Claude Code CLI Environment Variables

# Claude Code CLI Environment Variables
# This file lists all environment variables used in v2.1.202 with explanations

## Anthropic API & Authentication

ANTHROPIC_API_KEY - Primary API key for Anthropic's Claude API; used as an auth source (source "ANTHROPIC_API_KEY") when no OAuth token is configured
ANTHROPIC_AUTH_TOKEN - Alternative bearer token for Anthropic services; sent as Authorization: Bearer and takes priority over ANTHROPIC_API_KEY, also used with gateway mode
ANTHROPIC_BASE_URL - Custom base URL for the Anthropic API; overrides the default api.anthropic.com endpoint (a non-api.anthropic.com host marks the client as non-first-party)
ANTHROPIC_BETAS - Comma-separated list of beta feature headers appended (trimmed, non-empty) to the internal beta flags on API requests
ANTHROPIC_CUSTOM_HEADERS - Custom HTTP headers for API requests, parsed as newline-separated "Key: Value" pairs
ANTHROPIC_FEDERATION_RULE_ID - Federation rule ID for OIDC federation (env-quad) auth mode; shown in the auth-mode "rule" descriptor
ANTHROPIC_ORGANIZATION_ID - Organization ID for OIDC federation (env-quad) auth mode; shown in the auth-mode "org" descriptor
ANTHROPIC_PROFILE - Explicit profile name to use from the credentials file; trimmed, defaults to "default"
ANTHROPIC_UNIX_SOCKET - Unix socket path for Anthropic API connections (Bun); when set, the request uses this socket and gates OAuth-token-based auth behavior
ANTHROPIC_WORKSPACE_ID - Workspace ID for federation rules scoped to multiple workspaces (env-quad auth); alternative to the 'workspace_id' config key / workspaceId option
CLAUDE_CODE_ADDITIONAL_PROTECTION - Boolean-truthy; adds the x-anthropic-additional-protection: true header to API requests.
CLAUDE_CODE_API_BASE_URL - Base URL for the Anthropic Files API; ANTHROPIC_BASE_URL takes precedence, then CLAUDE_CODE_API_BASE_URL, else https://api.anthropic.com.
CLAUDE_CODE_API_KEY_FILE_DESCRIPTOR - File descriptor to read the API key from; presence affects auth source selection and is surfaced in auth diagnostics.
CLAUDE_CODE_API_KEY_HELPER_TTL_MS - TTL in milliseconds for the apiKeyHelper credential cache; parsed with parseInt and must be a valid number >= 0, else warns and ignored.
CLAUDE_CODE_ASSUME_FIRST_PARTY_BASE_URL - Actual name has a leading underscore (_CLAUDE_CODE_ASSUME_FIRST_PARTY_BASE_URL); boolean-truthy that forces the configured base URL to be treated as the Anthropic first-party endpoint (zc()).
CLAUDE_CODE_ATTRIBUTION_HEADER - Controls the attribution/User-Agent header string on API requests; when explicitly disabled (Pl(), e.g. "0") the header is emptied.
CLAUDE_CODE_DISABLE_NONSTREAMING_FALLBACK - Disable fallback from streaming to non-streaming API mode; also gated by tengu_disable_streaming_to_non_streaming_fallback flag
CLAUDE_CODE_EXTRA_BODY - JSON object spread into the API request body; an anthropic_beta array is merge-deduplicated with built-in beta headers; must be a plain object (arrays/primitives rejected with an error log).
CLAUDE_CODE_EXTRA_METADATA - JSON object merged into API request metadata (combined with device_id/account_uuid/session_id); must be a plain object, else rejected with an error log.
CLAUDE_CODE_GZIP_REQUEST_BODIES - Enables gzip compression of API request bodies; defaults to the tengu_gzip_request_bodies feature flag (false).
CLAUDE_CODE_MAX_RETRIES - Maximum API request retries (parseInt, >=0); warns if set above the built-in cap.
CLAUDE_CODE_OAUTH_TOKEN - OAuth access token for authentication; auth source checked after ANTHROPIC_AUTH_TOKEN in priority order.
CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR - File descriptor number to read the OAuth token from (reported as source CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR).
CLAUDE_CODE_ORGANIZATION_UUID - Pre-set organization UUID, bypassing OAuth profile lookup; also sent as the X-Organization-Uuid header.
CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST - Boolean (ut); indicates the API provider/auth is managed by the host, altering auth checks and disabling Bedrock model upgrades.
CLAUDE_CODE_RATE_LIMIT_TIER - Rate limit tier for the OAuth session; used with CLAUDE_CODE_OAUTH_TOKEN.
CLAUDE_CODE_SESSION_ACCESS_TOKEN - Session-specific access token; sk-ant-sid tokens are sent as a sessionKey cookie, otherwise as Bearer auth.

## Model Configuration

ANTHROPIC_CUSTOM_MODEL_OPTION - Custom model ID added to the model selector dropdown; accepted as valid without a server probe during model validation
ANTHROPIC_CUSTOM_MODEL_OPTION_DESCRIPTION - Description text for the custom model option; falls back to "Custom model ({MODEL_ID})"
ANTHROPIC_CUSTOM_MODEL_OPTION_NAME - Display name (label) for the custom model option in the model selector; falls back to the model ID
ANTHROPIC_DEFAULT_FABLE_MODEL - Override the default Fable model ID; falls back to Fable 5, and enables the custom "fable" selector entry on first-party/gateway providers
ANTHROPIC_DEFAULT_FABLE_MODEL_DESCRIPTION - Description text for the custom Fable model override; falls back to "Custom Fable model"
ANTHROPIC_DEFAULT_FABLE_MODEL_NAME - Display name (label) for the custom Fable model override in the model selector; falls back to the model ID
ANTHROPIC_DEFAULT_HAIKU_MODEL - Override the default Haiku model ID (used for non-first-party providers); falls back to Haiku 4.5
ANTHROPIC_DEFAULT_HAIKU_MODEL_DESCRIPTION - Description text for the custom Haiku model override; falls back to "Custom Haiku model"
ANTHROPIC_DEFAULT_HAIKU_MODEL_NAME - Display name (label) for the custom Haiku model override; falls back to the model ID
ANTHROPIC_DEFAULT_OPUS_MODEL - Override the default Opus model ID; falls back to Opus 4.8
ANTHROPIC_DEFAULT_OPUS_MODEL_DESCRIPTION - Description text for the custom Opus model override; falls back to "Custom Opus model" (adds "1M context" when the model supports it)
ANTHROPIC_DEFAULT_OPUS_MODEL_NAME - Display name (label) for the custom Opus model override; falls back to the model ID
ANTHROPIC_DEFAULT_SONNET_MODEL - Override the default Sonnet model ID; falls back to Sonnet 4.6 (provider-dependent)
ANTHROPIC_DEFAULT_SONNET_MODEL_DESCRIPTION - Description text for the custom Sonnet model override; falls back to "Custom Sonnet model" (adds "1M context" when supported)
ANTHROPIC_DEFAULT_SONNET_MODEL_NAME - Display name (label) for the custom Sonnet model override; falls back to the model ID
ANTHROPIC_MODEL - Override the default Claude model; settable via CLI flag, env var, or settings file and validated against known model IDs
ANTHROPIC_SMALL_FAST_MODEL - Override the small/fast model used for quick operations (e.g. summarization); defaults to the Haiku model
CLAUDE_CODE_ALWAYS_ENABLE_EFFORT - Boolean-truthy; forces effort-level support on regardless of the per-model capability check (which otherwise excludes older claude-3/4-0/4-1/sonnet-4-5/haiku-4-5 models).
CLAUDE_CODE_AUTO_MODE_MODEL - [unverified] Registered as a string env var in the model-config env registry (alongside ANTHROPIC_MODEL); no consumer found in binary.
CLAUDE_CODE_BG_CLASSIFIER_MODEL - [unverified] Registered as a string env var in the model-config env registry (background classifier model); no consumer found in binary.
CLAUDE_CODE_DISABLE_1M_CONTEXT - Disable 1M-token context support; suppresses [1m] model variants and native_1m context
CLAUDE_CODE_DISABLE_ADAPTIVE_THINKING - Disable adaptive thinking; only takes effect for opus-4-6/sonnet-4-6 models, falling back to fixed-budget thinking
CLAUDE_CODE_DISABLE_FAST_MODE - Disable fast mode (first-party only)
CLAUDE_CODE_DISABLE_LEGACY_MODEL_REMAP - Disable legacy model-name remapping
CLAUDE_CODE_DISABLE_REFUSAL_FALLBACK - Disable switching models as a fallback when the model refuses; otherwise also gated by the switchModelsOnFlag setting
CLAUDE_CODE_DISABLE_THINKING - Disable extended thinking entirely
CLAUDE_CODE_EFFORT_LEVEL - Set reasoning effort level; accepted values low, medium (alias 'med'), high, xhigh, max; 'auto'/'unset' clears it and it overrides the session's effort from settings/ultracode
CLAUDE_CODE_ENABLE_OPUS_4_7_FAST_MODE - [unverified] Registered env flag with no read site found; name implies enabling opus-4-7 fast mode (otherwise gated by tengu_sunset_penguin_opus47), but effect not wired in this build
CLAUDE_CODE_FORCE_MID_CONVERSATION_SYSTEM - When truthy, forces the mid_conversation_system prompting behavior on (bypasses the per-model/settings gating).
CLAUDE_CODE_INVESTIGATE_FIRST - Sets investigate-first mode ("additive"/"compact"/off; truthy maps to additive) for claude-opus-4-7 only; otherwise defaults to the tengu_slate_harrier flag.
CLAUDE_CODE_MAX_OUTPUT_TOKENS - Maximum output tokens for responses; validated against a per-model upper limit.
CLAUDE_CODE_MID_CONVERSATION_SYSTEM - [unverified] String env var (Ue.str) in the env schema (related to CLAUDE_CODE_FORCE_MID_CONVERSATION_SYSTEM); no consuming code found in binary.
CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE - [unverified] Declared as a string env var (Ue.str) in the fast-mode model env group; no consuming read found in binary.
CLAUDE_CODE_SUBAGENT_MODEL - Forces a specific model for all sub-agent/teammate operations (value "inherit" is ignored); overrides normal model selection.
DISABLE_INTERLEAVED_THINKING - When truthy, disables the interleaved-thinking beta for supporting models.
DISABLE_PROMPT_CACHING - Truthy value disables prompt caching for all models.
DISABLE_PROMPT_CACHING_FABLE - Truthy value disables prompt caching for Fable models.
DISABLE_PROMPT_CACHING_HAIKU - Truthy value disables prompt caching for the Haiku model.
DISABLE_PROMPT_CACHING_MYTHOS - Disables prompt caching for Mythos models (checked via ke.DISABLE_PROMPT_CACHING_MYTHOS).
DISABLE_PROMPT_CACHING_OPUS - Truthy value disables prompt caching for the Opus model.
DISABLE_PROMPT_CACHING_SONNET - Truthy value disables prompt caching for the Sonnet model.
ENABLE_PROMPT_CACHING_1H - Truthy value enables 1-hour prompt caching (across providers); also requires not being on overage.
FALLBACK_FOR_ALL_PRIMARY_MODELS - When set, enables fallback-model behavior for all primary models (not just specific ones) on overload.
FORCE_PROMPT_CACHING_5M - Boolean-truthy (ut); when set, RVe() returns false to force 5-minute prompt-cache TTL and skip 1-hour caching (ENABLE_PROMPT_CACHING_1H).
MAX_STRUCTURED_OUTPUT_RETRIES - Max retries when re-prompting for structured output; parseInt(process.env...||"5",10), default 5
MAX_THINKING_TOKENS - Extended-thinking token budget; parsed as int, if >0 enables thinking with that fixed budget (overrides settings/adaptive), 0 disables

