion fixes" (Z4 returns true when set), referenced from the keyboard-handling module.
CLAUDE_CODE_MOCK_TRIAL - [unverified] Boolean env var (Ue.bool) in the env schema; no consuming code found in binary.
CLAUDE_CODE_NEW_INIT - A truthy value (or the tengu_slate_harbor_experiment flag) switches /init to the new CLAUDE.md/skills/hooks initialization flow.
CLAUDE_CODE_OVERRIDE_DATE - [unverified] Declared as a string env var (Ue.str); no consuming read found in binary.
CLAUDE_CODE_POWERUP_ONBOARDING - Selects the powerup onboarding arm; accepts "banner" or "step", else falls back to the tengu_birch_lantern flag ("off").
CLAUDE_CODE_SKIP_HFI_VERSION_CHECK - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry alongside provider/proxy flags; no consumer/read site found in the binary.
CLAUDE_CODE_SKIP_PROJECT_BACKFILL - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_SKIP_REPO_UPLOAD - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TAG_ISMETA_MESSAGES - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TWO_STAGE_CLASSIFIER - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_FORCE_DISPLAY_SURVEY - Boolean (ut()); forces the product feedback survey to display (when not previously shown and feedback allowed).
CLAUDE_INTERNAL_FC_OVERRIDES - Internal env key in the background-job providerEnv allowlist (VBr) that is captured from process.env and persisted/restored with jobs (alongside CLAUDE_CONFIG_DIR, AWS_*, GOOGLE_*); override target not further specified in binary.
CLAUDE_PROJECT_UUID - Trimmed project UUID; when set, used to fetch project context/knowledge (getProjectContextBlock) with a timeout.
CLAUDE_REPL_VARIANT - Returns the REPL variant identifier string (YRa returns process.env.CLAUDE_REPL_VARIANT); related to CLAUDE_CODE_REPL gating.
CLAUDE_SNIP - [unverified] String env (k8u=Ue.str schema); only appears in env name-list and getter, no consuming logic found in binary.
DATABASE_URL - Read by a bundled library as a fallback database connection URL (env.DATABASE_URL||env.DATABASEURL); not part of Claude Code's own configuration.
DEMO_VERSION - Overrides the reported version string; when set, the displayed working path becomes "/code/claude".
DS_CHROMIUM_PATH - Custom Chromium executable path passed to Playwright's chromium.launch() when Chromium cannot otherwise be installed.
IS_DEMO - Boolean-truthy; demo mode that suppresses onboarding and hides org/email/organization details in UI.
PLAYWRIGHT_BROWSERS_PATH - [unverified] Declared as a string in the typed env registry (Ue.str, read via ke.PLAYWRIGHT_BROWSERS_PATH); no consumer found in the binary
SCREENSHOT_DIR - Directory where the bundled app-driving helper script saves screenshots; read via ||, default '/tmp/shots'
SHARP_FORCE_GLOBAL_LIBVIPS - Sharp image lib: when truthy (Boolean()), forces use of the globally-installed libvips
SHARP_IGNORE_GLOBAL_LIBVIPS - Sharp image lib: when truthy (Boolean()), skips/ignores the globally-installed libvips
VERBOSE_SSR - In dev builds (import.meta.env.DEV), when set enables verbose server-side-rendering logging

@unkn0wncode Hey! How you obtain this! thnx 🤗

@n0isy hey, basically from CC binary itself :p

43 added between 2.1.63 and 2.1.81:

ANTHROPIC_CUSTOM_MODEL_OPTION - Custom model ID to add to the model selector dropdown
ANTHROPIC_CUSTOM_MODEL_OPTION_DESCRIPTION - Description text for the custom model option
ANTHROPIC_CUSTOM_MODEL_OPTION_NAME - Display name for the custom model option
ANTHROPIC_UNIX_SOCKET - Unix socket path for Anthropic API connections
CCR_ENABLE_BUNDLE - Enable code bundle uploads for CCR
CCR_FORCE_BUNDLE - Force code bundle uploads for CCR regardless of feature flag
CLAUDE_BRIDGE_USE_CCR_V2 - Use CCR v2 protocol for bridge/session connections
CLAUDE_CODE_ACCOUNT_TAGGED_ID - Tagged account ID for OTEL metrics
CLAUDE_CODE_ALWAYS_ENABLE_EFFORT - Force effort level support on all models
CLAUDE_CODE_AUTO_COMPACT_WINDOW - Override the auto-compaction context window size
CLAUDE_CODE_BRIEF - Enable brief mode for compact output
CLAUDE_CODE_BRIEF_UPLOAD - Enable brief attachment uploading
CLAUDE_CODE_DEBUG_LOG_LEVEL - Debug log level (verbose, debug, info, warn, error)
CLAUDE_CODE_DISABLE_CRON - Disable cron/scheduled task functionality
CLAUDE_CODE_DISABLE_GIT_INSTRUCTIONS - Disable git-related instructions in system prompt
CLAUDE_CODE_DISABLE_LEGACY_MODEL_REMAP - Disable legacy model name remapping
CLAUDE_CODE_DISABLE_PRECOMPACT_SKIP - Disable skipping of pre-compaction optimization
CLAUDE_CODE_DISABLE_VIRTUAL_SCROLL - Disable virtual scrolling in the UI
CLAUDE_CODE_EXTRA_METADATA - Extra metadata to include in API request metadata
CLAUDE_CODE_FRAME_TIMING_LOG - Path to write frame timing logs
CLAUDE_CODE_MCP_INSTR_DELTA - Delta value for MCP instruction processing
CLAUDE_CODE_NEW_INIT - Trigger new initialization flow
CLAUDE_CODE_QUESTION_PREVIEW_FORMAT - Format for question preview display
CLAUDE_CODE_SEARCH_HINTS_IN_LIST - Show search hints in list views
CLAUDE_CODE_SESSIONEND_HOOKS_TIMEOUT_MS - Timeout for session-end hook execution
CLAUDE_CODE_SKIP_FAST_MODE_NETWORK_ERRORS - Skip network error handling in fast mode
CLAUDE_CODE_SSE_PORT - SSE port for IDE communication
CLAUDE_CODE_STALL_TIMEOUT_MS_FOR_TESTING - Stall timeout override for testing
CLAUDE_CODE_SUBPROCESS_ENV_SCRUB - Scrub environment variables from subprocesses
CLAUDE_CODE_USE_POWERSHELL_TOOL - Use PowerShell instead of Bash
CLAUDE_CODE_WORKSPACE_HOST_PATHS - Host paths for workspace mapping in containers
CLAUDE_COWORK_MEMORY_EXTRA_GUIDELINES - Extra guidelines for cowork memory
CLAUDE_COWORK_MEMORY_PATH_OVERRIDE - Override memory directory path in cowork mode
CLI_WIDTH - Override terminal width for formatting
EMBEDDED_SEARCH_TOOLS - Enable embedded search tools
LANG - System locale setting
LC_ALL - Override all locale settings
LC_TERMINAL - Terminal identifier from locale settings
LC_TIME - Time-related locale setting
MCP_OAUTH_CLIENT_METADATA_URL - URL for MCP OAuth client metadata
REVIEW_REMOTE - Remote URL for code review service
TEAM_MEMORY_SYNC_URL - URL for team memory synchronization
VCR_RECORD - VCR recording mode for test replay

11 removed since v2.1.63:

AUDIO_CAPTURE_NODE_PATH - Path to audio capture node module
CLAUDECODE - Set to "1" in child shell processes spawned by Claude Code
CLAUDE_CODE_PROFILE_QUERY - Enable per-query profiling
CLAUDE_CODE_SKIP_PRECOMPACT_LOAD - Optimize large session file loading
CLAUDE_CODE_STREAMING_TEXT - Enable streaming text display mode
DISABLE_MICROCOMPACT - Disable microcompact message optimization
ENABLE_BTW - Enable "by the way" suggestions
ENABLE_LSP_TOOL - Enable the LSP tool for code intelligence
ENABLE_SESSION_BACKGROUNDING - Enable session backgrounding via Ctrl+B
MCP_CONNECTION_NONBLOCKING - Make MCP server connections non-blocking
RIPGREP_EMBEDDED - Indicates using the embedded ripgrep binary

THANK YOU SO MUCH!

Diff: 2.1.81 -> 2.1.100

Added (71):