## Provider: AWS Bedrock

ANTHROPIC_BEDROCK_BASE_URL - Custom endpoint for Bedrock; passed as endpoint to the Bedrock client, defaults to https://bedrock-runtime.{region}.amazonaws.com
ANTHROPIC_BEDROCK_SERVICE_TIER - When set, sent as the X-Amzn-Bedrock-Service-Tier header on Bedrock requests and shown as "Bedrock service tier" in provider diagnostics
ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION - AWS region for the small/fast (haiku) model on Bedrock; used in place of the general region when the haiku model differs from the main model
AWS_ACCESS_KEY_ID - AWS access key (with AWS_SECRET_ACCESS_KEY) used for Bedrock SigV4 authentication and AWS credential detection
AWS_BEARER_TOKEN_BEDROCK - Bearer token for Bedrock; when set, skips SigV4 signing and sends Authorization: Bearer instead
AWS_CONFIG_FILE - Standard AWS SDK config-file path; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_CONTAINER_CREDENTIALS_FULL_URI - Standard AWS SDK container-credentials URI; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_CONTAINER_CREDENTIALS_RELATIVE_URI - Standard AWS SDK relative container-credentials URI; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_DEFAULT_REGION - Fallback AWS region used when AWS_REGION is unset; feeds Bedrock region resolution
AWS_LOGIN_CACHE_DIRECTORY - Directory for the AWS SSO login token cache; defaults to ~/.aws/login/cache (os.homedir()) when unset.
AWS_PROFILE - AWS named profile used as the default for AWS SDK credential/region config resolution (loadConfig).
AWS_REGION - AWS region for Bedrock/AWS SDK requests; falls back to AWS_DEFAULT_REGION.
AWS_ROLE_ARN - Standard AWS SDK var; ARN of the IAM role assumed via AssumeRoleWithWebIdentity (paired with AWS_WEB_IDENTITY_TOKEN_FILE); also a "proxy-injected" placeholder gate for the agent proxy.
AWS_SECRET_ACCESS_KEY - AWS secret access key for Bedrock/SDK auth, used together with AWS_ACCESS_KEY_ID and AWS_SESSION_TOKEN.
AWS_SESSION_TOKEN - AWS session token for temporary credentials.
AWS_SHARED_CREDENTIALS_FILE - Standard AWS SDK var; path to the shared credentials file for credential resolution; its presence also gates agent-proxy AWS placeholder injection.
AWS_WEB_IDENTITY_TOKEN_FILE - Standard AWS SDK var; path to the web-identity token file used with AWS_ROLE_ARN for AssumeRoleWithWebIdentity credential resolution.
CLAUDE_CODE_SKIP_BEDROCK_AUTH - Boolean-truthy; skips AWS credential resolution for Bedrock (uses no signed AWS auth).
CLAUDE_CODE_USE_BEDROCK - Boolean (ut()) provider selector; routes all API calls through AWS Bedrock (getAPIProvider returns "bedrock"), enables Bedrock-specific model-id error handling.
CLAUDE_ENABLE_BYTE_WATCHDOG_BEDROCK - Boolean (ut()); enables the byte-stream watchdog for the Bedrock provider (cGs gate feeding the overall watchdog eligibility check).
ENABLE_PROMPT_CACHING_1H_BEDROCK - On Bedrock, a truthy value enables 1-hour prompt caching.

## Provider: Bedrock Mantle

ANTHROPIC_BEDROCK_MANTLE_BASE_URL - Custom base URL for the Bedrock Mantle endpoint; defaults to https://bedrock-mantle.{region}.api.aws
CLAUDE_CODE_SKIP_MANTLE_AUTH - Boolean-truthy; skips Amazon Bedrock (Mantle) authentication (no AWS credential resolution).
CLAUDE_CODE_USE_MANTLE - Boolean (ut()) provider selector; routes API calls through Bedrock Mantle (getAPIProvider returns "mantle"; when Bedrock+Mantle, model routing uses "mantle").

## Provider: Anthropic AWS

ANTHROPIC_AWS_API_KEY - API key for the Claude-Platform-on-AWS (anthropicAws) provider; if absent falls back to AWS credential chain (temporarily deleted from env while constructing the SDK client)
ANTHROPIC_AWS_BASE_URL - Custom base URL for the Claude-Platform-on-AWS provider; defaults to https://aws-external-anthropic.{region}.api.aws
ANTHROPIC_AWS_WORKSPACE_ID - Workspace ID for the Claude-Platform-on-AWS provider; shown as "Workspace ID" in provider config diagnostics
CLAUDE_CODE_SKIP_ANTHROPIC_AWS_AUTH - Boolean-truthy; skips Claude-Platform-on-AWS (anthropicAws) authentication, sending no Authorization/using skipAuth.
CLAUDE_CODE_USE_ANTHROPIC_AWS - Boolean (ut()) provider selector; routes API calls through the Anthropic AWS service (getAPIProvider returns "anthropicAws"), suppresses OAuth/login and error reporting.

## Provider: Google Vertex AI

ANTHROPIC_VERTEX_BASE_URL - Custom base URL for the Vertex AI endpoint; defaults to the region-derived Vertex URL
ANTHROPIC_VERTEX_PROJECT_ID - GCP project ID for Vertex AI calls (ignored if GOOGLE/GCP project or credentials env vars are set)
CLAUDE_CODE_SKIP_VERTEX_AUTH - Boolean-truthy; skips GCP authentication for Vertex AI (does not build Google auth).
CLAUDE_CODE_USE_VERTEX - Boolean (ut()) provider selector; routes all API calls through Google Vertex AI (getAPIProvider returns "vertex"; "global" region affects endpoint resolution).
CLOUDSDK_AUTH_ACCESS_TOKEN - Google Cloud SDK OAuth access token for Vertex AI auth; if it and GOOGLE_APPLICATION_CREDENTIALS are both unset, the proxy/bridge injects the placeholder value "proxy-injected".
CLOUDSDK_CONFIG - Google Cloud SDK configuration directory (defaults to APPDATA or HOME/.config/gcloud); scanned for gcloud configurations.
CLOUD_ML_REGION - Default GCP region for Vertex AI; defaults to "us-east5".
DETECT_GCP_RETRIES - Number of retries for GCP metadata-server detection; parsed via Number(), defaults to 0.
GCE_METADATA_HOST - Overrides GCE metadata server hostname for GCP auth (Xeo: GCE_METADATA_IP||GCE_METADATA_HOST||default HOST_ADDRESS); presence also skips the BIOS residency probe.
GCE_METADATA_IP - Overrides GCE metadata server IP for GCP auth, taking precedence over GCE_METADATA_HOST; presence also skips the BIOS residency probe.
GCLOUD_PROJECT - Legacy GCP project ID; first in the resolution chain (GCLOUD_PROJECT||GOOGLE_CLOUD_PROJECT||gcloud_project||google_cloud_project) for Vertex project.
GOOGLE_APPLICATION_CREDENTIALS - Path to GCP service-account credentials JSON (GOOGLE_APPLICATION_CREDENTIALS||google_application_credentials); used for Vertex/ADC auth and to gate proxy credential injection.
GOOGLE_CLOUD_PROJECT - GCP project ID in the Vertex project resolution chain (GCLOUD_PROJECT||GOOGLE_CLOUD_PROJECT||...); presence also used to detect "gcp" platform.
GOOGLE_CLOUD_QUOTA_PROJECT - GCP quota/billing project applied as quotaProjectId on the resolved ADC credential (defaults to null).
METADATA_SERVER_DETECTION - Controls GCP metadata-server detection mode (google-auth-library); trimmed/lowercased and validated against allowed METADATA_SERVER_DETECTION values, throws on unknown

## Provider: Microsoft Foundry

ANTHROPIC_FOUNDRY_API_KEY - API key for Microsoft Foundry auth; if absent falls back to Azure DefaultAzureCredential (unless CLAUDE_CODE_SKIP_FOUNDRY_AUTH)
ANTHROPIC_FOUNDRY_BASE_URL - Custom base URL for the Microsoft Foundry API endpoint; shown as "Microsoft Foundry base URL" in provider diagnostics
ANTHROPIC_FOUNDRY_RESOURCE - Microsoft Foundry resource identifier; shown as "Microsoft Foundry resource" in provider diagnostics
CLAUDE_CODE_SKIP_FOUNDRY_AUTH - Boolean-truthy; skips Microsoft Foundry auth by using an empty bearer-token provider (when ANTHROPIC_FOUNDRY_API_KEY is unset).
CLAUDE_CODE_USE_FOUNDRY - Boolean (ut()) provider selector; routes all API calls through Microsoft Foundry (getAPIProvider returns "foundry").

## OAuth & Login

CLAUDE_CODE_ACCOUNT_UUID - Pre-set account UUID used in place of the OAuth account lookup (combined with CLAUDE_CODE_USER_EMAIL and CLAUDE_CODE_ORGANIZATION_UUID).
CLAUDE_CODE_CUSTOM_OAUTH_URL - Custom OAuth base URL; must be in the approved endpoints list (ALLOWED_OAUTH_BASE_URLS) or Claude throws, and it tags the OAuth mode as "-custom-oauth".
CLAUDE_CODE_DESIGN_OAUTH_CLIENT_ID - Override the Claude Design OAuth client id (falls back to the build's DESIGN_CLIENT_ID; a placeholder 00000000- id means unconfigured)
CLAUDE_CODE_HFI_BEARER_TOKEN - [unverified] String env var (Ue.str) in the env schema, grouped with host/OAuth auth vars (HFI); no consuming code found in binary.
CLAUDE_CODE_HOST_AUTH_ENV_VAR - Names the env var holding the host-provided auth token (default ANTHROPIC_AUTH_TOKEN); its presence marks the session as managed-by-host.
CLAUDE_CODE_HOST_AUTH_REFRESH_TIMEOUT_MS - Timeout in ms (Number) for host auth token refresh; used when CLAUDE_CODE_SDK_HAS_HOST_AUTH_REFRESH is set.
CLAUDE_CODE_HOST_CREDS_FILE - Path to a host credentials file loaded when the provider is managed-by-host; must be absolute, <=65536 bytes, and (non-Windows) owner-only readable or it is ignored.
CLAUDE_CODE_OAUTH_401_WAIT_MS - Integer ms wait window for OAuth 401 recovery/retry; returns the set value, else 60000 when CLAUDE_CODE_REMOTE_SESSION_ID is set, else 0.
CLAUDE_CODE_OAUTH_CLIENT_ID - Custom OAuth client ID; overrides the default CLIENT_ID for login and refresh-token flows.
CLAUDE_CODE_OAUTH_REFRESH_TOKEN - OAuth refresh token used to obtain access tokens at startup; requires CLAUDE_CODE_OAUTH_SCOPES to be set.
CLAUDE_CODE_OAUTH_SCOPES - Whitespace-separated OAuth scopes to request; defaults to ["user:inference"] when unset/empty.
CLAUDE_CODE_SUBSCRIPTION_TYPE - Overrides the OAuth session subscriptionType (set from bg auth snapshot or used with CLAUDE_CODE_OAUTH_TOKEN).
CLAUDE_CODE_USER_EMAIL - Pre-sets the user email (used with CLAUDE_CODE_ACCOUNT_UUID and CLAUDE_CODE_ORGANIZATION_UUID) to seed the OAuth account, bypassing lookup.
CLAUDE_LOCAL_OAUTH_API_BASE - Local-dev OAuth API base URL (trailing slash stripped), default http://localhost:8000; used to build BASE_API_URL.
CLAUDE_LOCAL_OAUTH_APPS_BASE - Local-dev OAuth apps base URL (trailing slash stripped), default http://localhost:4000; used to build the claude.ai authorize URL.
CLAUDE_LOCAL_OAUTH_CONSOLE_BASE - Local-dev OAuth console base URL (trailing slash stripped), default http://localhost:3000; used to build the console authorize URL.
CLAUDE_TRUSTED_DEVICE_TOKEN - Pre-set trusted device token; when set it takes precedence and skips proactive trusted-device enrollment.
ENVIRONMENT_SERVICE_KEY - [unverified] Declared as a string in the OAuth/secrets env schema (Ue.str()); no consuming code found in the binary.
USE_LOCAL_OAUTH - Truthy flag (ut()); routes the Chrome bridge to local ws://localhost:8765 (dev), also treated like LOCAL_BRIDGE
USE_STAGING_OAUTH - Truthy flag (ut()); routes the Chrome bridge to wss://bridge-staging.claudeusercontent.com (staging)

## Core Settings

ANTHROPIC_CONFIG_DIR - Override for the Anthropic config directory; falls back to XDG_CONFIG_HOME/anthropic, then HOME/.config/anthropic
API_TIMEOUT_MS - API request timeout in milliseconds; primary client default 600000 (10 min), shown in timeout error messages with a suggestion to increase it
CLAUBBIT - Boolean (Ue.bool getter) flagging Claubbit mode (reported as isClaubbit in telemetry; skips the trust dialog).
CLAUDE_CODE_DISABLE_FILE_CHECKPOINTING - Disable file checkpointing (undo/restore); also gated by the fileCheckpointingEnabled setting
CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC - Restrict network to essential traffic only (returns 'essential-traffic' mode, disabling feature-flag fetches/telemetry)
CLAUDE_CODE_DISABLE_NOTIFICATION_PRESENCE_CHECK - Skip the user-presence check before sending notifications (otherwise a present user suppresses them)
CLAUDE_CODE_DISABLE_VIRTUAL_SCROLL - Disable virtual scrolling in the transcript UI
CLAUDE_CODE_EAGER_FLUSH - Eagerly flush pending messages after each turn (also implied by CLAUDE_CODE_IS_COWORK)
CLAUDE_CODE_ENABLE_MENU_KIND_LANES - Enable grouping menu entries into 'kind lanes'; otherwise gated by tengu_mint_lanes feature flag
CLAUDE_CODE_ENTRYPOINT - Identifies how Claude Code was launched (e.g., cli, sdk-ts/sdk-py/sdk-cli, mcp, claude-vscode, claude-desktop, remote_*, local-agent, claude-in-slack/teams, claude-code-github-action).
CLAUDE_CODE_MANAGED_SETTINGS_PATH - Path to managed (admin) settings; Claude Code sets it to the config dir when spawning host/sandbox child processes.
CLAUDE_CODE_QUESTION_PREVIEW_FORMAT - Format for question preview rendering; accepts "markdown" or "html".
CLAUDE_CODE_REPL - Explicitly enables/disables REPL mode (disable check + ut()); takes precedence over the tengu_slate_harbor feature-flag default.
CLAUDE_CODE_SESSIONEND_HOOKS_TIMEOUT_MS - Timeout in ms for SessionEnd hook execution (parsed int, must be >0).
CLAUDE_CODE_SIMPLE - Boolean-truthy simplified/bare mode (equivalent to --bare, sets CLAUDE_CODE_SIMPLE=1); disables attachments, auto memory, and other advanced features.
CLAUDE_CODE_SIMPLE_SYSTEM_PROMPT - Boolean-truthy forces the simple system prompt (ut() returns true); a disable-style value (Pl()) forces it off; also implied by CLAUDE_CODE_SIMPLE.
CLAUDE_CODE_SKIP_FAST_MODE_NETWORK_ERRORS - Boolean-truthy; when fast-mode availability check fails with a network_error/unknown reason, suppresses reporting it as unavailable (returns null).
CLAUDE_CODE_SKIP_FAST_MODE_ORG_CHECK - Boolean-truthy (VRr()) that skips the fast-mode organization eligibility check.
CLAUDE_CODE_SKIP_PROMPT_HISTORY - Boolean-truthy; disables saving prompts to (and persisting) prompt history.
CLAUDE_CODE_SYNTAX_HIGHLIGHT - Controls code syntax highlighting: value is used as the highlight theme (falling back to BAT_THEME), and a disable-style value (Pl()) turns highlighting off.
CLAUDE_CODE_TUI_JUST_SWITCHED - Set by the harness when TUI mode just switched (e.g. to "fullscreen"); used to gate showing the flicker-free rendering hint.
CLAUDE_CODE_USER_DIALOG_TIMEOUT_MS - Integer ms timeout (via ke) for user dialogs; defaults to 300000.
CLAUDE_CONFIG_DIR - Overrides the Claude config directory (default ~/.claude), NFC-normalized; used for config files, jobs dir, secure-storage hashing and env passthrough.
CLAUDE_ENV_FILE - Path to a session environment file; its trimmed contents are read and loaded into the session environment (logged with char count).
EDITOR - Default text editor (used after VISUAL) for editing prompts/config.
VISUAL - Preferred visual editor; trimmed and checked before EDITOR when resolving the external editor command
XDG_CONFIG_HOME - XDG config directory; used to locate git ignore, anthropic config (XDG_CONFIG_HOME/anthropic), and fish/alacritty config files

## Enable Flags

CLAUDE_CODE_ENABLE_AUTO_MODE - Opt-in to enable Claude Code auto (permission) mode for third-party providers; first-party and anthropicAws are enabled automatically
CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION - Enable the prompt-suggestion feature; set '0'/false to force off
CLAUDE_CODE_OWNERSHIP_FRAME - Arms the "ownership frame" experiment (source=env); otherwise gated by the tengu_walnut_prism feature flag.
CLAUDE_CODE_PEWTER_OWL - Master override for the "pewter_owl" experiment (header/tool/brief variants); if unset, falls back to model allowlist and tengu_pewter_owl_* flags.
CLAUDE_CODE_PEWTER_OWL_TOOL - Override for the pewter_owl tool variant specifically; if unset, falls back to hro("pewter_owl_tool") gating.
CLAUDE_CODE_PROACTIVE - Boolean (ut); enables proactive assistant mode.
CLAUDE_CODE_SHOJI_ENGINE - Boolean-truthy (ut()) that enables the internal "shoji engine"; otherwise falls back to GrowthBook flag tengu_shoji_engine (default false).
CLAUDE_CODE_VERIFY_PROMPT - Boolean (ut()); arms the verify-prompt feature (logs verify_prompt_arm_active source=env), otherwise gated by tengu_sparrow_ledger flag.
CLAUDE_IMPORT_CONVERSATIONS - Boolean (ut()); gates the import-conversations feature (returns "import-conversations is not enabled" when unset).
CLAUDE_PREVIEW_CLASSIFIER_FLOOR - Boolean (ke.CLAUDE_PREVIEW_CLASSIFIER_FLOOR??false); enables the "preview classifier floor" (previewClassifierFloorEnabled) alongside the cowork/chrome automode classifier settings.

## Disable Flags

CLAUDE_CODE_DISABLE_AGENT_VIEW - Disable the agent view UI; equivalent to the disableAgentView setting
CLAUDE_CODE_DISABLE_ATTACHMENTS - Disable file attachments in messages (also disabled by CLAUDE_CODE_SIMPLE or bareFork)
CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS - Disable experimental API beta features/headers (also disabled under HIPAA org policy)
CLAUDE_CODE_DISABLE_FEEDBACK_SURVEY - Disable feedback survey prompts
DISABLE_AUTOUPDATER - Disables the automatic updater; DISABLE_UPDATES takes precedence over it.
DISABLE_COST_WARNINGS - When set, suppresses cost warning notifications (checked via ke.DISABLE_COST_WARNINGS).
DISABLE_ERROR_REPORTING - When set, disables error reporting to Anthropic.
DISABLE_GROWTHBOOK - Disables the GrowthBook feature-flag/experimentation service (V8() returns false when set); also blocks Remote Control.
DISABLE_INSTALLATION_CHECKS - When truthy, skips installation verification checks (e.g. during auto-update).
DISABLE_TELEMETRY - When set, puts the client in "no-telemetry" mode, disabling telemetry.
DISABLE_UPDATES - Admin-level disable of all updates; takes precedence over DISABLE_AUTOUPDATER and shows "Updates are disabled by your administrator".
DO_NOT_TRACK - Truthy value puts the client in "no-telemetry" mode, disabling telemetry/tracking.

## Command Disablers

DISABLE_BUG_COMMAND - Disables the /bug command (message: "/feedback has been disabled via the DISABLE_BUG_COMMAND environment variable").
DISABLE_DOCTOR_COMMAND - Disables the /doctor command.
DISABLE_EXTRA_USAGE_COMMAND - Disables the extra-usage (/usage) command.
DISABLE_FEEDBACK_COMMAND - Disables the /feedback command.
DISABLE_INSTALL_GITHUB_APP_COMMAND - Disables the install-GitHub-app command.
DISABLE_LOGIN_COMMAND - Disables the /login command.
DISABLE_LOGOUT_COMMAND - Disables the /logout command.
DISABLE_UPGRADE_COMMAND - Disables the /upgrade command.

## Bash & Shell

BASH_MAX_OUTPUT_LENGTH - Max Bash tool output length before truncation; parsed with default 30000 and clamped to an upper limit of 150000.
CLAUDE_BASH_MAINTAIN_PROJECT_WORKING_DIR - Truthy flag (ut()); keeps the project working directory persistent across Bash tool commands.
CLAUDE_CODE_BASH_SANDBOX_SHOW_INDICATOR - Boolean-truthy; when the bash sandbox is active, shows the tool label as "SandboxedBash" instead of "Bash".
CLAUDE_CODE_DONT_INHERIT_ENV - Boolean; when set, don't inherit the parent process env into shell-snapshot/env-probe spawns (uses empty base env)
CLAUDE_CODE_GIT_BASH_PATH - Path to git bash on Windows; if set but the path does not exist, prints an error and exits.
CLAUDE_CODE_POWERSHELL_RESPECT_EXECUTION_POLICY - When unset/false, appends "-ExecutionPolicy Bypass" to PowerShell args; when truthy, respects the system execution policy.
CLAUDE_CODE_PWSH_PARSE_TIMEOUT_MS - PowerShell command parse timeout in ms (parsed int, must be >0). Default: 5000.
CLAUDE_CODE_SCRIPT_CAPS - JSON object mapping script names to numeric capability limits; scripts not listed have no caps.
CLAUDE_CODE_SHELL - Override the shell binary for Bash tool execution; only honored if it contains "bash" or "zsh" and is executable, else logged as invalid.
CLAUDE_CODE_SHELL_PREFIX - Prefix command wrapped around shell/MCP-stdio invocations (via P3r), inserted before eval of the command.
CLAUDE_CODE_USE_POWERSHELL_TOOL - Enables the PowerShell tool (preview): non-Windows uses ut(); on Windows Pl() disables, ut() enables, else gated by tengu_cobalt_ridge flag.
COMSPEC - Windows command interpreter path; used as fallback after SHELL to detect the shell name.
SHELL - User's default shell path; used for shell type detection (zsh/bash), completion install, and on Windows overwritten with the detected Git Bash path

## Tool Configuration

BAT_THEME - Fallback syntax-highlighting theme (read after BAT_HIGHLIGHT via ??) for the bat-style code highlighter.
CLAUDE_CODE_DISABLE_ADVISOR_TOOL - Disable the advisor server tool
CLAUDE_CODE_DISABLE_ARTIFACT - Disable the Artifact tool (read via ke.); equivalent to the disableArtifact setting
CLAUDE_CODE_ENABLE_EXPERIMENTAL_ADVISOR_TOOL - Force-enable the experimental advisor tool (first-party and N1 only); otherwise gated by tengu_sage_compass2 flag
CLAUDE_CODE_ENABLE_FINE_GRAINED_TOOL_STREAMING - Enable fine-grained tool-use input streaming; set '0'/false to force off; otherwise gated per-provider (tengu_fgts, eagerInputStreaming)
CLAUDE_CODE_ENABLE_TASKS - Controls the task tracking system; enabled by default and disabled only when set to a falsy value (Pl check).
CLAUDE_CODE_FILE_READ_MAX_OUTPUT_TOKENS - Maximum output tokens when reading files (parseInt, must be >0); default 25000.
CLAUDE_CODE_GLOB_HIDDEN - Include hidden files in glob searches (adds --hidden to ripgrep); defaults to true.
CLAUDE_CODE_GLOB_NO_IGNORE - Ignore .gitignore in glob searches (adds --no-ignore to ripgrep); defaults to true.
CLAUDE_CODE_GLOB_TIMEOUT_SECONDS - Glob/ripgrep timeout in seconds (parseInt); default 20s (60s on WSL).
CLAUDE_CODE_MAX_TOOL_USE_CONCURRENCY - Maximum concurrent tool-use operations (parseInt, >0); default 10.
CLAUDE_CODE_PARKED_PERMISSION_WAIT_MS - Integer ms wait for parked-permission prefetch; defaults to 2000.
CLAUDE_CODE_USE_NATIVE_FILE_SEARCH - [unverified] Boolean env (x3u=Ue.bool schema) registered in the env schema; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_CODE_WEBFETCH_USE_CCR_PROXY - Truthy read (ke.); when firstParty provider and CCR active, routes the WebFetch tool through the CCR proxy (web-fetch route).
CLAUDE_CODE_WEBSEARCH_USE_CCR_PROXY - Truthy read (ke.); when firstParty provider and CCR active, routes the WebSearch tool through the CCR proxy (web-search route).
EMBEDDED_SEARCH_TOOLS - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_LSP_TOOL - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_TOOL_SEARCH - Controls tool-search/deferred tool-loading mode; accepts true/auto/auto:N or a 0-100 percentage (0=tst, 100=standard), a truthy value enables tst mode.
SLASH_COMMAND_TOOL_CHAR_BUDGET - Character budget for the slash-command tool listing; if Number(env) is truthy it directly overrides the computed budget (default fraction 0.01 of context), result floored at 1
TASK_MAX_OUTPUT_LENGTH - Max character length of Task/sub-agent tool output before truncation; parseInt base-10, must be >0 else default 32000, clamped to max 160000
USE_BUILTIN_RIPGREP - When set to a disabling value (0/false/no/off via Pl()), uses the system 'rg' instead; otherwise (default/unset) uses the bundled built-in ripgrep