ANTHROPIC_AWS_API_KEY - API key for Anthropic AWS service
ANTHROPIC_AWS_BASE_URL - Custom base URL for Anthropic AWS endpoint
ANTHROPIC_AWS_WORKSPACE_ID - Workspace ID for Anthropic AWS service
ANTHROPIC_BEDROCK_MANTLE_BASE_URL - Custom base URL for Bedrock Mantle endpoint. Defaults to https://bedrock-mantle.{region}.api.aws/anthropic
ANTHROPIC_DEFAULT_HAIKU_MODEL_DESCRIPTION - Description text for custom Haiku model override
ANTHROPIC_DEFAULT_HAIKU_MODEL_NAME - Display name for custom Haiku model override
ANTHROPIC_DEFAULT_OPUS_MODEL_DESCRIPTION - Description text for custom Opus model override
ANTHROPIC_DEFAULT_OPUS_MODEL_NAME - Display name for custom Opus model override
ANTHROPIC_DEFAULT_SONNET_MODEL_DESCRIPTION - Description text for custom Sonnet model override
ANTHROPIC_DEFAULT_SONNET_MODEL_NAME - Display name for custom Sonnet model override
ANTHROPIC_VERTEX_BASE_URL - Custom base URL for Vertex AI endpoint (replaces VERTEX_BASE_URL)
BAT_THEME - Theme for bat syntax highlighter
BUGHUNTER_DEV_BUNDLE_B64 - Base64-encoded development bundle passed to the bughunter agent subprocess
CCR_UPSTREAM_PROXY_ENABLED - Enable upstream proxy for Claude Code Remote. Requires CLAUDE_CODE_REMOTE and CLAUDE_CODE_REMOTE_SESSION_ID
CLAUDE_CODE_AGENT_COST_STEER - Override agent cost-based steering. Defaults based on subscription tier (pro/max) via feature flag
CLAUDE_CODE_AGENT_LIST_IN_MESSAGES - Override whether the agent list is attached to messages. Defaults to tengu_agent_list_attach feature flag
CLAUDE_CODE_COMMIT_LOG - Enable React commit (render) performance logging. Not related to git commits
CLAUDE_CODE_DEBUG_REPAINTS - Enable debug logging for UI repaints
CLAUDE_CODE_DISABLE_ADVISOR_TOOL - Disable the advisor tool
CLAUDE_CODE_DISABLE_CLAUDE_API_SKILL - Disable the Claude API skill
CLAUDE_CODE_DISABLE_MOUSE - Disable mouse input in the terminal UI
CLAUDE_CODE_DISABLE_NONSTREAMING_FALLBACK - Disable fallback to non-streaming API mode
CLAUDE_CODE_DISABLE_POLICY_SKILLS - Disable policy-based skill loading
CLAUDE_CODE_EMIT_SESSION_STATE_EVENTS - Emit session_state_changed system events when the session transitions between idle/running states
CLAUDE_CODE_ENABLE_XAA - Enable XAA (Cross-Application Authentication) support for MCP servers via OIDC IdP
CLAUDE_CODE_IDLE_THRESHOLD_MINUTES - Idle threshold in minutes before prompting for session action. Default: 75
CLAUDE_CODE_IDLE_TOKEN_THRESHOLD - Token count (context size) threshold before prompting for session action. Default: 100000
CLAUDE_CODE_MAX_CONTEXT_TOKENS - Max context tokens override. Only applied when DISABLE_COMPACT is set. Parsed as int, must be > 0
CLAUDE_CODE_MCP_ALLOWLIST_ENV - Enable env var allowlist filtering for MCP servers. Default: enabled only for local-agent entrypoint
CLAUDE_CODE_NO_FLICKER - Force fullscreen anti-flicker mode. Set to 1 to enable (overrides tmux -CC auto-disable). Set to 0 to force-disable
CLAUDE_CODE_PERFORCE_MODE - Enable Perforce source control mode. Affects file permission/lock handling
CLAUDE_CODE_PLUGIN_KEEP_MARKETPLACE_ON_FAILURE - Keep the existing marketplace clone when git pull fails instead of re-cloning
CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST - Indicates the API provider is managed by the host environment. Treated as a provider selector alongside CLAUDE_CODE_USE_BEDROCK/VERTEX/etc
CLAUDE_CODE_PWSH_PARSE_TIMEOUT_MS - PowerShell command parse timeout in milliseconds. Parsed as int, must be > 0
CLAUDE_CODE_RESUME_THRESHOLD_MINUTES - Minutes since last message before prompting to resume the session. Default: 70
CLAUDE_CODE_RESUME_TOKEN_THRESHOLD - Token threshold for resume prompt. Default: 100000
CLAUDE_CODE_SANDBOXED - Boolean. Indicates Claude Code is running in a sandboxed environment. Bypasses trust dialog
CLAUDE_CODE_SCRIPT_CAPS - JSON object mapping script names to numeric capability limits. Scripts not listed have no caps
CLAUDE_CODE_SCROLL_SPEED - Terminal scroll speed multiplier. Parsed as float, clamped to max 20. Default: 3 on Windows Terminal, 1 otherwise
CLAUDE_CODE_SIMULATE_PROXY_USAGE - Simulate proxy behavior by stripping beta headers from API requests (for testing)
CLAUDE_CODE_SKIP_ANTHROPIC_AWS_AUTH - Skip authentication for Anthropic AWS service
CLAUDE_CODE_SKIP_FAST_MODE_ORG_CHECK - Skip organization check in fast mode
CLAUDE_CODE_SKIP_MANTLE_AUTH - Skip authentication for Bedrock Mantle
CLAUDE_CODE_TEAM_ONBOARDING - Enable the team-onboarding command. Also gated by tengu_flint_harbor feature flag
CLAUDE_CODE_TMUX_TRUECOLOR - Preserve detected truecolor level under tmux. When set, prevents the automatic downgrade to 256 colors inside tmux
CLAUDE_CODE_USE_ANTHROPIC_AWS - Route API calls through Anthropic AWS service
CLAUDE_CODE_USE_MANTLE - Route API calls through Bedrock Mantle
CLAUDE_LOCAL_OAUTH_API_BASE - Local OAuth API base URL for development
CLAUDE_LOCAL_OAUTH_APPS_BASE - Local OAuth apps base URL for development
CLAUDE_LOCAL_OAUTH_CONSOLE_BASE - Local OAuth console base URL for development
CLAUDE_REMOTE_CONTROL_SESSION_NAME_PREFIX - Prefix for remote control session names. Defaults to os.hostname(), sanitized to lowercase-dashed
CLAUDE_SESSION_INGRESS_TOKEN_FILE - Path to file containing session ingress token
CLAUDE_STREAM_IDLE_TIMEOUT_MS - Stream idle timeout in milliseconds before watchdog kicks in. Default: 90000
CLAUDE_TRUSTED_DEVICE_TOKEN - Pre-set trusted device token. When set, skips trusted device enrollment (env var takes precedence)
CLOUDSDK_CONFIG - Google Cloud SDK configuration directory
COLORFGBG - Terminal foreground/background color hint. Parsed to detect dark (0-6, 8) vs light theme
DO_NOT_TRACK - Disable telemetry and tracking when set to 1
GITHUB_ENV - Path to GitHub Actions environment file
GITHUB_EVENT_PATH - Path to GitHub Actions event payload JSON
GITHUB_OUTPUT - Path to GitHub Actions output file
GITHUB_PATH - Path to GitHub Actions PATH file
GITHUB_STATE - Path to GitHub Actions state file
GITHUB_STEP_SUMMARY - Path to GitHub Actions step summary file
GITHUB_TOKEN - GitHub authentication token
MCP_CONNECTION_NONBLOCKING - Make MCP server connections non-blocking
MCP_TRUNCATION_PROMPT_OVERRIDE - Override MCP output truncation prompt mode. Accepts 'subagent' or 'legacy'. Defaults to tengu_mcp_subagent_prompt feature flag
MCP_XAA_IDP_CLIENT_SECRET - IdP client secret for MCP XAA (Cross-Application Authentication). Read by the --client-secret CLI flag
SSL_CERT_FILE - Path to SSL certificate bundle file
SYSTEMROOT - Windows system root directory
TERMINAL - Generic terminal identifier for detection
ZELLIJ - Detected when running inside Zellij multiplexer

Removed (13):

ANALYTICS_LOG_TOOL_DETAILS - Log detailed tool use analytics
BEDROCK_BASE_URL - Custom base URL for AWS Bedrock API endpoint
CLAUDE_CODE_DISABLE_COMMAND_INJECTION_CHECK - Disable command injection safety checks in Bash tool
CLAUDE_CODE_FORCE_GLOBAL_CACHE - Force use of global cache directory
CLAUDE_CODE_MCP_INSTR_DELTA - Delta value for MCP instruction processing
CLAUDE_CODE_SAVE_HOOK_ADDITIONAL_CONTEXT - Save additional context during hook execution
CLAUDE_CODE_SEARCH_HINTS_IN_LIST - Show search hints in list views
CLAUDE_REPL_MODE - Enable REPL (Read-Eval-Print Loop) mode
DISABLE_AUTO_MIGRATE_TO_NATIVE - Disable automatic migration to native platform
DISABLE_CLAUDE_CODE_SM_COMPACT - Disable smart compaction feature
REVIEW_REMOTE - Remote URL for code review service
TMPDIR - System temporary directory
VERTEX_BASE_URL - Custom base URL for Vertex AI API endpoint

Doing gods (actually, anthropic's) work!

these two
CLAUDE_CODE_EXTRA_BODY - Extra JSON body parameters to include in API requests
CLAUDE_CODE_EXTRA_METADATA - Extra metadata to include in API request metadata field

Have you found any more information on them. Or might you be able to check easily? Or if you don't have the time or will to find out for me, could you share a little more on the extraction method. I really want to know about these. Especially the variable values and their implications. I am not new to reverse engineering. Haven't tried for C... Checked your messages, you said CC binary, not C; what will I have to deal with? I prefer spoonfeed but a rod is greatly appreciated as well. I am a fisherman.