## MCP (Model Context Protocol)

ALLOW_ANT_COMPUTER_USE_MCP - [unverified] Boolean env var (Ue.bool()) registered in the env registry; name implies enabling an Anthropic computer-use MCP server, but no consumer found in the binary
CLAUDE_CODE_ENABLE_DESIGN_MCP - Enable the Claude Design MCP (http) server; when unset falls back to a feature-flag default
CLAUDE_CODE_ENABLE_XAA - Truthy-enables XAA (cross-app auth) support, exposing the xaaIdp OIDC IdP settings schema for MCP servers.
CLAUDE_CODE_MCP_ALLOWLIST_ENV - Enables env-var allowlist filtering for MCP servers; truthy on / falsy off, default enabled only for the local-agent entrypoint.
CLAUDE_CODE_MCP_AUTO_BACKGROUND_MS - [unverified] Integer env var (Ue.int) in the env schema; no consuming code found in binary.
CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT - Idle timeout in ms for MCP tool responses before aborting; clamped to a min of 1000 and a per-tool max, with 0 disabling.
CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS - Boolean env flag (Ue.bool()); when set, plugin-provided MCP servers are not launched (logged "(CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS is set)"), except those listed in CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT.
CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT - String env var (Ue.str()) listing plugin MCP servers exempted from CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS (logged "exempted via CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT").
CLAUDE_CODE_TERMINAL_MCP_TOOLS - Comma-separated list of MCP tool names (split/trim/filter into a Set); tool_use of these tools is treated as terminal/end-turn content.
ENABLE_CLAUDEAI_MCP_SERVERS - Gates Claude.ai-hosted MCP connectors; an explicit false value (Pl()) disables them (also controlled by the disableClaudeAiConnectors setting).
ENABLE_MCP_LARGE_OUTPUT_FILES - When set to an explicit false value (Pl()), large MCP tool results are truncated instead of written to files.
MAX_MCP_OUTPUT_TOKENS - Max output tokens for MCP tool results; parseInt if >0, else tengu_velvet_ibis flag's mcp_tool value, else default 25000
MCP_CLIENT_SECRET - Client secret for MCP OAuth; returned directly if set, otherwise prompted via TTY (error if no TTY)
MCP_CONNECTION_NONBLOCKING - Truthy flag; when set (via Pl()) makes MCP server connections non-blocking rather than awaited at startup
MCP_CONNECT_TIMEOUT_MS - MCP server connect timeout in ms; read as int via ke.MCP_CONNECT_TIMEOUT_MS, used if >0 else default 5000
MCP_OAUTH_CALLBACK_PORT - Fixed port for the MCP OAuth callback server; parseInt, used if >0 else a port is auto-selected from a range
MCP_OAUTH_CLIENT_METADATA_URL - Overrides the MCP OAuth CIMD client-metadata URL; used verbatim if set, else built-in default
MCP_REMOTE_SERVER_CONNECTION_BATCH_SIZE - Number of remote MCP servers to connect concurrently; parseInt, used if >0 else default 20
MCP_SERVER_CONNECTION_BATCH_SIZE - Number of MCP servers to connect concurrently; parseInt, used if >0 else default 3
MCP_TIMEOUT - MCP server connection timeout in ms; read as int via ke.MCP_TIMEOUT, used if >0 else default 30000
MCP_TOOL_TIMEOUT - MCP tool execution timeout in ms; parseInt, clamped to [1000, max] and used when >0
MCP_TRUNCATION_PROMPT_OVERRIDE - Overrides MCP output truncation prompt mode; any value except 'legacy' enables the subagent prompt, else falls back to tengu_mcp_subagent_prompt flag
MCP_XAA_IDP_CLIENT_SECRET - IdP client secret for MCP XAA auth; required by the --client-secret CLI flag (errors if flag set without this var)

## Plugins & Extensions

CLAUDE_CODE_DISABLE_BUNDLED_SKILLS - Hide bundled skills from the model (they stay typable); plugins, .claude/skills and .claude/commands unaffected; equivalent to the disableBundledSkills setting
CLAUDE_CODE_DISABLE_CLAUDE_API_SKILL - Skip registering the built-in Claude API skill
CLAUDE_CODE_DISABLE_CLAUDE_CODE_SKILL - Skip registering the built-in Claude Code skill
CLAUDE_CODE_DISABLE_OFFICIAL_MARKETPLACE_AUTOINSTALL - Disable automatic installation of official marketplace plugins
CLAUDE_CODE_DISABLE_POLICY_SKILLS - Disable loading of policy (managed-settings) skills
CLAUDE_CODE_ENABLE_BACKGROUND_PLUGIN_REFRESH - Enable background plugin refresh after install/init when a refresh is needed
CLAUDE_CODE_PLUGIN_BINARY_ASSETS - Enables plugin binary assets; if unset, gated by the tengu_plugin_binary_assets flag.
CLAUDE_CODE_PLUGIN_CACHE_DIR - Custom cache directory for plugin storage (used for plugin cache and zip cache).
CLAUDE_CODE_PLUGIN_GIT_TIMEOUT_MS - Git operation timeout for plugin installation in ms (parsed int, must be >0). Default: 120000.
CLAUDE_CODE_PLUGIN_KEEP_MARKETPLACE_ON_FAILURE - Keeps the existing marketplace clone when git pull fails instead of re-cloning.
CLAUDE_CODE_PLUGIN_PREFER_HTTPS - Boolean (ut); prefers HTTPS over SSH for plugin git operations (also forced in remote mode).
CLAUDE_CODE_PLUGIN_SEED_DIR - Path-delimiter-separated list of directories containing seed/pre-installed plugins.
CLAUDE_CODE_PLUGIN_USE_ZIP_CACHE - Boolean (ut); enables zip-based caching for plugin downloads.
CLAUDE_CODE_SKILL_DESC_REFRAME - Boolean-truthy (via ke) enabling the skill-description-reframe arm; otherwise falls back to GrowthBook flag tengu_russet_linnet (default false).
CLAUDE_CODE_SYNC_PLUGINS - Boolean-truthy (ut()) enabling synchronous plugin sync/reconcile at startup.
CLAUDE_CODE_SYNC_PLUGINS_BUFFERED_DOWNLOAD - Boolean env flag (via ke); when set, uses the buffered plugin-download code path (Otf) instead of the streaming/stall-guarded one.
CLAUDE_CODE_SYNC_PLUGINS_DOWNLOAD_STALL_MS - Integer ms (via ke) for the plugin-download stall timeout; defaults to 60000.
CLAUDE_CODE_SYNC_PLUGINS_INSTALL_TIMEOUT_MS - Integer ms (parseInt) plugin-sync install timeout; defaults to 30000 when unset or not >0.
CLAUDE_CODE_SYNC_PLUGINS_MCP_TIMEOUT_MS - Integer ms (parseInt) plugin-sync MCP timeout; used if finite and >=0, otherwise defaults to 10000.
CLAUDE_CODE_SYNC_PLUGIN_INSTALL - Boolean env flag (via ke) that installs plugins synchronously instead of async; drives plugin_install progress markers.
CLAUDE_CODE_SYNC_PLUGIN_INSTALL_TIMEOUT_MS - Integer ms (parseInt) timeout for synchronous plugin installation.
CLAUDE_CODE_SYNC_SKILLS - Boolean-truthy (ut()) enabling synchronous skill sync/install.
CLAUDE_CODE_SYNC_SKILLS_INSTALL_TIMEOUT_MS - Integer ms (via ke) skill-sync install timeout; defaults to 30000 when unset or not >0.
CLAUDE_CODE_SYNC_SKILLS_WAIT_TIMEOUT_MS - Integer ms (via ke) to wait for skill sync; defaults to 5000 when unset or not >0.
CLAUDE_CODE_USE_COWORK_PLUGINS - Boolean (ut()); enables cowork-mode plugins, switches settings file to cowork_settings.json and uses the cowork plugin cache dir.
FORCE_AUTOUPDATE_PLUGINS - When truthy, forces plugin auto-update even when local/dev plugins are present.

## Context & Compaction

API_MAX_INPUT_TOKENS - [unverified] Integer env var (Ue.int()) registered in the env registry; name implies a maximum input-token limit, but no consumer found in the binary
API_TARGET_INPUT_TOKENS - [unverified] Integer env var (Ue.int()) registered in the env registry; name implies a target input-token count, but no consumer found in the binary
CLAUDE_AFTER_LAST_COMPACT - Boolean; when fetching session messages, only return those after the last compaction.
CLAUDE_AUTOCOMPACT_PCT_OVERRIDE - Overrides the auto-compaction trigger threshold as a percentage (parseFloat) of the context window.
CLAUDE_CODE_AUTO_COMPACT_WINDOW - Overrides the auto-compaction context window size; parsed/validated as int and clamped to at least the internal minimum (zln).
CLAUDE_CODE_BLOCKING_LIMIT_OVERRIDE - Test override for the blocking context limit; parsed as int (parseInt base 10) and passed as testBlockingOverride.
CLAUDE_CODE_COLD_COMPACT - Boolean-truthy (ut()); enables cold-compaction behavior in the auto-compaction path.
CLAUDE_CODE_DISABLE_PRECOMPACT_SKIP - Disable the transcript pre-compaction boundary-skip optimization when reading large transcripts
CLAUDE_CODE_ENABLE_TOKEN_USAGE_ATTACHMENT - When truthy, attaches a token_usage context block (used/total/remaining) to the conversation.
CLAUDE_CODE_MAX_CONTEXT_TOKENS - Max context tokens override (parseInt, >0); only applied when DISABLE_COMPACT is set.
CLAUDE_CODE_TODO_REMINDER_MODE - String override (via ke) for the todo-reminder mode; when unset, mode comes from GrowthBook tengu_soft_slate_nudge ("off" or "baseline").
CLAUDE_CODE_TOTAL_TOKENS_REMINDER - Overrides the totalTokensReminder mode (off/infinite/fixed/countdown/padded-countdown) that emits a <total_tokens>N tokens left</total_tokens> block; else from settings or GrowthBook tengu_lapis_anchor (default "off").
CLAUDE_CODE_TOTAL_TOKENS_REMINDER_AFTER_USER_TURN - Overrides whether the total-tokens reminder is also emitted after each regular user prompt (re-anchoring padded-countdown); defaults off, server-controlled via GrowthBook tengu_lapis_anchor_user_turn.
CLAUDE_CODE_TOTAL_TOKENS_REMINDER_BUDGET - Overrides the starting budget (tokens) for totalTokensReminder 'padded-countdown' mode; defaults to 15000000, server-controlled via GrowthBook.
CLAUDE_CONTEXT_COLLAPSE - [unverified] Boolean env (Vju=Ue.bool schema) in the model-config schema associated with the context-collapse feature (snapshots/commits/resets); only in name-list/getter, no consuming read found in binary.
CLAUDE_CONTEXT_COLLAPSE_MODEL - [unverified] String env (Gju=Ue.str schema) in the model-config schema, apparently a model override for the context-collapse feature; only in name-list/getter, no consuming read found in binary.
DISABLE_AUTO_COMPACT - Truthy value disables automatic context compaction (auto-compact).
DISABLE_COMPACT - Disables context compaction; when set together with CLAUDE_CODE_MAX_CONTEXT_TOKENS, that manual max-context-token override is honored.
USE_API_CLEAR_TOOL_RESULTS - [unverified] Boolean env flag (Ue.bool()) registered alongside USE_API_CONTEXT_MANAGEMENT; no consumption found in binary; name implies gating API context-editing to clear tool results
USE_API_CLEAR_TOOL_USES - [unverified] Boolean env flag (Ue.bool()) registered alongside USE_API_CONTEXT_MANAGEMENT; no consumption found in binary; name implies gating API context-editing clear_tool_uses
USE_API_CONTEXT_MANAGEMENT - Truthy flag (ut()) intended to enable API-side context-management edits, but the read is ANDed with false (&&!1) so it is currently effectively disabled/no-op

## Idle & Session Resume

CLAUDE_AFK_COUNTDOWN_MS - Integer (Ue.int getter); ms threshold before the AFK timeout at which the countdown UI appears (default 20000, min'd with the timeout).
CLAUDE_AFK_TIMEOUT_MS - Integer (Ue.int getter); away-from-keyboard idle timeout in ms before onTimeout fires (default 60000).
CLAUDE_CLIENT_PRESENCE_FILE - Path to a client-presence file; its existence is stat-checked to determine whether a client is present.
CLAUDE_CODE_DISABLE_NESTED_CHAIN_IDLE - Disable nested-prompt-blocking idle notifications for nested agent chains
CLAUDE_CODE_ENABLE_AWAY_SUMMARY - Override the away-summary feature; '0'/false forces off, truthy forces on; default from tengu_sedge_lantern flag and awaySummaryEnabled setting
CLAUDE_CODE_EXIT_AFTER_STOP_DELAY - Delay in ms (parseInt, must be >0) before exiting after a stop; arms a timeout on stop.
CLAUDE_CODE_FORCE_SESSION_PERSISTENCE - When set, forces session persistence by disabling the child-session logic that would otherwise skip persisting.
CLAUDE_CODE_IDLE_THRESHOLD_MINUTES - Idle minutes before prompting for a session action; default 75 (Number(env ?? 75)).
CLAUDE_CODE_IDLE_TOKEN_THRESHOLD - Context-token threshold before prompting for a session action; default 100000 (Number(env ?? 1e5)).
CLAUDE_CODE_RESUME_FROM_SESSION - Source session ID to hydrate/teleport from when resuming a session.
CLAUDE_CODE_RESUME_INTERRUPTED_TURN - Boolean (ut); resumes an interrupted turn (restoring background-task state) on reconnect.
CLAUDE_CODE_RESUME_PROMPT - Custom prompt text used when resuming; defaults to "Continue from where you left off."
CLAUDE_CODE_RESUME_THRESHOLD_MINUTES - Minutes since last message before prompting to resume the session. Default: 70.
CLAUDE_CODE_RESUME_TOKEN_THRESHOLD - Token threshold for the resume prompt. Default: 100000.
CLAUDE_CODE_SESSION_ID - Holds the current session identifier; if set, it is regenerated to the new session id on a conversation_reset event.
CLAUDE_CODE_SESSION_NAME - Overrides the session name (used before falling back to a derived name).
CLAUDE_INTERNAL_WARM_RESUME_QA - [unverified] Boolean env (Mqu=Ue.bool schema) named for warm-resume QA; only appears in env name-list and getter, no consuming logic found in binary.
ENABLE_SESSION_PERSISTENCE - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consumer found (session-persistence gating in code uses TEST_ENABLE_SESSION_PERSISTENCE instead).