Diff: 2.1.100 -> 2.1.118

Added (52):

ANTHROPIC_CONFIG_DIR - Override Anthropic config directory. Falls back to XDG_CONFIG_HOME/anthropic, then HOME/.config/anthropic
ANTHROPIC_FEDERATION_RULE_ID - Federation rule ID for OIDC federation auth mode (env-quad)
ANTHROPIC_ORGANIZATION_ID - Organization ID for OIDC federation auth mode (env-quad)
ANTHROPIC_PROFILE - Explicit profile name to use from the credentials file. Defaults to 'default'
API_FORCE_IDLE_TIMEOUT - Force idle timeout on API connections under Bun. When truthy, re-enables the timeout that is disabled by default
C9_PID - AWS Cloud9 process ID. Used for platform detection
C9_USER - AWS Cloud9 user. Used for platform detection
CLAUDE_ASYNC_AGENT_STALL_TIMEOUT_MS - Async agent stall timeout in milliseconds. Default: 600000 (10 minutes)
CLAUDE_BG_BACKEND - Background backend mode. Set to 'daemon' to ignore SIGHUP (daemon-managed background)
CLAUDE_BRIDGE_REATTACH_SEQ - Sequence number for bridge reattach. Parsed as int. Consumed and deleted after read
CLAUDE_BRIDGE_REATTACH_SESSION - Session ID to reattach to in bridge mode. Consumed and deleted after read
CLAUDE_CODE_BASE_REFS - Env-map (key=value) of base git refs per repo checkout. Used with CLAUDE_CODE_REPO_CHECKOUTS
CLAUDE_CODE_CERT_STORE - CA certificate stores to trust. Comma-separated list of 'bundled' and/or 'system'
CLAUDE_CODE_DECSTBM - Force DECSTBM (scroll region) support. Falls back to tengu_marlin_porch feature flag
CLAUDE_CODE_ENABLE_APPEND_SUBAGENT_PROMPT - Enable appending to subagent system prompt via appendSubagentSystemPrompt option
CLAUDE_CODE_ENABLE_AWAY_SUMMARY - Override away summary feature. Defaults to tengu_sedge_lantern feature flag and setting
CLAUDE_CODE_ENABLE_BACKGROUND_PLUGIN_REFRESH - Enable background plugin refresh after initialization when a refresh is needed
CLAUDE_CODE_ENABLE_EXPERIMENTAL_ADVISOR_TOOL - Enable the experimental advisor tool. First-party only, also gated by tengu_sage_compass2 feature flag
CLAUDE_CODE_ENABLE_PROXY_AUTH_HELPER - Enable the proxy authentication helper
CLAUDE_CODE_FORCE_FULLSCREEN_UPSELL - Force display of the fullscreen mode upsell prompt (bypasses dismiss count)
CLAUDE_CODE_FORK_SUBAGENT - Enable forking subagents. Forced off when signed in with Claude AI OAuth. Otherwise falls back to tengu_copper_fox feature flag
CLAUDE_CODE_PROXY_AUTH_HELPER_TTL_MS - Proxy auth helper cache TTL in milliseconds. Parsed as int, must be >= 0
CLAUDE_CODE_RATE_LIMIT_TIER - Rate limit tier for the OAuth session. Used with CLAUDE_CODE_OAUTH_TOKEN
CLAUDE_CODE_REPL - Enable/disable REPL mode explicitly. Takes precedence over the default (tengu_slate_harbor feature flag)
CLAUDE_CODE_REPO_CHECKOUTS - Env-map (key=value) of repo name to checkout path. Used with CLAUDE_CODE_BASE_REFS for multi-repo workflows
CLAUDE_CODE_RESUME_FROM_SESSION - Session ID to hydrate/teleport from when resuming a session
CLAUDE_CODE_RETRY_WATCHDOG - Enable retry watchdog. Only active on linux with CLAUDE_CODE_ENTRYPOINT=remote
CLAUDE_CODE_SDK_HAS_OAUTH_REFRESH - Indicates the SDK host has OAuth refresh capability. Triggers token refresh request via SDK
CLAUDE_CODE_SIMPLE_SYSTEM_PROMPT - Use the simple system prompt only. Also implied by CLAUDE_CODE_SIMPLE
CLAUDE_CODE_SUBSCRIPTION_TYPE - Override subscription type for the OAuth session. Used with CLAUDE_CODE_OAUTH_TOKEN
CLAUDE_CODE_SYSTEM_PROMPT_GB_FEATURE - GrowthBook feature name to fetch remote system prompt override from. Only read in CLAUDE_CODE_REMOTE mode
CLAUDE_CODE_TUI_JUST_SWITCHED - Set by the harness when TUI mode just switched (e.g., to 'fullscreen'). Used to display the flicker-free rendering hint
CLAUDE_CODE_ULTRAREVIEW_PREFLIGHT_FIXTURE - Test fixture (JSON) for ultrareview preflight check. For testing only
CLAUDE_ENABLE_BYTE_WATCHDOG - Enable byte-level stream watchdog. Default: on via tengu_stream_watchdog_default_on feature flag
CLAUDE_REPL_VARIANT - REPL variant identifier string
CLAUDE_SLOW_FIRST_BYTE_MS - Threshold in milliseconds for logging slow first byte warnings. Default: 30000
CLOUD_WORKSTATIONS_CLUSTER_ID - Google Cloud Workstations cluster ID. Used for platform detection
CODER - Detected when running in a Coder workspace
CODER_WORKSPACE_NAME - Coder workspace name. Used for platform detection
DAYTONA_WS_ID - Daytona workspace ID. Used for platform detection
DEVPOD - Detected when running in a DevPod workspace
DEVPOD_WORKSPACE_UID - DevPod workspace UID. Used for platform detection
DISABLE_UPDATES - Admin-level disable for updates. Takes precedence over DISABLE_AUTOUPDATER. Shows 'Updates are disabled by your administrator' message
ENABLE_PROMPT_CACHING_1H - Enable 1-hour prompt caching. Works for all providers. Also requires not being on overage
FORCE_PROMPT_CACHING_5M - Force 5-minute prompt caching (overrides 1-hour caching)
GITHUB_WORKSPACE - GitHub Actions workspace directory path
NO_COLOR - Standard NO_COLOR env var. Disables colors when set (unless FORCE_COLOR is also set)
OTEL_LOG_RAW_API_BODIES - Enable raw API body logging in OTEL. Values: 'file:/path' for file output, truthy for inline, falsy to disable
PREFIX - Termux PREFIX path. Used with TERMUX_VERSION for tmp directory resolution on Termux
TERMUX_VERSION - Termux version string. Used to detect Termux and resolve its tmp directory
TRACEPARENT - W3C Trace Context traceparent header. Extracted as parent span for OTEL interactions
TRACESTATE - W3C Trace Context tracestate header. Used with TRACEPARENT for trace propagation

Removed (6):

EMBEDDED_SEARCH_TOOLS - Enable embedded search tools
ENABLE_CLAUDE_CODE_SM_COMPACT - Enable smart compaction feature
GITHUB_OUTPUT - Path to GitHub Actions output file
GITHUB_PATH - Path to GitHub Actions PATH file
GITHUB_STATE - Path to GitHub Actions state file
GITHUB_STEP_SUMMARY - Path to GitHub Actions step summary file

@NubeBuster
CLAUDE_CODE_EXTRA_BODY - JSON object merged into the API request body. If it contains an anthropic_beta array, those beta flags are merged (deduplicated) with Claude Code's built-in betas. Must be a plain object; arrays/primitives are rejected with an error log

CLAUDE_CODE_EXTRA_METADATA - JSON object whose fields are combined with device_id, account_uuid, and session_id, then hashed to derive the user_id value sent in API request metadata. Must be a plain object; arrays/primitives are rejected

So for extra body only antrophic_beta as an array and output_config object have special handling and rest is just passed as extraBodyParams and forwarded as is.
and yea in the output_config would be just https://platform.claude.com/docs/en/build-with-claude/structured-outputs

Diff: 2.1.118 -> 2.1.202

Added (300):