## Agent SDK

CLAUDE_AGENT_SDK_CLIENT_APP - Client-app identifier from the Agent SDK, sent as the x-client-app request header.
CLAUDE_AGENT_SDK_DISABLE_BUILTIN_AGENTS - Boolean; disables built-in agent definitions when running under the Agent SDK.
CLAUDE_AGENT_SDK_MCP_NO_PREFIX - Boolean; suppresses prefixing MCP tool names with the server name in SDK mode.
CLAUDE_AGENT_SDK_VERSION - Agent SDK version string; recorded as agentSdkVersion in telemetry and reported context.
CLAUDE_CODE_AGENT - Agent name for the current session; set from the --agent option (process.env is assigned from it) and recorded in session metadata.
CLAUDE_CODE_EMIT_SESSION_STATE_EVENTS - Emit session_state_changed system events on idle/running transitions
CLAUDE_CODE_EMIT_TOOL_USE_SUMMARIES - Emit tool-use summary descriptions (gate reported in session gates)
CLAUDE_CODE_ENABLE_SDK_FILE_CHECKPOINTING - Truthy-enables file checkpointing in SDK mode; also requires CLAUDE_CODE_DISABLE_FILE_CHECKPOINTING to be unset.
CLAUDE_CODE_INCLUDE_PARTIAL_MESSAGES - When truthy, includes partial/streaming messages in the output stream.
CLAUDE_CODE_MAX_TURNS - Max agentic turns; parsed as a positive integer (throws on non-positive/invalid); used as the fallback when not passed as an option.
CLAUDE_CODE_SDK_HAS_HOST_AUTH_REFRESH - Boolean (ut); when set and host-managed, registers an SDK host auth token refresh callback (timeout from CLAUDE_CODE_HOST_AUTH_REFRESH_TIMEOUT_MS).
CLAUDE_CODE_SDK_HAS_OAUTH_REFRESH - Boolean (ut); indicates the SDK host supports OAuth refresh; triggers requestOAuthTokenRefresh for known entrypoints.
CLAUDE_CODE_TEE_SDK_STDOUT - Boolean-truthy (ut()) that tees SDK transport stdout (sets teeStdout).
CLAUDE_RUNNER_ACTIVITY_FD - Integer file descriptor (>2, must be a pipe/socket per fstat) that the SDK runner uses to signal activity; ignored if not a FIFO/socket.
CLAUDE_RUNNER_DISABLE_AWAITING_ACTION_OVERRIDE - [unverified] Boolean env (B3u=Ue.bool schema) in the runner/disable schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_RUNNER_FETCH_DEPTH - [unverified] String env (x8u=Ue.str schema) in the runner schema group (name suggests a fetch/clone depth); only in name-list/getter, no consuming logic found in binary.
DEBUG_CLAUDE_AGENT_SDK - When truthy, writes Agent SDK debug logs to a per-session file (debug/sdk-<uuid>.txt).
SDK_NATIVE_BIN - Base name of the native SDK binary used when locating/launching the per-platform executable (linux/darwin/android/win32, .exe/-musl variants); read via ??, default 'claude'

## Agent Teams & Orchestration

BUGHUNTER_DEV_BUNDLE_B64 - Base64-encoded development bundle passed into the bughunter agent subprocess.
BUGHUNTER_FLEET_SIZE - Number of agents in the bughunter fleet, set (String of a server-config value clamped ~5-20) when spawning the fleet; its presence also suppresses the "ccr" environment tag.
CLAUDE_AGENTS_SELECT - String (Ue.str getter) carrying the agent(s) to preselect/auto-open in the FleetView "claude agents" UI; consumed then deleted from the env.
CLAUDE_ASYNC_AGENT_STALL_TIMEOUT_MS - Async agent stall timeout in ms (default 600000) after which a stalled background/async agent turn is handled.
CLAUDE_CODE_CHILD_SESSION - Set to "1" for child/nested sessions; read (ke.) to detect a child session for team-context and session-persistence decisions, and stripped from freshly spawned subprocess env.
CLAUDE_CODE_COORDINATOR_EXTRA_TOOLS - Comma-separated list of extra tool names permitted for the CCR coordinator (split on ",", trimmed, empties filtered).
CLAUDE_CODE_COORDINATOR_MODE - Boolean-truthy; enables CCR coordinator mode (IA()); also set/cleared to "1" internally when switching session mode.
CLAUDE_CODE_DISABLE_EXPLORE_PLAN_AGENTS - Disable the Explore/Plan agents; otherwise gated by tengu_slate_ibis feature flag
CLAUDE_CODE_ENABLE_APPEND_SUBAGENT_PROMPT - Enable appending to a subagent's system prompt via the appendSubagentSystemPrompt option
CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS - A truthy value (or the --agent-teams flag) plus the tengu_amber_flint feature flag enables experimental multi-agent teams.
CLAUDE_CODE_EXPERIMENTAL_OBSERVER_AGENTS - Truthy flag enabling observer agents; also requires background tasks not disabled and the tengu_observer_agents_enabled flag.
CLAUDE_CODE_FORK_SUBAGENT - Truthy value enables forking subagents ("env"); a falsy value or HV()/mn() (e.g., signed in with Claude AI OAuth) disables it; otherwise falls back to a GrowthBook rollout flag.
CLAUDE_CODE_PLAN_V2_AGENT_COUNT - Number of agents in plan v2 orchestration; parsed int, valid 1-10, else tier-based default (3 or 1).
CLAUDE_CODE_PLAN_V2_EXPLORE_AGENT_COUNT - Number of explore agents in plan v2; parsed int, valid 1-10, default 3.
CLAUDE_CODE_SUBAGENT_CACHE_EVICT - Boolean-truthy (via ke) enabling evict-on-complete prompt-cache control for subagents (only for firstParty/anthropicAws); otherwise falls back to GrowthBook flag tengu_subagent_cache_evict (default false).
CLAUDE_CODE_TASK_LIST_ID - Overrides the task-list id used for task tracking; when unset it falls back to the team name or session id.
CLAUDE_INTERNAL_ASSISTANT_TEAM_NAME - Sets the inherited assistant team name for the session; read once then deleted from process.env (stored via Xdr).

## Workflows & Automation

AUTOMODE_DECISION_LOG - When set to "1", enables logging of automode decisions to a .automode_decisions.jsonl file in the working directory
CLAUDE_CODE_DISABLE_CRON - Disable cron/scheduled prompts; otherwise gated by tengu_kairos_cron feature flag
CLAUDE_CODE_DISABLE_WORKFLOWS - Disable workflows; equivalent to the disableWorkflows setting; also gated by the allow_workflows permission
CLAUDE_CODE_LOOP_KEEPALIVE - Truthy-enables autonomous-loop keepalive; otherwise defaults to the tengu_kairos_loop_keepalive flag.
CLAUDE_CODE_LOOP_PERSISTENT - Truthy-enables the persistent autonomous loop; otherwise defaults to the tengu_kairos_loop_persistent flag.
CLAUDE_CODE_PLAN_MODE_INTERVIEW_PHASE - Controls the interview phase in plan mode (string env var).
CLAUDE_CODE_PLAN_MODE_REQUIRED - Requires plan-mode approval before implementation; used as the planModeRequired default.
CLAUDE_CODE_REPO_CHECKOUTS - Env-map of repo name to checkout path for multi-repo workflows; paired with CLAUDE_CODE_BASE_REFS.
CLAUDE_CODE_STOP_HOOK_BLOCK_CAP - Integer cap (parseInt, default 8) on how many consecutive Stop-hook blocks are allowed before the loop stops (only enforced when >0).
CLAUDE_CODE_WORKFLOWS - Boolean; when truthy (ut()) makes Workflows available gated by tengu_workflows_enabled (default true); when explicitly disabled (Pl()) marks Workflows unavailable.
CLAUDE_REMOTE_WORKFLOW_ARGS - JSON args (ke.) for the remote (CCR) workflow script; JSON.parse'd, size-limited to 524288 bytes; errors reported as args-too-large/args-parse.
CLAUDE_REMOTE_WORKFLOW_SCRIPT - Shell/workflow script (ke.) delivered via env for a remote (CCR) session; deterministic entry point, validated (<=524288 bytes, no control chars); missing yields env-missing.
CLAUDE_WORKFLOW_NAME_ONLY - Boolean (ke.); when set, restricts the Workflow tool to named bundled workflows only, throwing if a scriptPath workflow is requested.
ULTRAPLAN_PROMPT_FILE - [unverified] String env var (Ue.str()) registered in the env registry (Ultraplan/workflow family); no direct read found in binary; name implies a file supplying the Ultraplan prompt

## Background Tasks & Isolation

ANTHROPIC_ENVIRONMENT_ID - Environment ID for Anthropic managed-agent self-hosted sandboxes; read (non-null asserted) by the EnvironmentWorker to identify the self-hosted environment
ANTHROPIC_ENVIRONMENT_KEY - Environment auth key (sk-ant-oat01-... generated in Console) for Anthropic managed-agent self-hosted sandboxes; read by the EnvironmentWorker to authenticate
CLAUDE_AUTO_BACKGROUND_TASKS - Truthy flag (ut()); when enabled the auto-background-task timeout returns 120000ms (else 0), enabling automatic backgrounding.
CLAUDE_BG_AUTH_SNAPSHOT_PATH - Path to a JSON auth-snapshot file read (then unlinked and unset) to restore credentials in a background session.
CLAUDE_BG_BACKEND - When set to "daemon", adjusts terminal/output handling for daemon-managed background sessions (skips OSC theme queries, treats stdout as a pipe, disables title updates).
CLAUDE_BG_CLAIM_AUTH - String (Ue.str getter) auth token consumed (then deleted) to claim a background session's socket credentials.
CLAUDE_BG_ISOLATION - String (Ue.str getter) selecting background-task isolation mode; recognizes "worktree" or "none", else falls back to the job/config bgIsolation setting.
CLAUDE_BG_MEMORY_TOGGLED_OFF - Set to "1" together with CLAUDE_CODE_SESSION_KIND=="bg" to disable memory in the background session.
CLAUDE_BG_POST_CLEAR_RESPAWN - Boolean (Ue.bool getter) set to "1" when a background session respawns after a /clear (session id changed on retry attempt>1); relaxes --agent validation on respawn.
CLAUDE_BG_RENDEZVOUS_SOCK - Path to the background rendezvous Unix socket; when set (and not already serving) Claude creates the bg server on it; consumed and deleted after read.
CLAUDE_BG_RV_AUTH - Auth token for the background rendezvous socket; consumed and deleted after read, and overridden by rvAuth from the socket tokens file if provided.
CLAUDE_BG_SESSION_PERMISSION_RULES - JSON string of {allow:[],deny:[]} permission rules applied only when CLAUDE_CODE_SESSION_KIND==="bg"; parsed via JSON.parse and validated as arrays.
CLAUDE_BG_SOCKET_TOKENS_PATH - Path to a tokens file holding ptyAuth/rvAuth/claimAuth for bg sockets; read to hydrate those auth tokens then unlinked/deleted after read.
CLAUDE_BG_SOURCE - Source label recorded for bg-agent dispatch telemetry (defaults to "shell"); value "spare" also marks a spare-session REPL bridge.
CLAUDE_BG_STARTUP_WEDGE_MS - Milliseconds before the bg startup wedge timeout fires (read via ke.); defaults to 45000.
CLAUDE_BG_TCC_DISCLAIMED - macOS only; when set, Claude skips the TCC responsibility-disclaim relaunch step and deletes the var.
CLAUDE_CODE_BG_TASKS_REPORT_RUNNING - Boolean-truthy (ke.); when set, active teammates/running bg tasks/pending notifications keep the session reported as active (not idle).
CLAUDE_CODE_DAEMON_COLD_START - Daemon cold-start mode; accepts "transient" or "ask" from the env, otherwise falls back to settings/default "transient".
CLAUDE_CODE_DISABLE_BACKGROUND_TASKS - Disable background task execution and the run_in_background parameter
CLAUDE_CODE_DISABLE_BG_EXIT_HANDOFF - Disable handing off background shells/workflows/agents on exit (returns empty handoff state)
CLAUDE_CODE_DISABLE_BG_SHELL_PRESSURE_REAP - Disable reaping of idle background shells under memory/notification pressure
CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS - Max ms to wait for background tasks before terminating in print mode; default 600000, set 0 to wait indefinitely.
CLAUDE_CODE_SESSION_KIND - Read directly; when equal to "bg", "daemon", or "daemon-worker" marks the session as a background/daemon session (rs()==="bg"), forcing alt-screen/flicker behavior and non-interactive paths.
CLAUDE_CODE_SUPERVISED - Boolean-truthy (ut(), memoized); marks the process as supervised so uncaught exceptions/unhandled rejections are logged specially rather than exiting immediately.
CLAUDE_CODE_WORKSPACE_HOST_PATHS - Pipe-delimited ("|") list of host paths for containerized workspace mapping; split and attached to telemetry as workspace.host_paths.
CLAUDE_DISABLE_ADOPT - Boolean (ke.); when set, disables adoption of detached background shell tasks (iKr returns !CLAUDE_DISABLE_ADOPT).
CLAUDE_JOB_DIR - Directory for a background job/session; stores bg exit cause file, tmp files, and job state; basename used as jobId; validated under the config jobs/ dir for bg sessions.
CLAUDE_SUBAGENT_BG_SHELL_MAX_MS - Integer (parseInt) max runtime in ms for a subagent background shell; default 3600000 (1h).
ENABLE_SESSION_BACKGROUNDING - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
JAVA_TOOL_OPTIONS - Read when building sandbox subprocess env under weaker network isolation; appends -Djava.net.preferIPv4Stack=true to JAVA_TOOL_OPTIONS.
SRT_DEBUG - Sandbox-runtime: when set (truthy), enables sandbox debug logging with '[SandboxDebug]' prefix via console error/warn/log (not Secure Reliable Transport)
SRT_WIN_PATH - Override path to the sandbox-runtime Windows binary (srt-win.exe); if set and the file exists it is used, otherwise vendor srt-win dirs are searched