AGENT_PROXY_AUTH_TOKEN - Auth token for the Claude Code Remote (CCR) agent proxy; read at startup in initAgentProxy then unset from env, used only when CLAUDE_CODE_REMOTE and CCR_AGENT_PROXY_ENABLED are set with a CLAUDE_CODE_REMOTE_SESSION_ID
AGENT_PROXY_URL - URL of the Claude Code Remote (CCR) agent proxy; read at startup in initAgentProxy then unset from env, gated on CLAUDE_CODE_REMOTE being truthy and CCR_AGENT_PROXY_ENABLED
AI_AGENT - Agent/harness identifier; if unset or starting with "claude-code_"/"claude-code/" it is overwritten with a generated harness id (version-tagged), propagated for telemetry/attribution
ALLOW_ANT_COMPUTER_USE_MCP - [unverified] Boolean env var (Ue.bool()) registered in the env registry; name implies enabling an Anthropic computer-use MCP server, but no consumer found in the binary
ANTHROPIC_BEDROCK_SERVICE_TIER - When set, sent as the X-Amzn-Bedrock-Service-Tier header on Bedrock requests and shown as "Bedrock service tier" in provider diagnostics
ANTHROPIC_DEFAULT_FABLE_MODEL - Override the default Fable model ID; falls back to Fable 5, and enables the custom "fable" selector entry on first-party/gateway providers
ANTHROPIC_DEFAULT_FABLE_MODEL_DESCRIPTION - Description text for the custom Fable model override; falls back to "Custom Fable model"
ANTHROPIC_DEFAULT_FABLE_MODEL_NAME - Display name (label) for the custom Fable model override in the model selector; falls back to the model ID
ANTHROPIC_ENVIRONMENT_ID - Environment ID for Anthropic managed-agent self-hosted sandboxes; read (non-null asserted) by the EnvironmentWorker to identify the self-hosted environment
ANTHROPIC_ENVIRONMENT_KEY - Environment auth key (sk-ant-oat01-... generated in Console) for Anthropic managed-agent self-hosted sandboxes; read by the EnvironmentWorker to authenticate
ANTHROPIC_WORKSPACE_ID - Workspace ID for federation rules scoped to multiple workspaces (env-quad auth); alternative to the 'workspace_id' config key / workspaceId option
ANT_CLAUDE_CODE_METRICS_ENDPOINT - [unverified] String env var registered in the OTEL/telemetry env registry; no consumer found in the binary (Claude Code telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_ENDPOINT - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_ENDPOINT; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_HEADERS - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_HEADERS; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_PROTOCOL - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_PROTOCOL; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_LOGS_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_LOGS_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_METRICS_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_METRICS_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_RESOURCE_ATTRIBUTES - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_RESOURCE_ATTRIBUTES; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_TRACES_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_TRACES_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
API_MAX_INPUT_TOKENS - [unverified] Integer env var (Ue.int()) registered in the env registry; name implies a maximum input-token limit, but no consumer found in the binary
API_TARGET_INPUT_TOKENS - [unverified] Integer env var (Ue.int()) registered in the env registry; name implies a target input-token count, but no consumer found in the binary
API_TOKEN - [unverified] String env var (Ue.str()) registered in the env registry; only literal reference is an example "Authorization: Bearer ${API_TOKEN}" doc snippet, no functional consumer found
AUTOMODE_DECISION_LOG - When set to "1", enables logging of automode decisions to a .automode_decisions.jsonl file in the working directory
AWS_CONFIG_FILE - Standard AWS SDK config-file path; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_CONTAINER_CREDENTIALS_FULL_URI - Standard AWS SDK container-credentials URI; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_CONTAINER_CREDENTIALS_RELATIVE_URI - Standard AWS SDK relative container-credentials URI; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_ROLE_ARN - Standard AWS SDK var; ARN of the IAM role assumed via AssumeRoleWithWebIdentity (paired with AWS_WEB_IDENTITY_TOKEN_FILE); also a "proxy-injected" placeholder gate for the agent proxy.
AWS_SHARED_CREDENTIALS_FILE - Standard AWS SDK var; path to the shared credentials file for credential resolution; its presence also gates agent-proxy AWS placeholder injection.
AWS_WEB_IDENTITY_TOKEN_FILE - Standard AWS SDK var; path to the web-identity token file used with AWS_ROLE_ARN for AssumeRoleWithWebIdentity credential resolution.
BUF_BIGINT_DISABLE - Set to "1" (compared !=="1") to disable the native BigInt setBigInt64/setBigUint64 fast-path in the @bufbuild/protobuf runtime, forcing the fallback implementation.
BUGHUNTER_FLEET_SIZE - Number of agents in the bughunter fleet, set (String of a server-config value clamped ~5-20) when spawning the fleet; its presence also suppresses the "ccr" environment tag.
CCR_AGENT_PROXY_ENABLED - Boolean (Ue.bool getter); in a Claude Code Remote session, enables the agent proxy (git/gh credential shim) that unsets AGENT_PROXY_URL/AUTH_TOKEN.
CCR_SPAWN_TIMESTAMP_MS - Spawn epoch-ms timestamp (parseInt) used to compute Claude Code Remote startup latency metrics (spawn_to_first_checkpoint_ms, spawn_to_exec_ms, etc.); falls back to CLAUDE_CODE_SPAWN_TIMESTAMP_MS.
CLAUDECODE - Boolean (Ue.bool getter), set to "1" by the CLI to mark that a process is running inside Claude Code.
CLAUDE_AFK_COUNTDOWN_MS - Integer (Ue.int getter); ms threshold before the AFK timeout at which the countdown UI appears (default 20000, min'd with the timeout).
CLAUDE_AFK_TIMEOUT_MS - Integer (Ue.int getter); away-from-keyboard idle timeout in ms before onTimeout fires (default 60000).
CLAUDE_AGENTS_SELECT - String (Ue.str getter) carrying the agent(s) to preselect/auto-open in the FleetView "claude agents" UI; consumed then deleted from the env.
CLAUDE_AX_SCREEN_READER - Tri-state boolean (Ue.triBool getter); enables screen-reader-friendly flat-text output (no borders/animations), overridable by --ax-screen-reader; propagated to children as "1".
CLAUDE_BG_AUTH_SNAPSHOT_PATH - Path to a JSON auth-snapshot file read (then unlinked and unset) to restore credentials in a background session.
CLAUDE_BG_CLAIM_AUTH - String (Ue.str getter) auth token consumed (then deleted) to claim a background session's socket credentials.
CLAUDE_BG_ISOLATION - String (Ue.str getter) selecting background-task isolation mode; recognizes "worktree" or "none", else falls back to the job/config bgIsolation setting.
CLAUDE_BG_MEMORY_TOGGLED_OFF - Set to "1" together with CLAUDE_CODE_SESSION_KIND=="bg" to disable memory in the background session.
CLAUDE_BG_POST_CLEAR_RESPAWN - Boolean (Ue.bool getter) set to "1" when a background session respawns after a /clear (session id changed on retry attempt>1); relaxes --agent validation on respawn.
CLAUDE_BG_PTY_AUTH - Auth token gating DATA access to the background PTY host socket; read then deleted, and overridden by ptyAuth from CLAUDE_BG_SOCKET_TOKENS_PATH if present.
CLAUDE_BG_RENDEZVOUS_SOCK - Path to the background rendezvous Unix socket; when set (and not already serving) Claude creates the bg server on it; consumed and deleted after read.
CLAUDE_BG_RV_AUTH - Auth token for the background rendezvous socket; consumed and deleted after read, and overridden by rvAuth from the socket tokens file if provided.
CLAUDE_BG_SESSION_PERMISSION_RULES - JSON string of {allow:[],deny:[]} permission rules applied only when CLAUDE_CODE_SESSION_KIND==="bg"; parsed via JSON.parse and validated as arrays.
CLAUDE_BG_SOCKET_TOKENS_PATH - Path to a tokens file holding ptyAuth/rvAuth/claimAuth for bg sockets; read to hydrate those auth tokens then unlinked/deleted after read.
CLAUDE_BG_SOURCE - Source label recorded for bg-agent dispatch telemetry (defaults to "shell"); value "spare" also marks a spare-session REPL bridge.
CLAUDE_BG_STARTUP_WEDGE_MS - Milliseconds before the bg startup wedge timeout fires (read via ke.); defaults to 45000.
CLAUDE_BG_TCC_DISCLAIMED - macOS only; when set, Claude skips the TCC responsibility-disclaim relaunch step and deletes the var.
CLAUDE_BRIDGE_BASE_URL - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BRIDGE_OAUTH_TOKEN - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BRIDGE_REATTACH_OUTBOUND_ONLY - Boolean-truthy (ut()) flag marking a bridge reattach as outbound-only; read at reattach and deleted from the environment after read.
CLAUDE_BRIDGE_SESSION_INGRESS_URL - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BYTE_STREAM_IDLE_TIMEOUT_MS - Byte-stream idle timeout in ms (Number()); if finite and >0 it overrides the watchdog timeout, otherwise falls back to feature gate tengu_byte_stream_idle_timeout_ms.
CLAUDE_CHROME_CLASSIFIER_FLOOR - Boolean-truthy override enabling the Chrome auto-mode classifier floor; when unset falls back to feature gate tengu_cowork_chrome_automode_default (default false).
CLAUDE_CLIENT_PRESENCE_FILE - Path to a client-presence file; its existence is stat-checked to determine whether a client is present.
CLAUDE_CODE_ACT_DONT_REDERIVE - Boolean override for the "act don't re-derive" arm (read via ke.); when unset falls back to feature gate tengu_cedar_lantern (default true).