## PTY & Process Management

CLAUDE_BG_PTY_AUTH - Auth token gating DATA access to the background PTY host socket; read then deleted, and overridden by ptyAuth from CLAUDE_BG_SOCKET_TOKENS_PATH if present.
CLAUDE_PTY_HEARTBEAT_MS - Integer (Number) PTY server heartbeat/ping interval in ms, default 60000 (non-Windows); missed pings (>=3) destroy the connection.
CLAUDE_PTY_HOST_EXEC - When "1", the PTY exec runs on the host; read once then deleted from process.env.
CLAUDE_PTY_ORPHAN_CHECK_MS - Integer (Number) interval in ms for the PTY orphan check, default 2000; after ~30 misses with no parent/connections it exits as orphaned.
CLAUDE_PTY_RECORD - Configures PTY session recording (passed to G1m with terminal dimensions); registered in the same group as CLAUDE_CODE_TERMINAL_RECORDING.

## Bridge & Gateway

CLAUDE_BRIDGE_BASE_URL - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BRIDGE_OAUTH_TOKEN - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BRIDGE_REATTACH_OUTBOUND_ONLY - Boolean-truthy (ut()) flag marking a bridge reattach as outbound-only; read at reattach and deleted from the environment after read.
CLAUDE_BRIDGE_REATTACH_SEQ - Sequence number for bridge session reattach; parsed as int (Number.parseInt); consumed and deleted after read.
CLAUDE_BRIDGE_REATTACH_SESSION - Session ID to reattach to in bridge/repl mode; consumed and deleted after read.
CLAUDE_BRIDGE_SESSION_INGRESS_URL - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BRIDGE_USE_CCR_V2 - Boolean-truthy (ut()); forces the CCR v2 code-sessions protocol for bridge worker/session registration (also enabled when use_code_sessions===true).
CLAUDE_CODE_BRIDGE_SESSION_ID - Set by Claude Code to the current bridge/repl session id (exported for child processes) and deleted when there is no active session.
CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY - Enable gateway model discovery; requires first-party auth, non-Anthropic endpoint, and ANTHROPIC_BASE_URL set
CLAUDE_CODE_FABLE_BRIDGE_DIALOG_TIMEOUT_MS - Timeout in ms for the Fable bridge dialog; uses the value when >0, otherwise defaults to 60000.
CLAUDE_CODE_FORCE_BRIDGE - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_CODE_USE_CCR_V2 - Boolean flag for CCR v2 remote sessions; set to "1" (with CLAUDE_CODE_WORKER_EPOCH) by the bridge when spawning a session with useCcrV2.
CLAUDE_CODE_USE_GATEWAY - Boolean (ut()); enables Cloud gateway provider mode requiring ANTHROPIC_BASE_URL and ANTHROPIC_AUTH_TOKEN; changes token-expiry message to "refresh ANTHROPIC_AUTH_TOKEN and restart".
CLAUDE_CODE_WEBSOCKET_AUTH_FILE_DESCRIPTOR - Integer file descriptor (parseInt) to read the session/websocket ingress auth token from; falls back to CLAUDE_SESSION_INGRESS_TOKEN_FILE when unset.
CLAUDE_CODE_WORKER_EPOCH - Integer (parseInt) worker epoch for bridge/SDK session lifecycle; required at initialize (throws missing_epoch if NaN); used to ignore stale end_session events on epoch>1.
CLAUDE_GATEWAY_ALLOW_LOOPBACK - Boolean (ut()); when set, allows loopback/IPv4-mapped addresses in the gateway address validation (E0n).
CLAUDE_GATEWAY_LOG_LEVEL - Sets the gateway logger level (lowercased, looked up in level map S0n); defaults to "info" when unset or unrecognized.
CLAUDE_SESSION_INGRESS_TOKEN_FILE - Path to the file containing the session ingress token; read (with fallback default Hwr) when no websocket auth FD is provided.
LOCAL_BRIDGE - Truthy flag (ut()) that forces the chrome/remote-control bridge to use ws://localhost:8765 instead of the hosted bridge.claudeusercontent.com

## Remote & Cowork

AGENT_PROXY_AUTH_TOKEN - Auth token for the Claude Code Remote (CCR) agent proxy; read at startup in initAgentProxy then unset from env, used only when CLAUDE_CODE_REMOTE and CCR_AGENT_PROXY_ENABLED are set with a CLAUDE_CODE_REMOTE_SESSION_ID
AGENT_PROXY_URL - URL of the Claude Code Remote (CCR) agent proxy; read at startup in initAgentProxy then unset from env, gated on CLAUDE_CODE_REMOTE being truthy and CCR_AGENT_PROXY_ENABLED
CCR_AGENT_PROXY_ENABLED - Boolean (Ue.bool getter); in a Claude Code Remote session, enables the agent proxy (git/gh credential shim) that unsets AGENT_PROXY_URL/AUTH_TOKEN.
CCR_ENABLE_BUNDLE - Truthy flag (ut()) enabling git bundle seeding/upload for Claude Code Remote (alongside the tengu_ccr_bundle_seed_enabled flag).
CCR_FORCE_BUNDLE - Truthy flag (ut()) forcing git bundle seeding/upload for Claude Code Remote regardless of the feature flag.
CCR_SPAWN_TIMESTAMP_MS - Spawn epoch-ms timestamp (parseInt) used to compute Claude Code Remote startup latency metrics (spawn_to_first_checkpoint_ms, spawn_to_exec_ms, etc.); falls back to CLAUDE_CODE_SPAWN_TIMESTAMP_MS.
CLAUDE_CODE_ARTIFACT - Boolean toggle for the artifact/frame feature; ut() enables it while Pl() (explicitly-off) disables it.
CLAUDE_CODE_ARTIFACTS_API_BASE_URL - String base-URL override for the Claude Code artifacts API; registered among provider base-URL env vars and stripped from spawned-subprocess environments (direct consumer not observed).
CLAUDE_CODE_ARTIFACT_AUTO_OPEN - When explicitly set (Pl()), suppresses auto-opening the artifact frame (telemetry reason "auto_open_skipped_env").
CLAUDE_CODE_ARTIFACT_DIRECT_UPLOAD - Boolean-truthy (ke.); enables the direct/inline artifact upload lane (also enabled by feature gate tengu_cobalt_plinth_direct).
CLAUDE_CODE_AUTH_FAIL_EXIT_MS - Threshold in ms after which a remote child session exits following continuous auth failure; default 600000, and <=0 disables the exit.
CLAUDE_CODE_AUTO_MODE_EXTERNAL_PERMISSIONS - [unverified] Registered as an env var in the auto-mode env registry; no consumer found in binary.
CLAUDE_CODE_CONTAINER_ID - Container ID for remote sessions; sent as the x-claude-remote-container-id request header and used for temp-dir ownership checks and progress gating.
CLAUDE_CODE_DISABLE_LAUNCH_COMPOSER - [unverified] Registered env flag with no read site found; the launch-composer feature is stubbed off in this build (isLaunchComposerEnabled/shouldShowLaunchComposer return false)
CLAUDE_CODE_DISABLE_WORKING_SYNC - Disable the synced-file syncer for remote SDK sessions (skips startSyncedFileSyncer)
CLAUDE_CODE_ENABLE_LAUNCH_COMPOSER - [unverified] Registered env flag with no read site found; the launch-composer feature is stubbed off in this build (isLaunchComposerEnabled/shouldShowLaunchComposer return false)
CLAUDE_CODE_ENABLE_REMOTE_RECAP - Override remote recap; when unset defaults to the tengu_harbor_moth feature flag
CLAUDE_CODE_ENVIRONMENT_KIND - Classifies the runtime environment; recognized values include "byoc", "anthropic_cloud", and "bridge", driving ccr/bridge/desktop tagging and Datadog gating.
CLAUDE_CODE_ENVIRONMENT_RUNNER_VERSION - Version string of the environment runner; sent as the x-environment-runner-version header on remote I/O requests.
CLAUDE_CODE_IS_COWORK - Truthy indicates cowork mode; forces disableSkillShellExecution on.
CLAUDE_CODE_MOCK_REMOTE_SETTINGS - [unverified] Boolean env var listed in the remote-settings override group (alongside CLAUDE_CODE_REMOTE_SETTINGS_PATH) to mock remote settings value-read code not found in binary.
CLAUDE_CODE_POST_FOR_SESSION_INGRESS_V2 - Use POST for the session ingress v2 protocol.
CLAUDE_CODE_REMOTE - Boolean (ut); indicates Claude Code is running in remote/headless (CCR) mode.
CLAUDE_CODE_REMOTE_ENVIRONMENT_TYPE - Type of remote environment; included in telemetry and enables remote upload/file features.
CLAUDE_CODE_REMOTE_HERMETIC_MODE - With CLAUDE_CODE_REMOTE set, enables hermetic mode which filters/drops MCP servers.
CLAUDE_CODE_REMOTE_MEMORY_DIR - Directory for remote memory storage; when unset in remote mode, auto-memory is disabled.
CLAUDE_CODE_REMOTE_RAW_EVENTS_FILE - [unverified] Declared as a string env var (Ue.str) in the remote env group; no consuming read found in binary.
CLAUDE_CODE_REMOTE_SEND_KEEPALIVES - Boolean (ut); sends session keepalive/heartbeat activity callbacks in remote mode.
CLAUDE_CODE_REMOTE_SESSION_ID - Remote (CCR) session ID; included in telemetry and X-Claude-Code session headers.
CLAUDE_CODE_REMOTE_SETTINGS_PATH - Path to a local override file for remote managed settings; when set, uses it and skips the API fetch.
CLAUDE_CODE_REMOTE_SETTINGS_POLL_MS - [unverified] Declared as an integer env var (Ue.int) in the remote-settings env group; no consuming read found in binary.
CLAUDE_CODE_SUPPRESS_SESSION_ATTRIBUTION - Boolean env flag (via ke); when set, suppresses session-URL attribution (returns null instead of the session attribution info).
CLAUDE_CODE_SYSTEM_PROMPT_GB_FEATURE - GrowthBook feature name from which to fetch a remote system-prompt override; only read when CLAUDE_CODE_REMOTE is set.
CLAUDE_REMOTE_CONTROL_SESSION_NAME_PREFIX - Prefix for remote-control session names; defaults to os.hostname(), sanitized to lowercase-dashed (fallback "remote-control"); also settable via --remote-control-session-name-prefix.
CLAUDE_SSH_LOCAL_BINARY - [unverified] String env (I8u=Ue.str schema) in the SSH-related schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_SSH_VERSION - [unverified] String env (H8u=Ue.str schema) in the SSH-related schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_STAGE_FILE_ROOT - Root directory (ke., must be an absolute path or it throws) for staging files synced/pushed to the remote workspace mount; unset falls back to DEFAULT_STAGE_FILE_ROOT and read-only mounts no-op.
SESSION_INGRESS_URL - Base URL for session ingress used to build remote session/share URLs; read via ??, falls back to ANTHROPIC_BASE_URL

## Memory

CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD - Boolean-truthy; loads CLAUDE.md (and .claude/CLAUDE.md) files from the additional directories in addition to the primary project.
CLAUDE_CODE_DISABLE_AUTO_MEMORY - Disable the automatic memory system; set to '0'/false to force-enable it (overriding the autoMemoryEnabled setting)
CLAUDE_CODE_DISABLE_CLAUDE_MDS - Disable loading of CLAUDE.md instruction files (also forced on in safe mode)
CLAUDE_CODE_DISABLE_MEMORY_BULK_INFLATE - Disable bulk-inflate (exportAll) of memory stores during multi-store sync; also gated by tengu_memory_bulk_inflate flag
CLAUDE_CODE_DISABLE_MEMORY_PERIODIC_RESYNC - Disable periodic memory-store resync; when unset the interval comes from tengu_memory_store_resync_interval_minutes
CLAUDE_CODE_FORCE_EVALUATE_MEMORY - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_CODE_FORCE_MEMORY_SURVEY - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_COWORK_MEMORY_EXTRA_GUIDELINES - Extra guidelines text appended to the cowork/persistent-agent memory prompt (added to memory dir guidelines when non-empty).
CLAUDE_COWORK_MEMORY_GUIDELINES - Guidelines text for auto memory; when set (with team memory enabled) prepends "# auto memory" guidelines and triggers memory_load_prompt.
CLAUDE_COWORK_MEMORY_INDEX_CONTENT - Provides auto-memory index content directly (parsed via FMp) instead of loading from disk; empty string ("") disables/skips the auto-memory index entry.
CLAUDE_COWORK_MEMORY_PATH_OVERRIDE - Overrides the cowork/auto-memory directory path (validated/normalized with trailing sep; rejects null bytes, drive-only or UNC roots).
CLAUDE_MEMORY_STORES - JSON config of memory stores (parsed; throws if invalid JSON); when non-empty enables team/persistent memory features and blocks default team memory dir.
TEAM_MEMORY_SYNC_URL - URL override for the team memory synchronization service (string env var; team memory sync feature present)

## IDE Integration

CLAUDE_CODE_AUTO_CONNECT_IDE - Controls auto-connecting to a detected IDE; when set to false (===!1) it force-disables, otherwise permits auto-connect.
CLAUDE_CODE_IDE_HOST_OVERRIDE - Overrides the IDE host address (returned directly instead of 127.0.0.1/WSL detection).
CLAUDE_CODE_IDE_SKIP_AUTO_INSTALL - When truthy, skips automatic IDE extension installation.
CLAUDE_CODE_IDE_SKIP_VALID_CHECK - When truthy, skips the IDE connection validity/port check.
CLAUDE_CODE_SSE_PORT - Port (parseInt) used to locate/connect the SSE endpoint for IDE lockfile discovery.
CURSOR_TRACE_ID - Trace ID set by the Cursor IDE; its presence is used to detect Cursor as the host terminal/IDE.
VSCODE_GIT_ASKPASS_MAIN - Path to VS Code git askpass helper; inspected to detect Cursor/Windsurf/Antigravity/Devin and remote server variants

## OpenTelemetry (OTEL)

ANT_CLAUDE_CODE_METRICS_ENDPOINT - [unverified] String env var registered in the OTEL/telemetry env registry; no consumer found in the binary (Claude Code telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_ENDPOINT - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_ENDPOINT; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_HEADERS - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_HEADERS; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_PROTOCOL - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_PROTOCOL; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_LOGS_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_LOGS_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_METRICS_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_METRICS_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_RESOURCE_ATTRIBUTES - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_RESOURCE_ATTRIBUTES; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_TRACES_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_TRACES_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
BETA_TRACING_ENDPOINT - OTLP endpoint URL for the beta tracing exporter; beta tracing activates only when ENABLE_BETA_TRACING_DETAILED is truthy AND this is set (plus tengu_trace_lantern flag).
CLAUDE_CODE_ACCOUNT_TAGGED_ID - Tagged account ID emitted as user.account_id in OTEL metrics (gated by OTEL_METRICS_INCLUDE_ACCOUNT_UUID); falls back to a hash of the account UUID.
CLAUDE_CODE_ENABLE_FEEDBACK_SURVEY_FOR_OTEL - Allow the feedback survey to show even when OTEL/telemetry reporting is enabled
CLAUDE_CODE_ENABLE_TELEMETRY - Truthy-enables third-party OpenTelemetry metrics/traces collection (isTelemetryEnabled).
CLAUDE_CODE_ENHANCED_TELEMETRY_BETA - Truthy-enables enhanced telemetry beta; also honored via alias ENABLE_ENHANCED_TELEMETRY_BETA, with a falsy value disabling it.
CLAUDE_CODE_OTEL_DIAG_STDERR - When truthy, writes OTEL diagnostic error messages to stderr; its presence also prevents stripping OTEL env vars from subprocesses.
CLAUDE_CODE_OTEL_FLUSH_TIMEOUT_MS - OTEL metrics/traces force-flush timeout in ms. Default: 5000.
CLAUDE_CODE_OTEL_HEADERS_HELPER_DEBOUNCE_MS - Debounce interval in ms for the OTEL headers helper. Default: 1740000.
CLAUDE_CODE_OTEL_SHUTDOWN_TIMEOUT_MS - OTEL provider shutdown timeout in ms. Default: 2000.
CLAUDE_CODE_PROPAGATE_TRACEPARENT - Boolean (ut); propagates the W3C traceparent header on outbound API requests.
CLAUDE_CODE_TAGS - Custom tags string attached (as tags) to session/event metadata for telemetry.
ENABLE_ENHANCED_TELEMETRY_BETA - Alternative to CLAUDE_CODE_ENHANCED_TELEMETRY_BETA; a truthy value enables enhanced telemetry beta, an explicit false value disables it.
OTEL_EXPORTER_OTLP_ENDPOINT - Base OTLP exporter endpoint URL; fallback when signal-specific endpoint vars are unset
OTEL_EXPORTER_OTLP_HEADERS - Headers for OTLP exporter requests; parsed as key=value pairs, merged with signal-specific headers
OTEL_EXPORTER_OTLP_INSECURE - Allow insecure (non-TLS) OTLP connections; effective when value equals "true" (or the signal-specific variant)
OTEL_EXPORTER_OTLP_LOGS_ENDPOINT - Logs-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP_{LOGS}_ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_EXPORTER_OTLP_LOGS_PROTOCOL - Overrides OTLP protocol for logs; falls back to OTEL_EXPORTER_OTLP_PROTOCOL
OTEL_EXPORTER_OTLP_METRICS_ENDPOINT - Metrics-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP_{METRICS}_ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_EXPORTER_OTLP_METRICS_PROTOCOL - Overrides OTLP protocol for metrics (grpc/http/json); falls back to OTEL_EXPORTER_OTLP_PROTOCOL
OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE - Metrics temporality preference (cumulative/delta); defaulted to "delta" when unset
OTEL_EXPORTER_OTLP_PROTOCOL - OTLP transport protocol (grpc, http/protobuf, http/json) used for all signals unless a signal-specific protocol is set
OTEL_EXPORTER_OTLP_TRACES_ENDPOINT - Traces-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP_{TRACES}_ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_EXPORTER_OTLP_TRACES_PROTOCOL - Overrides OTLP protocol for traces (grpc/http/json); falls back to OTEL_EXPORTER_OTLP_PROTOCOL
OTEL_EXPORTER_PROMETHEUS_HOST - Host for the Prometheus metrics exporter; falls back to the exporter's DEFAULT_OPTIONS.host
OTEL_EXPORTER_PROMETHEUS_PORT - Port for the Prometheus metrics exporter (Number()); falls back to the exporter's DEFAULT_OPTIONS.port
OTEL_LOGS_EXPORTER - Comma-separated logs exporter types (otlp, console, none); split and filtered
OTEL_LOGS_EXPORT_INTERVAL - Logs export scheduled-delay interval in ms; parsed via OY() with a built-in default
OTEL_LOG_ASSISTANT_RESPONSES - Tri-state boolean (ke.OTEL_LOG_ASSISTANT_RESPONSES); when truthy logs assistant response text in telemetry (else redacted), falling back to OTEL_LOG_USER_PROMPTS
OTEL_LOG_RAW_API_BODIES - Enable raw API body logging; "file:/path" writes to file, other truthy value logs inline, falsy disables
OTEL_LOG_TOOL_CONTENT - Truthy flag (ut()) to log tool content (input/output) in telemetry
OTEL_LOG_TOOL_DETAILS - Boolean (ke.OTEL_LOG_TOOL_DETAILS) controlling whether detailed tool-use info is logged in telemetry
OTEL_LOG_USER_PROMPTS - Truthy flag (ut()) to log user prompt text in telemetry; otherwise prompts are recorded as "<REDACTED>"
OTEL_METRICS_EXPORTER - Comma-separated metrics exporter types (otlp, prometheus, console, none); split and filtered
OTEL_METRIC_EXPORT_INTERVAL - Metrics export interval in ms; parsed via OY() with a built-in default
OTEL_RESOURCE_ATTRIBUTES - Standard OTEL resource attributes (key=value list) parsed by the SDK EnvDetector into resource attributes; also registered as a string in the env registry
OTEL_TRACES_EXPORTER - Comma-separated traces exporter types (otlp, console, none); split and filtered
OTEL_TRACES_EXPORT_INTERVAL - Traces export scheduled-delay interval in ms; parsed via OY() with a built-in default
TRACEPARENT - W3C Trace Context traceparent; when OTEL is enabled it is extracted as the parent span for the interaction span
TRACESTATE - W3C Trace Context tracestate; passed with TRACEPARENT into OTEL context propagation

## Datadog

CLAUDE_CODE_BYOC_ENABLE_DATADOG - Boolean-truthy; in a BYOC environment (CLAUDE_CODE_ENVIRONMENT_KIND==="byoc") Datadog is disabled unless this flag is set.
CLAUDE_CODE_DATADOG_FLUSH_INTERVAL_MS - Datadog log flush interval in ms; parsed with parseInt, defaults to 15000.
CLAUDE_CODE_DD_ERROR_TRACKING_FLUSH_INTERVAL_MS - Datadog error-tracking log flush interval in ms; parseInt with default 30000 (30s)

## Profiling & Diagnostics

ANTHROPIC_LOG - Anthropic SDK internal logging level (e.g. debug); read by the SDK as ClientOptions.logLevel, suggested in slow/failed request warnings
CLAUDE_CODE_COMMIT_LOG - When set, enables React commit (render) performance timing logging (performance.now around prepareForCommit); unrelated to git commits.
CLAUDE_CODE_DEBUG_LOGS_DIR - Custom directory for debug log files; default CONFIG_DIR/debug/SESSION.txt
CLAUDE_CODE_DEBUG_LOG_LEVEL - Debug log level; one of verbose, debug, info, warn, error (default debug)
CLAUDE_CODE_DEBUG_REPAINTS - Enable debug logging/inspection of terminal UI repaints (read as boolean via env)
CLAUDE_CODE_DIAGNOSTICS_FILE - Path to write the diagnostics output file (returned directly from process.env)
CLAUDE_CODE_EXIT_AFTER_FIRST_RENDER - When truthy, exits immediately after the first UI render (testing/startup instrumentation).
CLAUDE_CODE_FRAME_TIMING_LOG - Path to a file to which frame-timing logs are appended (openSync append).
CLAUDE_CODE_FRAME_TIMING_SAMPLE_EVERY - Sample-every-N-frames interval for frame-timing logging; coerced via Math.max(1, value||1), default 1.
CLAUDE_CODE_PERFETTO_TRACE - Path/value that enables Perfetto trace collection (logged during initializePerfettoTracing).
CLAUDE_CODE_PERFETTO_WRITE_INTERVAL_S - [unverified] Declared as an integer env var (Ue.int) in the Perfetto tracing env group; no consuming read found in binary.
CLAUDE_CODE_PROFILE_QUERY - Boolean (ut); enables query profiling (set =1; otherwise "Query profiling not enabled").
CLAUDE_CODE_PROFILE_STARTUP - Boolean (ut); enables startup profiling.
CLAUDE_CODE_SESSION_LOG - Path recorded as logPath in session metadata where the session log is written.
CLAUDE_CODE_SLOW_OPERATION_THRESHOLD_MS - Numeric ms threshold for logging slow operations; parsed as Number and used only if >=0, otherwise defaults to Infinity (disabled).
CLAUDE_CODE_SPAWN_TIMESTAMP_MS - Integer spawn epoch-ms (parseInt); with CCR_SPAWN_TIMESTAMP_MS taking precedence, used to compute the spawn_to_first_checkpoint_ms telemetry metric.
CLAUDE_CODE_TERMINAL_RECORDING - [unverified] Registered as a string env var (Ue.str()) in the typed env registry (grouped with recording/logging vars); no consumer/read site found in the binary.
CLAUDE_DEBUG - Boolean (ke.CLAUDE_DEBUG); enables debug logging including printing internal/node process warnings via C() at warn level.
DEBUG - Truthy value (or --debug/-d) enables debug mode/logging; also read by the bundled debug module for namespace filtering.
DEBUG_AUTH - When set, logs GCP metadata-server authentication errors/info to the console.
DEBUG_SDK - Truthy value enables debug mode (checked alongside DEBUG and --debug).
ENABLE_BETA_TRACING_DETAILED - When truthy AND BETA_TRACING_ENDPOINT is set, enables detailed beta (Lantern) tracing.