CLAUDE_CODE_AGENT - Agent name for the current session; set from the --agent option (process.env is assigned from it) and recorded in session metadata.
CLAUDE_CODE_AGENT_PROXY_GH_SHIM - Boolean-truthy (ke.); when set, writes a gh CLI shim pointing at the agent-proxy port.
CLAUDE_CODE_AGENT_PROXY_GIT_CONFIG - Boolean-truthy (ke.); when set, appends governed git config entries pointing at the agent-proxy port.
CLAUDE_CODE_ALT_SCREEN_FULL_REPAINT - Boolean-truthy; forces full repaint of the alternate screen buffer; defaulted to "1" on Windows/Windows Terminal.
CLAUDE_CODE_ARTIFACT - Boolean toggle for the artifact/frame feature; ut() enables it while Pl() (explicitly-off) disables it.
CLAUDE_CODE_ARTIFACTS_API_BASE_URL - String base-URL override for the Claude Code artifacts API; registered among provider base-URL env vars and stripped from spawned-subprocess environments (direct consumer not observed).
CLAUDE_CODE_ARTIFACT_AUTO_OPEN - When explicitly set (Pl()), suppresses auto-opening the artifact frame (telemetry reason "auto_open_skipped_env").
CLAUDE_CODE_ARTIFACT_DIRECT_UPLOAD - Boolean-truthy (ke.); enables the direct/inline artifact upload lane (also enabled by feature gate tengu_cobalt_plinth_direct).
CLAUDE_CODE_ASSUME_FIRST_PARTY_BASE_URL - Actual name has a leading underscore (CLAUDE_CODE_ASSUME_FIRST_PARTY_BASE_URL); boolean-truthy that forces the configured base URL to be treated as the Anthropic first-party endpoint (zc()).
CLAUDE_CODE_AUTH_FAIL_EXIT_MS - Threshold in ms after which a remote child session exits following continuous auth failure; default 600000, and <=0 disables the exit.
CLAUDE_CODE_AUTO_MODE_EXTERNAL_PERMISSIONS - [unverified] Registered as an env var in the auto-mode env registry; no consumer found in binary.
CLAUDE_CODE_AUTO_MODE_MODEL - [unverified] Registered as a string env var in the model-config env registry (alongside ANTHROPIC_MODEL); no consumer found in binary.
CLAUDE_CODE_BENCH_LIVE_COUNTS - Boolean-truthy; enables live-counts rendering in the Ink renderer (benchmarking instrumentation).
CLAUDE_CODE_BG_CLASSIFIER_MODEL - [unverified] Registered as a string env var in the model-config env registry (background classifier model); no consumer found in binary.
CLAUDE_CODE_BG_TASKS_REPORT_RUNNING - Boolean-truthy (ke.); when set, active teammates/running bg tasks/pending notifications keep the session reported as active (not idle).
CLAUDE_CODE_BRIDGE_SESSION_ID - Set by Claude Code to the current bridge/repl session id (exported for child processes) and deleted when there is no active session.
CLAUDE_CODE_BYOC_ENABLE_DATADOG - Boolean-truthy; in a BYOC environment (CLAUDE_CODE_ENVIRONMENT_KIND==="byoc") Datadog is disabled unless this flag is set.
CLAUDE_CODE_CHILD_SESSION - Set to "1" for child/nested sessions; read (ke.) to detect a child session for team-context and session-persistence decisions, and stripped from freshly spawned subprocess env.
CLAUDE_CODE_CLASSIFIER_SUMMARY - Selects classifier summary mode: when set truthy -> "llm", set falsy -> "heuristic", unset -> computed default; tengu_cobalt_wren gate can force "heuristic".
CLAUDE_CODE_COLD_COMPACT - Boolean-truthy (ut()); enables cold-compaction behavior in the auto-compaction path.
CLAUDE_CODE_COORDINATOR_EXTRA_TOOLS - Comma-separated list of extra tool names permitted for the CCR coordinator (split on ",", trimmed, empties filtered).
CLAUDE_CODE_COORDINATOR_MODE - Boolean-truthy; enables CCR coordinator mode (IA()); also set/cleared to "1" internally when switching session mode.
CLAUDE_CODE_DAEMON_COLD_START - Daemon cold-start mode; accepts "transient" or "ask" from the env, otherwise falls back to settings/default "transient".
CLAUDE_CODE_DD_ERROR_TRACKING_FLUSH_INTERVAL_MS - Datadog error-tracking log flush interval in ms; parseInt with default 30000 (30s)
CLAUDE_CODE_DESIGN_OAUTH_CLIENT_ID - Override the Claude Design OAuth client id (falls back to the build's DESIGN_CLIENT_ID; a placeholder 00000000- id means unconfigured)
CLAUDE_CODE_DEV_RAW_CHANGELOG_URL - [unverified] Registered as a string env var (Ue.str()); name implies a dev override for the raw CHANGELOG.md fetch URL, but no read site found (changelog fetch uses a hardcoded raw.githubusercontent.com/anthropics/claude-code URL)
CLAUDE_CODE_DISABLE_AGENT_VIEW - Disable the agent view UI; equivalent to the disableAgentView setting
CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN - Don't use the terminal alternate-screen buffer (also triggered when CLAUDE_CODE_NO_FLICKER===false)
CLAUDE_CODE_DISABLE_ARTIFACT - Disable the Artifact tool (read via ke.); equivalent to the disableArtifact setting
CLAUDE_CODE_DISABLE_BG_EXIT_HANDOFF - Disable handing off background shells/workflows/agents on exit (returns empty handoff state)
CLAUDE_CODE_DISABLE_BG_SHELL_PRESSURE_REAP - Disable reaping of idle background shells under memory/notification pressure
CLAUDE_CODE_DISABLE_BUNDLED_SKILLS - Hide bundled skills from the model (they stay typable); plugins, .claude/skills and .claude/commands unaffected; equivalent to the disableBundledSkills setting
CLAUDE_CODE_DISABLE_CLAUDE_CODE_SKILL - Skip registering the built-in Claude Code skill
CLAUDE_CODE_DISABLE_EXPLORE_PLAN_AGENTS - Disable the Explore/Plan agents; otherwise gated by tengu_slate_ibis feature flag
CLAUDE_CODE_DISABLE_LAUNCH_COMPOSER - [unverified] Registered env flag with no read site found; the launch-composer feature is stubbed off in this build (isLaunchComposerEnabled/shouldShowLaunchComposer return false)
CLAUDE_CODE_DISABLE_MEMORY_BULK_INFLATE - Disable bulk-inflate (exportAll) of memory stores during multi-store sync; also gated by tengu_memory_bulk_inflate flag
CLAUDE_CODE_DISABLE_MEMORY_PERIODIC_RESYNC - Disable periodic memory-store resync; when unset the interval comes from tengu_memory_store_resync_interval_minutes
CLAUDE_CODE_DISABLE_MOUSE_CLICKS - Disable mouse click handling while keeping scroll (mouse mode 'scroll' instead of 'full'); superseded by CLAUDE_CODE_DISABLE_MOUSE
CLAUDE_CODE_DISABLE_NESTED_CHAIN_IDLE - Disable nested-prompt-blocking idle notifications for nested agent chains
CLAUDE_CODE_DISABLE_NOTIFICATION_PRESENCE_CHECK - Skip the user-presence check before sending notifications (otherwise a present user suppresses them)
CLAUDE_CODE_DISABLE_REFUSAL_FALLBACK - Disable switching models as a fallback when the model refuses; otherwise also gated by the switchModelsOnFlag setting
CLAUDE_CODE_DISABLE_WORKFLOWS - Disable workflows; equivalent to the disableWorkflows setting; also gated by the allow_workflows permission
CLAUDE_CODE_DISABLE_WORKING_SYNC - Disable the synced-file syncer for remote SDK sessions (skips startSyncedFileSyncer)
CLAUDE_CODE_ENABLE_AUTO_MODE - Opt-in to enable Claude Code auto (permission) mode for third-party providers; first-party and anthropicAws are enabled automatically
CLAUDE_CODE_ENABLE_DESIGN_MCP - Enable the Claude Design MCP (http) server; when unset falls back to a feature-flag default
CLAUDE_CODE_ENABLE_DESIGN_SYNC - [unverified] Registered env flag included in the reported-metadata env allowlist; no functional read site found (companion to CLAUDE_CODE_ENABLE_DESIGN_MCP)
CLAUDE_CODE_ENABLE_FEEDBACK_SURVEY_FOR_OTEL - Allow the feedback survey to show even when OTEL/telemetry reporting is enabled
CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY - Enable gateway model discovery; requires first-party auth, non-Anthropic endpoint, and ANTHROPIC_BASE_URL set
CLAUDE_CODE_ENABLE_LAUNCH_COMPOSER - [unverified] Registered env flag with no read site found; the launch-composer feature is stubbed off in this build (isLaunchComposerEnabled/shouldShowLaunchComposer return false)
CLAUDE_CODE_ENABLE_MENU_KIND_LANES - Enable grouping menu entries into 'kind lanes'; otherwise gated by tengu_mint_lanes feature flag
CLAUDE_CODE_ENABLE_OPUS_4_7_FAST_MODE - [unverified] Registered env flag with no read site found; name implies enabling opus-4-7 fast mode (otherwise gated by tengu_sunset_penguin_opus47), but effect not wired in this build
CLAUDE_CODE_ENABLE_REMOTE_RECAP - Override remote recap; when unset defaults to the tengu_harbor_moth feature flag
CLAUDE_CODE_EXPERIMENTAL_OBSERVER_AGENTS - Truthy flag enabling observer agents; also requires background tasks not disabled and the tengu_observer_agents_enabled flag.
CLAUDE_CODE_FABLE_BRIDGE_DIALOG_TIMEOUT_MS - Timeout in ms for the Fable bridge dialog; uses the value when >0, otherwise defaults to 60000.
CLAUDE_CODE_FORCE_BRIDGE - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_CODE_FORCE_EVALUATE_MEMORY - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_CODE_FORCE_MEMORY_SURVEY - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_CODE_FORCE_MID_CONVERSATION_SYSTEM - When truthy, forces the mid_conversation_system prompting behavior on (bypasses the per-model/settings gating).
CLAUDE_CODE_FORCE_SESSION_PERSISTENCE - When set, forces session persistence by disabling the child-session logic that would otherwise skip persisting.
CLAUDE_CODE_FORCE_STRIKETHROUGH - When set, forces terminal strikethrough support to be treated as available.
CLAUDE_CODE_FORCE_SYNC_OUTPUT - When truthy, forces synchronized terminal output mode regardless of the detected terminal.
CLAUDE_CODE_FORCE_TIP_ID - When set (Boolean), forces a fixed spinner tip to display and suppresses normal tip rotation/clearing.
CLAUDE_CODE_FRAME_TIMING_SAMPLE_EVERY - Sample-every-N-frames interval for frame-timing logging; coerced via Math.max(1, value||1), default 1.
CLAUDE_CODE_GB_BASE_URL - [unverified] String env var (Ue.str) in the env schema, named for the GrowthBook (GB) feature-flag service base URL; no consuming code found in binary.
CLAUDE_CODE_GB_REFRESH_INTERVAL_MS - [unverified] Integer env var (Ue.int) in the env schema, named for the GrowthBook (GB) feature-flag refresh interval in ms; no consuming code found in binary.
CLAUDE_CODE_GZIP_REQUEST_BODIES - Enables gzip compression of API request bodies; defaults to the tengu_gzip_request_bodies feature flag (false).
CLAUDE_CODE_HFI_BEARER_TOKEN - [unverified] String env var (Ue.str) in the env schema, grouped with host/OAuth auth vars (HFI); no consuming code found in binary.
CLAUDE_CODE_HIDE_CWD - When set, hides the current working directory from the UI header line.
CLAUDE_CODE_HIDE_SETTINGS_HINT - When truthy, suppresses the settings hint shown on startup.
CLAUDE_CODE_HOST_AUTH_ENV_VAR - Names the env var holding the host-provided auth token (default ANTHROPIC_AUTH_TOKEN); its presence marks the session as managed-by-host.
CLAUDE_CODE_HOST_AUTH_REFRESH_TIMEOUT_MS - Timeout in ms (Number) for host auth token refresh; used when CLAUDE_CODE_SDK_HAS_HOST_AUTH_REFRESH is set.
CLAUDE_CODE_HOST_CREDS_FILE - Path to a host credentials file loaded when the provider is managed-by-host; must be absolute, <=65536 bytes, and (non-Windows) owner-only readable or it is ignored.
CLAUDE_CODE_INVESTIGATE_FIRST - Sets investigate-first mode ("additive"/"compact"/off; truthy maps to additive) for claude-opus-4-7 only; otherwise defaults to the tengu_slate_harrier flag.
CLAUDE_CODE_JSONL_TRANSCRIPT - [unverified] String env var (Ue.str) in the env schema; no consuming code found in binary.
CLAUDE_CODE_KB_COHESION_FIXES - Boolean flag (read via ke) enabling "KB cohesion fixes" (Z4 returns true when set), referenced from the keyboard-handling module.
CLAUDE_CODE_LOOP_KEEPALIVE - Truthy-enables autonomous-loop keepalive; otherwise defaults to the tengu_kairos_loop_keepalive flag.
CLAUDE_CODE_LOOP_PERSISTENT - Truthy-enables the persistent autonomous loop; otherwise defaults to the tengu_kairos_loop_persistent flag.
CLAUDE_CODE_MANAGED_SETTINGS_PATH - Path to managed (admin) settings; Claude Code sets it to the config dir when spawning host/sandbox child processes.
CLAUDE_CODE_MAX_TURNS - Max agentic turns; parsed as a positive integer (throws on non-positive/invalid); used as the fallback when not passed as an option.
CLAUDE_CODE_MCP_AUTO_BACKGROUND_MS - [unverified] Integer env var (Ue.int) in the env schema; no consuming code found in binary.
CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT - Idle timeout in ms for MCP tool responses before aborting; clamped to a min of 1000 and a per-tool max, with 0 disabling.
CLAUDE_CODE_MID_CONVERSATION_SYSTEM - [unverified] String env var (Ue.str) in the env schema (related to CLAUDE_CODE_FORCE_MID_CONVERSATION_SYSTEM); no consuming code found in binary.
CLAUDE_CODE_MOCK_REMOTE_SETTINGS - [unverified] Boolean env var listed in the remote-settings override group (alongside CLAUDE_CODE_REMOTE_SETTINGS_PATH) to mock remote settings value-read code not found in binary.
CLAUDE_CODE_MOCK_TRIAL - [unverified] Boolean env var (Ue.bool) in the env schema; no consuming code found in binary.
CLAUDE_CODE_NATIVE_CURSOR - Truthy-enables native cursor rendering; also on under accessibility mode; otherwise defaults to the tengu_native_cursor flag.
CLAUDE_CODE_OAUTH_401_WAIT_MS - Integer ms wait window for OAuth 401 recovery/retry; returns the set value, else 60000 when CLAUDE_CODE_REMOTE_SESSION_ID is set, else 0.
CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE - [unverified] Declared as a string env var (Ue.str) in the fast-mode model env group; no consuming read found in binary.
CLAUDE_CODE_OTEL_DIAG_STDERR - When truthy, writes OTEL diagnostic error messages to stderr; its presence also prevents stripping OTEL env vars from subprocesses.
CLAUDE_CODE_OVERRIDE_DATE - [unverified] Declared as a string env var (Ue.str); no consuming read found in binary.
CLAUDE_CODE_OWNERSHIP_FRAME - Arms the "ownership frame" experiment (source=env); otherwise gated by the tengu_walnut_prism feature flag.
CLAUDE_CODE_PACKAGE_MANAGER_AUTO_UPDATE - Boolean (ut); enables auto-updating Claude Code via the host package manager (homebrew/winget).
CLAUDE_CODE_PARKED_PERMISSION_WAIT_MS - Integer ms wait for parked-permission prefetch; defaults to 2000.
CLAUDE_CODE_PERFETTO_WRITE_INTERVAL_S - [unverified] Declared as an integer env var (Ue.int) in the Perfetto tracing env group; no consuming read found in binary.
CLAUDE_CODE_PEWTER_OWL - Master override for the "pewter_owl" experiment (header/tool/brief variants); if unset, falls back to model allowlist and tengu_pewter_owl* flags.
CLAUDE_CODE_PEWTER_OWL_TOOL - Override for the pewter_owl tool variant specifically; if unset, falls back to hro("pewter_owl_tool") gating.
CLAUDE_CODE_PLUGIN_BINARY_ASSETS - Enables plugin binary assets; if unset, gated by the tengu_plugin_binary_assets flag.
CLAUDE_CODE_PLUGIN_PREFER_HTTPS - Boolean (ut); prefers HTTPS over SSH for plugin git operations (also forced in remote mode).
CLAUDE_CODE_POWERSHELL_RESPECT_EXECUTION_POLICY - When unset/false, appends "-ExecutionPolicy Bypass" to PowerShell args; when truthy, respects the system execution policy.
CLAUDE_CODE_POWERUP_ONBOARDING - Selects the powerup onboarding arm; accepts "banner" or "step", else falls back to the tengu_birch_lantern flag ("off").
CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS - Max ms to wait for background tasks before terminating in print mode; default 600000, set 0 to wait indefinitely.
CLAUDE_CODE_PROACTIVE - Boolean (ut); enables proactive assistant mode.
CLAUDE_CODE_PROFILE_QUERY - Boolean (ut); enables query profiling (set =1; otherwise "Query profiling not enabled").
CLAUDE_CODE_PROPAGATE_TRACEPARENT - Boolean (ut); propagates the W3C traceparent header on outbound API requests.
CLAUDE_CODE_REMOTE_HERMETIC_MODE - With CLAUDE_CODE_REMOTE set, enables hermetic mode which filters/drops MCP servers.
CLAUDE_CODE_REMOTE_RAW_EVENTS_FILE - [unverified] Declared as a string env var (Ue.str) in the remote env group; no consuming read found in binary.
CLAUDE_CODE_REMOTE_SETTINGS_PATH - Path to a local override file for remote managed settings; when set, uses it and skips the API fetch.
CLAUDE_CODE_REMOTE_SETTINGS_POLL_MS - [unverified] Declared as an integer env var (Ue.int) in the remote-settings env group; no consuming read found in binary.
CLAUDE_CODE_RESUME_PROMPT - Custom prompt text used when resuming; defaults to "Continue from where you left off."
CLAUDE_CODE_SAFE_MODE - Boolean (ut) or --safe-mode flag; enables safe mode, forcing CLAUDE_CODE_DISABLE_CLAUDE_MDS=1 and dropping MCP servers.
CLAUDE_CODE_SDK_HAS_HOST_AUTH_REFRESH - Boolean (ut); when set and host-managed, registers an SDK host auth token refresh callback (timeout from CLAUDE_CODE_HOST_AUTH_REFRESH_TIMEOUT_MS).
CLAUDE_CODE_SESSION_ID - Holds the current session identifier; if set, it is regenerated to the new session id on a conversation_reset event.
CLAUDE_CODE_SESSION_KIND - Read directly; when equal to "bg", "daemon", or "daemon-worker" marks the session as a background/daemon session (rs()==="bg"), forcing alt-screen/flicker behavior and non-interactive paths.
CLAUDE_CODE_SESSION_LOG - Path recorded as logPath in session metadata where the session log is written.
CLAUDE_CODE_SESSION_NAME - Overrides the session name (used before falling back to a derived name).
CLAUDE_CODE_SHOJI_ENGINE - Boolean-truthy (ut()) that enables the internal "shoji engine"; otherwise falls back to GrowthBook flag tengu_shoji_engine (default false).
CLAUDE_CODE_SKILL_DESC_REFRAME - Boolean-truthy (via ke) enabling the skill-description-reframe arm; otherwise falls back to GrowthBook flag tengu_russet_linnet (default false).
CLAUDE_CODE_SKIP_HFI_VERSION_CHECK - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry alongside provider/proxy flags; no consumer/read site found in the binary.
CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS - Boolean env flag (Ue.bool()); when set, plugin-provided MCP servers are not launched (logged "(CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS is set)"), except those listed in CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT.
CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT - String env var (Ue.str()) listing plugin MCP servers exempted from CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS (logged "exempted via CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT").
CLAUDE_CODE_SKIP_PROJECT_BACKFILL - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_SKIP_REPO_UPLOAD - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_SPAWN_TIMESTAMP_MS - Integer spawn epoch-ms (parseInt); with CCR_SPAWN_TIMESTAMP_MS taking precedence, used to compute the spawn_to_first_checkpoint_ms telemetry metric.
CLAUDE_CODE_STOP_HOOK_BLOCK_CAP - Integer cap (parseInt, default 8) on how many consecutive Stop-hook blocks are allowed before the loop stops (only enforced when >0).
CLAUDE_CODE_SUBAGENT_CACHE_EVICT - Boolean-truthy (via ke) enabling evict-on-complete prompt-cache control for subagents (only for firstParty/anthropicAws); otherwise falls back to GrowthBook flag tengu_subagent_cache_evict (default false).
CLAUDE_CODE_SUPERVISED - Boolean-truthy (ut(), memoized); marks the process as supervised so uncaught exceptions/unhandled rejections are logged specially rather than exiting immediately.
CLAUDE_CODE_SUPPRESS_SESSION_ATTRIBUTION - Boolean env flag (via ke); when set, suppresses session-URL attribution (returns null instead of the session attribution info).
CLAUDE_CODE_SYNC_PLUGINS - Boolean-truthy (ut()) enabling synchronous plugin sync/reconcile at startup.
CLAUDE_CODE_SYNC_PLUGINS_BUFFERED_DOWNLOAD - Boolean env flag (via ke); when set, uses the buffered plugin-download code path (Otf) instead of the streaming/stall-guarded one.
CLAUDE_CODE_SYNC_PLUGINS_DOWNLOAD_STALL_MS - Integer ms (via ke) for the plugin-download stall timeout; defaults to 60000.
CLAUDE_CODE_SYNC_PLUGINS_INSTALL_TIMEOUT_MS - Integer ms (parseInt) plugin-sync install timeout; defaults to 30000 when unset or not >0.
CLAUDE_CODE_SYNC_PLUGINS_MCP_TIMEOUT_MS - Integer ms (parseInt) plugin-sync MCP timeout; used if finite and >=0, otherwise defaults to 10000.
CLAUDE_CODE_SYNC_SKILLS - Boolean-truthy (ut()) enabling synchronous skill sync/install.
CLAUDE_CODE_SYNC_SKILLS_INSTALL_TIMEOUT_MS - Integer ms (via ke) skill-sync install timeout; defaults to 30000 when unset or not >0.
CLAUDE_CODE_SYNC_SKILLS_WAIT_TIMEOUT_MS - Integer ms (via ke) to wait for skill sync; defaults to 5000 when unset or not >0.
CLAUDE_CODE_TAG_ISMETA_MESSAGES - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TEE_SDK_STDOUT - Boolean-truthy (ut()) that tees SDK transport stdout (sets teeStdout).
CLAUDE_CODE_TERMINAL_MCP_TOOLS - Comma-separated list of MCP tool names (split/trim/filter into a Set); tool_use of these tools is treated as terminal/end-turn content.
CLAUDE_CODE_TERMINAL_RECORDING - [unverified] Registered as a string env var (Ue.str()) in the typed env registry (grouped with recording/logging vars); no consumer/read site found in the binary.
CLAUDE_CODE_TEST_FORCE_DENY - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TEST_NO_GIT_BASH - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TEST_NO_PWSH - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TODO_REMINDER_MODE - String override (via ke) for the todo-reminder mode; when unset, mode comes from GrowthBook tengu_soft_slate_nudge ("off" or "baseline").
CLAUDE_CODE_TOTAL_TOKENS_REMINDER - Overrides the totalTokensReminder mode (off/infinite/fixed/countdown/padded-countdown) that emits a <total_tokens>N tokens left</total_tokens> block; else from settings or GrowthBook tengu_lapis_anchor (default "off").
CLAUDE_CODE_TOTAL_TOKENS_REMINDER_AFTER_USER_TURN - Overrides whether the total-tokens reminder is also emitted after each regular user prompt (re-anchoring padded-countdown); defaults off, server-controlled via GrowthBook tengu_lapis_anchor_user_turn.
CLAUDE_CODE_TOTAL_TOKENS_REMINDER_BUDGET - Overrides the starting budget (tokens) for totalTokensReminder 'padded-countdown' mode; defaults to 15000000, server-controlled via GrowthBook.
CLAUDE_CODE_TWO_STAGE_CLASSIFIER - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_USER_DIALOG_TIMEOUT_MS - Integer ms timeout (via ke) for user dialogs; defaults to 300000.
CLAUDE_CODE_USE_GATEWAY - Boolean (ut()); enables Cloud gateway provider mode requiring ANTHROPIC_BASE_URL and ANTHROPIC_AUTH_TOKEN; changes token-expiry message to "refresh ANTHROPIC_AUTH_TOKEN and restart".
CLAUDE_CODE_USE_NATIVE_FILE_SEARCH - [unverified] Boolean env (x3u=Ue.bool schema) registered in the env schema; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_CODE_VERIFY_PROMPT - Boolean (ut()); arms the verify-prompt feature (logs verify_prompt_arm_active source=env), otherwise gated by tengu_sparrow_ledger flag.
CLAUDE_CODE_VOICE_FORWARD_INTERIMS_TYPED - Boolean (ut()); when set, forwards interim typed voice-transcription results, otherwise gated by tengu_brick_follow flag.
CLAUDE_CODE_WEBFETCH_USE_CCR_PROXY - Truthy read (ke.); when firstParty provider and CCR active, routes the WebFetch tool through the CCR proxy (web-fetch route).
CLAUDE_CODE_WEBSEARCH_USE_CCR_PROXY - Truthy read (ke.); when firstParty provider and CCR active, routes the WebSearch tool through the CCR proxy (web-search route).
CLAUDE_CODE_WORKFLOWS - Boolean; when truthy (ut()) makes Workflows available gated by tengu_workflows_enabled (default true); when explicitly disabled (Pl()) marks Workflows unavailable.
CLAUDE_CONTEXT_COLLAPSE - [unverified] Boolean env (Vju=Ue.bool schema) in the model-config schema associated with the context-collapse feature (snapshots/commits/resets); only in name-list/getter, no consuming read found in binary.
CLAUDE_CONTEXT_COLLAPSE_MODEL - [unverified] String env (Gju=Ue.str schema) in the model-config schema, apparently a model override for the context-collapse feature; only in name-list/getter, no consuming read found in binary.
CLAUDE_COWORK_MEMORY_GUIDELINES - Guidelines text for auto memory; when set (with team memory enabled) prepends "# auto memory" guidelines and triggers memory_load_prompt.
CLAUDE_COWORK_MEMORY_INDEX_CONTENT - Provides auto-memory index content directly (parsed via FMp) instead of loading from disk; empty string ("") disables/skips the auto-memory index entry.
CLAUDE_DISABLE_ADOPT - Boolean (ke.); when set, disables adoption of detached background shell tasks (iKr returns !CLAUDE_DISABLE_ADOPT).
CLAUDE_ENABLE_BYTE_WATCHDOG_BEDROCK - Boolean (ut()); enables the byte-stream watchdog for the Bedrock provider (cGs gate feeding the overall watchdog eligibility check).
CLAUDE_GATEWAY_ALLOW_LOOPBACK - Boolean (ut()); when set, allows loopback/IPv4-mapped addresses in the gateway address validation (E0n).
CLAUDE_GATEWAY_LOG_LEVEL - Sets the gateway logger level (lowercased, looked up in level map S0n); defaults to "info" when unset or unrecognized.
CLAUDE_IMPORT_CONVERSATIONS - Boolean (ut()); gates the import-conversations feature (returns "import-conversations is not enabled" when unset).
CLAUDE_INTERNAL_ASSISTANT_TEAM_NAME - Sets the inherited assistant team name for the session; read once then deleted from process.env (stored via Xdr).
CLAUDE_INTERNAL_FC_OVERRIDES - Internal env key in the background-job providerEnv allowlist (VBr) that is captured from process.env and persisted/restored with jobs (alongside CLAUDE_CONFIG_DIR, AWS_, GOOGLE_); override target not further specified in binary.
CLAUDE_INTERNAL_WARM_RESUME_QA - [unverified] Boolean env (Mqu=Ue.bool schema) named for warm-resume QA; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_JOB_DIR - Directory for a background job/session; stores bg exit cause file, tmp files, and job state; basename used as jobId; validated under the config jobs/ dir for bg sessions.
CLAUDE_MEMORY_STORES - JSON config of memory stores (parsed; throws if invalid JSON); when non-empty enables team/persistent memory features and blocks default team memory dir.
CLAUDE_MOCK_HEADERLESS_429 - [unverified] Boolean env (MWu=Ue.bool schema) in the streaming/watchdog schema group, name implies mocking a headerless HTTP 429; only in name-list/getter, no consuming logic found in binary.
CLAUDE_PREVIEW_CLASSIFIER_FLOOR - Boolean (ke.CLAUDE_PREVIEW_CLASSIFIER_FLOOR??false); enables the "preview classifier floor" (previewClassifierFloorEnabled) alongside the cowork/chrome automode classifier settings.
CLAUDE_PROJECT_UUID - Trimmed project UUID; when set, used to fetch project context/knowledge (getProjectContextBlock) with a timeout.
CLAUDE_PTY_HEARTBEAT_MS - Integer (Number) PTY server heartbeat/ping interval in ms, default 60000 (non-Windows); missed pings (>=3) destroy the connection.
CLAUDE_PTY_HOST_EXEC - When "1", the PTY exec runs on the host; read once then deleted from process.env.
CLAUDE_PTY_ORPHAN_CHECK_MS - Integer (Number) interval in ms for the PTY orphan check, default 2000; after ~30 misses with no parent/connections it exits as orphaned.
CLAUDE_PTY_RECORD - Configures PTY session recording (passed to G1m with terminal dimensions); registered in the same group as CLAUDE_CODE_TERMINAL_RECORDING.
CLAUDE_REMOTE_WORKFLOW_ARGS - JSON args (ke.) for the remote (CCR) workflow script; JSON.parse'd, size-limited to 524288 bytes; errors reported as args-too-large/args-parse.
CLAUDE_REMOTE_WORKFLOW_SCRIPT - Shell/workflow script (ke.) delivered via env for a remote (CCR) session; deterministic entry point, validated (<=524288 bytes, no control chars); missing yields env-missing.
CLAUDE_RUNNER_ACTIVITY_FD - Integer file descriptor (>2, must be a pipe/socket per fstat) that the SDK runner uses to signal activity; ignored if not a FIFO/socket.
CLAUDE_RUNNER_DISABLE_AWAITING_ACTION_OVERRIDE - [unverified] Boolean env (B3u=Ue.bool schema) in the runner/disable schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_RUNNER_FETCH_DEPTH - [unverified] String env (x8u=Ue.str schema) in the runner schema group (name suggests a fetch/clone depth); only in name-list/getter, no consuming logic found in binary.
CLAUDE_SECURESTORAGE_CONFIG_DIR - Overrides the config dir used for secure storage of credentials (.oauth_token/.api_key/.session_ingress_token), NFC-normalized; forwarded to child processes.
CLAUDE_SERVE_DRAIN_TIMEOUT_MS - [unverified] Integer env (fju=Ue.int schema), name implies a serve-mode drain timeout in ms; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_SNIP - [unverified] String env (k8u=Ue.str schema); only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_SSH_LOCAL_BINARY - [unverified] String env (I8u=Ue.str schema) in the SSH-related schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_SSH_VERSION - [unverified] String env (H8u=Ue.str schema) in the SSH-related schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_STAGE_FILE_ROOT - Root directory (ke., must be an absolute path or it throws) for staging files synced/pushed to the remote workspace mount; unset falls back to DEFAULT_STAGE_FILE_ROOT and read-only mounts no-op.
CLAUDE_SUBAGENT_BG_SHELL_MAX_MS - Integer (parseInt) max runtime in ms for a subagent background shell; default 3600000 (1h).
CLAUDE_WORKFLOW_NAME_ONLY - Boolean (ke.); when set, restricts the Workflow tool to named bundled workflows only, throwing if a scriptPath workflow is requested.
CLOUDSDK_AUTH_ACCESS_TOKEN - Google Cloud SDK OAuth access token for Vertex AI auth; if it and GOOGLE_APPLICATION_CREDENTIALS are both unset, the proxy/bridge injects the placeholder value "proxy-injected".
COMSPEC - Windows command interpreter path; used as fallback after SHELL to detect the shell name.
DATABASE_URL - Read by a bundled library as a fallback database connection URL (env.DATABASE_URL||env.DATABASEURL); not part of Claude Code's own configuration.
DEBUG_CLAUDE_AGENT_SDK - When truthy, writes Agent SDK debug logs to a per-session file (debug/sdk-.txt).
DISABLE_BRIEF_MODE_STOP_HOOK - When truthy, disables the brief-mode Stop hook that runs after the main thread when brief mode and the brief tool are enabled.
DISABLE_GROWTHBOOK - Disables the GrowthBook feature-flag/experimentation service (V8() returns false when set); also blocks Remote Control.
DISABLE_PROMPT_CACHING_FABLE - Truthy value disables prompt caching for Fable models.
DISABLE_PROMPT_CACHING_MYTHOS - Disables prompt caching for Mythos models (checked via ke.DISABLE_PROMPT_CACHING_MYTHOS).
DISPLAY - X11 display; required for xclip/xsel clipboard on Linux and passed to child processes (defaulting to ":99" if unset).
DS_CHROMIUM_PATH - Custom Chromium executable path passed to Playwright's chromium.launch() when Chromium cannot otherwise be installed.
EMBEDDED_SEARCH_TOOLS - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_LOCKLESS_UPDATES - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_LSP_TOOL - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_PID_BASED_VERSION_LOCKING - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_SESSION_BACKGROUNDING - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_SESSION_PERSISTENCE - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consumer found (session-persistence gating in code uses TEST_ENABLE_SESSION_PERSISTENCE instead).
ENVIRONMENT_SERVICE_KEY - [unverified] Declared as a string in the OAuth/secrets env schema (Ue.str()); no consuming code found in the binary.
FORCE_VCR - [unverified] Registered as a boolean env-backed feature flag (R4u=Ue.bool()) alongside USE_API_* flags; name suggests VCR fixture replay (cf. VCR_RECORD) but no direct usage found in binary.
GCM_INTERACTIVE - For git subprocesses, Claude forces GCM_INTERACTIVE="never" when the user hasn't set it, disabling Git Credential Manager interactive prompts (k6t defaults).
GH_ENTERPRISE_TOKEN - GitHub Enterprise auth token; used (GH_ENTERPRISE_TOKEN||GITHUB_ENTERPRISE_TOKEN) when the target host matches GH_HOST for gh PR/auth lookups.
GH_HOST - Configured GitHub Enterprise host; NTr(process.env.GH_HOST,e) tests whether a host is the GHE host to select the enterprise token; also passed to gh shim.
GH_TOKEN - GitHub CLI auth token for github.com (GH_TOKEN||GITHUB_TOKEN); used for gh PR/auth lookups and set to "proxy-injected" placeholder when proxy handles auth.
GITHUB_ENTERPRISE_TOKEN - GitHub Enterprise auth token fallback (GH_ENTERPRISE_TOKEN||GITHUB_ENTERPRISE_TOKEN) for GHE hosts matching GH_HOST.
GIT_ASKPASS - For git subprocesses, Claude forces GIT_ASKPASS="" when the user hasn't set it to disable the interactive credential askpass helper (k6t defaults).
GIT_CONFIG_COUNT - Existing count of ad-hoc git config entries; read and extended (GIT_CONFIG_KEY_N/VALUE_N) to inject credential.interactive=false into git subprocesses.
GIT_CONFIG_GLOBAL - Path to the isolated global git config file; agent-proxy governed git config is written here, and the arm is skipped if unset (refuses to write a shared global config).
GIT_SSH_COMMAND - Set for git subprocesses to configure ssh (StrictHostKeyChecking, ControlMaster/Path disabled, nc/socat ProxyCommand) when routing through the agent proxy; user value preserved via ke.
GIT_TERMINAL_PROMPT - For git subprocesses, Claude forces GIT_TERMINAL_PROMPT="0" when the user hasn't set it, disabling interactive terminal credential prompts (k6t defaults).
GOOGLE_CLOUD_WORKSTATIONS - Boolean-truthy; presence detects a GCP Cloud Workstations environment (returns "gcp-cloud-workstations").
INK_SCREEN_READER - Boolean-truthy (ut); when set on a TTY, enables Ink screen-reader rendering mode (isScreenReaderEnabled).
INTELLIJ_TERMINAL_COMMAND_BLOCKS - Presence (defined) detects the JetBrains/IntelliJ terminal command-blocks feature, enabling related terminal handling (qNr sets jio=true).
INTELLIJ_TERMINAL_COMMAND_BLOCKS_REWORKED - Presence (defined) detects the reworked IntelliJ terminal command-blocks feature, enabling related terminal handling (qNr sets jio=true).
JAVA_HOME - Java installation root; JAVA_HOME/bin/keytool is used to locate the keytool binary for reading the Java CA truststore.
JAVA_TOOL_OPTIONS - Read when building sandbox subprocess env under weaker network isolation; appends -Djava.net.preferIPv4Stack=true to JAVA_TOOL_OPTIONS.
MCP_CONNECT_TIMEOUT_MS - MCP server connect timeout in ms; read as int via ke.MCP_CONNECT_TIMEOUT_MS, used if >0 else default 5000
NODE_USE_ENV_PROXY - Truthy flag read by shouldUseEnvProxy(); false when unset/"0", otherwise makes Node's built-in fetch honor http(s)proxy env vars (Node >=22.21)
OTEL_EXPORTER_OTLP_LOGS_ENDPOINT - Logs-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP{LOGS}ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_EXPORTER_OTLP_METRICS_ENDPOINT - Metrics-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP{METRICS}ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_EXPORTER_OTLP_TRACES_ENDPOINT - Traces-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP{TRACES}_ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_LOG_ASSISTANT_RESPONSES - Tri-state boolean (ke.OTEL_LOG_ASSISTANT_RESPONSES); when truthy logs assistant response text in telemetry (else redacted), falling back to OTEL_LOG_USER_PROMPTS
OTEL_RESOURCE_ATTRIBUTES - Standard OTEL resource attributes (key=value list) parsed by the SDK EnvDetector into resource attributes; also registered as a string in the env registry
PLAYWRIGHT_BROWSERS_PATH - [unverified] Declared as a string in the typed env registry (Ue.str, read via ke.PLAYWRIGHT_BROWSERS_PATH); no consumer found in the binary
SCREENSHOT_DIR - Directory where the bundled app-driving helper script saves screenshots; read via ||, default '/tmp/shots'
SDK_NATIVE_BIN - Base name of the native SDK binary used when locating/launching the per-platform executable (linux/darwin/android/win32, .exe/-musl variants); read via ??, default 'claude'
SRT_WIN_PATH - Override path to the sandbox-runtime Windows binary (srt-win.exe); if set and the file exists it is used, otherwise vendor srt-win dirs are searched
SSH_AUTH_SOCK - SSH agent socket path; its absence (together with GIT_SSH_COMMAND unset) is checked to gate git/GitHub SSH auth behavior
TEMP - Windows-style temp dir; third fallback in Node os.tmpdir() chain (TMPDIR || TMP || TEMP || '/tmp')
TMP - Temp dir; second fallback in Node os.tmpdir() chain (TMPDIR || TMP || TEMP || '/tmp')
TMPDIR - Primary temp directory; first in Node os.tmpdir() chain and forwarded into the env of spawned bash subprocesses
ULTRAPLAN_PROMPT_FILE - [unverified] String env var (Ue.str()) registered in the env registry (Ultraplan/workflow family); no direct read found in binary; name implies a file supplying the Ultraplan prompt
USE_API_CLEAR_TOOL_RESULTS - [unverified] Boolean env flag (Ue.bool()) registered alongside USE_API_CONTEXT_MANAGEMENT; no consumption found in binary; name implies gating API context-editing to clear tool results
USE_API_CLEAR_TOOL_USES - [unverified] Boolean env flag (Ue.bool()) registered alongside USE_API_CONTEXT_MANAGEMENT; no consumption found in binary; name implies gating API context-editing clear_tool_uses
WAYLAND_DISPLAY - Wayland display; presence selects wl-copy for Linux clipboard and, when absent with DISPLAY unset, marks a headless Linux session

Removed (5):

CCR_UPSTREAM_PROXY_ENABLED - Enable upstream proxy for Claude Code Remote. Requires CLAUDE_CODE_REMOTE and CLAUDE_CODE_REMOTE_SESSION_ID
CLAUDE_CODE_AGENT_COST_STEER - Override agent cost-based steering. Defaults based on subscription tier (pro/max) via feature flag
CLAUDE_CODE_AGENT_LIST_IN_MESSAGES - Override whether the agent list is attached to messages. Defaults to tengu_agent_list_attach feature flag
CLAUDE_CODE_TEAM_ONBOARDING - Enable the team-onboarding command. Also gated by tengu_flint_harbor feature flag
CLOUD_WORKSTATIONS_CLUSTER_ID - Google Cloud Workstations cluster ID. Used for platform detection