## Proxy & TLS

CLAUDE_CODE_AGENT_PROXY_GH_SHIM - Boolean-truthy (ke.); when set, writes a gh CLI shim pointing at the agent-proxy port.
CLAUDE_CODE_AGENT_PROXY_GIT_CONFIG - Boolean-truthy (ke.); when set, appends governed git config entries pointing at the agent-proxy port.
CLAUDE_CODE_CERT_STORE - CA cert stores to trust; comma-separated list of "bundled" and/or "system" (split on ",", lowercased); unrecognized values are ignored with a warning.
CLAUDE_CODE_CLIENT_CERT - Path to the mTLS client certificate file; presence also suppresses the background connectivity probe.
CLAUDE_CODE_CLIENT_KEY - Path to the mTLS client private key file; presence also suppresses the background connectivity probe.
CLAUDE_CODE_CLIENT_KEY_PASSPHRASE - Passphrase for the mTLS client private key.
CLAUDE_CODE_ENABLE_PROXY_AUTH_HELPER - Enable the proxy authentication helper (reads the helper from project/local config)
CLAUDE_CODE_PROXY_AUTH_HELPER_TTL_MS - Proxy auth helper cache TTL in ms (parsed int, must be >=0). Default: 300000.
CLAUDE_CODE_PROXY_RESOLVES_HOSTS - Boolean (ut); indicates the proxy handles DNS resolution (installs a custom lookup passthrough on the proxy agent).
CLAUDE_CODE_SIMULATE_PROXY_USAGE - Boolean-truthy that simulates proxy behavior by stripping all but one beta header from API requests (logs "SIMULATE_PROXY_USAGE: stripping N beta headers").
HTTPS_PROXY - HTTPS proxy URL for outbound connections (https_proxy||HTTPS_PROXY); presence suppresses built-in proxy setup and is forwarded to subprocess env.
HTTP_PROXY - HTTP proxy URL for outbound connections (http_proxy||HTTP_PROXY); presence suppresses built-in proxy setup and is forwarded to subprocess env.
JAVA_HOME - Java installation root; JAVA_HOME/bin/keytool is used to locate the keytool binary for reading the Java CA truststore.
NODE_EXTRA_CA_CERTS - Path to a PEM file of extra CA certificates; read for TLS trust and auto-populated from config if unset
NODE_TLS_REJECT_UNAUTHORIZED - Standard Node var; set to '0' to disable TLS certificate validation (insecure)
NODE_USE_ENV_PROXY - Truthy flag read by shouldUseEnvProxy(); false when unset/"0", otherwise makes Node's built-in fetch honor http(s)_proxy env vars (Node >=22.21)
NODE_USE_SYSTEM_CA - Use the system CA store; enabled when getUseSystemCA() is true or the var equals "1"
NO_PROXY - Comma-separated list of hosts/domains (also lowercased no_proxy) that bypass the proxy; "*" bypasses all
SSL_CERT_FILE - Path to SSL certificate bundle; forwarded to spawned proxy-related processes when set with HTTPS_PROXY

## Tmux

CLAUDE_CODE_TMUX_PREFIX - The tmux prefix key Claude uses, shown in the detach hint (e.g. "<prefix> d").
CLAUDE_CODE_TMUX_PREFIX_CONFLICTS - When set, indicates Claude's tmux prefix conflicts with the outer one, changing the detach hint to press the prefix twice.
CLAUDE_CODE_TMUX_SESSION - tmux session name; presence activates the "tmux session: ... detach with" info notification.
CLAUDE_CODE_TMUX_TRUECOLOR - When set, prevents the automatic downgrade to 256 colors inside tmux (preserves detected truecolor level).
TMUX - Set when running inside tmux; drives multiplexer detection, clipboard (tmux-buffer), and control-mode probing
TMUX_PANE - Current tmux pane identifier

## Git & CI Detection

BUILDKITE - Presence indicates running under Buildkite CI.
CIRCLECI - Presence indicates running under CircleCI.
CLAUDE_CODE_ACTION - Boolean-truthy; indicates running as the GitHub Action and sets CLAUDE_CODE_ENTRYPOINT to "claude-code-github-action".
CLAUDE_CODE_BASE_REF - Overrides the base git ref for diff operations (per checkout via CLAUDE_CODE_BASE_REFS); when unset, auto-detects the default branch/merge-base.
CLAUDE_CODE_BASE_REFS - Map (parsed by ZVs) of base git refs keyed per repo checkout; used together with CLAUDE_CODE_REPO_CHECKOUTS.
CLAUDE_CODE_DISABLE_GIT_INSTRUCTIONS - Disable git-related instructions in the system prompt; set to '0'/false to force-enable; also controlled by the includeGitInstructions setting
CLAUDE_CODE_PERFORCE_MODE - Boolean (ut); enables Perforce workspace mode, adding read-only file / `p4 edit` handling to system context.
GCM_INTERACTIVE - For git subprocesses, Claude forces GCM_INTERACTIVE="never" when the user hasn't set it, disabling Git Credential Manager interactive prompts (k6t defaults).
GH_ENTERPRISE_TOKEN - GitHub Enterprise auth token; used (GH_ENTERPRISE_TOKEN||GITHUB_ENTERPRISE_TOKEN) when the target host matches GH_HOST for gh PR/auth lookups.
GH_HOST - Configured GitHub Enterprise host; NTr(process.env.GH_HOST,e) tests whether a host is the GHE host to select the enterprise token; also passed to gh shim.
GH_TOKEN - GitHub CLI auth token for github.com (GH_TOKEN||GITHUB_TOKEN); used for gh PR/auth lookups and set to "proxy-injected" placeholder when proxy handles auth.
GITHUB_ACTIONS - Boolean-truthy; detected when running in GitHub Actions, selecting the "github-action" entrypoint and emitting GitHub Actions telemetry metadata.
GITHUB_ACTION_INPUTS - JSON-encoded GitHub Action inputs; recorded as githubActionInputs in telemetry.
GITHUB_ACTION_PATH - Path to the GitHub Action directory; parsed for claude-code-action ref telemetry and used to build allowed path dirs.
GITHUB_ACTOR - GitHub username that triggered the workflow; reported in telemetry and used as user-identity fallback (GITHUB_ACTOR??USER??USERNAME).
GITHUB_ACTOR_ID - GitHub user ID that triggered the workflow; reported as actorId in GitHub Actions telemetry.
GITHUB_ENTERPRISE_TOKEN - GitHub Enterprise auth token fallback (GH_ENTERPRISE_TOKEN||GITHUB_ENTERPRISE_TOKEN) for GHE hosts matching GH_HOST.
GITHUB_ENV - Path to the GitHub Actions environment file; its directory is used as the runner file-commands dir for path resolution.
GITHUB_EVENT_NAME - Name of the GitHub event that triggered the workflow; reported as githubEventName in telemetry.
GITHUB_EVENT_PATH - Path to the GitHub Actions event payload JSON; stored in yV and added to allowed path dirs.
GITHUB_REPOSITORY - GitHub repository in owner/repo format; reported in GitHub Actions telemetry metadata.
GITHUB_REPOSITORY_ID - GitHub repository numeric ID; reported as repositoryId in telemetry.
GITHUB_REPOSITORY_OWNER - GitHub repository owner login; reported as repositoryOwner in telemetry.
GITHUB_REPOSITORY_OWNER_ID - GitHub repository owner numeric ID; reported as repositoryOwnerId in telemetry.
GITHUB_TOKEN - GitHub auth token; fallback for github.com (GH_TOKEN||GITHUB_TOKEN), used as repo-clone authorization_token, and set to "proxy-injected" placeholder when proxy handles auth.
GITHUB_WORKSPACE - GitHub Actions workspace directory; used as the workspace root and to add its .git paths to allowed dirs.
GITLAB_CI - Boolean-truthy; detected when running in GitLab CI (returns "gitlab-ci" deployment environment).
GIT_ASKPASS - For git subprocesses, Claude forces GIT_ASKPASS="" when the user hasn't set it to disable the interactive credential askpass helper (k6t defaults).
GIT_CONFIG_COUNT - Existing count of ad-hoc git config entries; read and extended (GIT_CONFIG_KEY_N/VALUE_N) to inject credential.interactive=false into git subprocesses.
GIT_CONFIG_GLOBAL - Path to the isolated global git config file; agent-proxy governed git config is written here, and the arm is skipped if unset (refuses to write a shared global config).
GIT_SSH_COMMAND - Set for git subprocesses to configure ssh (StrictHostKeyChecking, ControlMaster/Path disabled, nc/socat ProxyCommand) when routing through the agent proxy; user value preserved via ke.
GIT_TERMINAL_PROMPT - For git subprocesses, Claude forces GIT_TERMINAL_PROMPT="0" when the user hasn't set it, disabling interactive terminal credential prompts (k6t defaults).
P4PORT - Perforce server address; when set, "perforce" is added to detected version-control systems
RUNNER_ENVIRONMENT - GitHub Actions runner environment identifier; reported in telemetry when GITHUB_ACTIONS is set
RUNNER_OS - GitHub Actions runner OS; recorded (as githubActionsRunnerOs) in telemetry when GITHUB_ACTIONS is set
SSH_AUTH_SOCK - SSH agent socket path; its absence (together with GIT_SSH_COMMAND unset) is checked to gate git/GitHub SSH auth behavior

## SWE-Bench & Testing

CLAUDE_CODE_BENCH_LIVE_COUNTS - Boolean-truthy; enables live-counts rendering in the Ink renderer (benchmarking instrumentation).
CLAUDE_CODE_STALL_TIMEOUT_MS_FOR_TESTING - Numeric stall-timeout override (Number()) for testing; falls back to the built-in default when unset/zero.
CLAUDE_CODE_TEST_FIXTURES_ROOT - Root directory (defaults to cwd) under which test fixtures/<name>.json are read.
CLAUDE_CODE_TEST_FORCE_DENY - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TEST_NO_GIT_BASH - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TEST_NO_PWSH - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_ULTRAREVIEW_PREFLIGHT_FIXTURE - Test fixture (JSON, zod-parsed) used to stub the ultrareview preflight check instead of hitting /v1/ultrareview/preflight.
FORCE_VCR - [unverified] Registered as a boolean env-backed feature flag (R4u=Ue.bool()) alongside USE_API_* flags; name suggests VCR fixture replay (cf. VCR_RECORD) but no direct usage found in binary.
SWE_BENCH_INSTANCE_ID - SWE-bench instance identifier; emitted in telemetry (sweBenchInstanceId)
SWE_BENCH_RUN_ID - SWE-bench run identifier; emitted in telemetry (sweBenchRunId)
SWE_BENCH_TASK_ID - SWE-bench task identifier; emitted in telemetry (sweBenchTaskId)
TEST_ENABLE_SESSION_PERSISTENCE - Truthy flag (ut()) that keeps session/prompt-history persistence enabled in the test NODE_ENV (otherwise disabled in 'test')
TEST_GRACEFUL_FS_GLOBAL_PATCH - When set, applies the graceful-fs global monkey-patch to the fs module (test-only)
VCR_RECORD - VCR fixture recording mode for tests; set VCR_RECORD=1 to re-record and commit fixtures

## Terminal Detection

ALACRITTY_LOG - Presence indicates the Alacritty terminal emulator; used for terminal-type detection
CLAUDE_CODE_ALT_SCREEN_FULL_REPAINT - Boolean-truthy; forces full repaint of the alternate screen buffer; defaulted to "1" on Windows/Windows Terminal.
CLAUDE_CODE_DECSTBM - Force-enable DECSTBM (terminal scroll-region) support; otherwise gated by tengu_marlin_porch feature flag
CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN - Don't use the terminal alternate-screen buffer (also triggered when CLAUDE_CODE_NO_FLICKER===false)
CLAUDE_CODE_DISABLE_MOUSE - Disable mouse input in the terminal UI (mouse mode off vs full)
CLAUDE_CODE_DISABLE_MOUSE_CLICKS - Disable mouse click handling while keeping scroll (mouse mode 'scroll' instead of 'full'); superseded by CLAUDE_CODE_DISABLE_MOUSE
CLAUDE_CODE_DISABLE_TERMINAL_TITLE - Disable setting the terminal window title
CLAUDE_CODE_FORCE_STRIKETHROUGH - When set, forces terminal strikethrough support to be treated as available.
CLAUDE_CODE_FORCE_SYNC_OUTPUT - When truthy, forces synchronized terminal output mode regardless of the detected terminal.
CLAUDE_CODE_NO_FLICKER - Forces the fullscreen anti-flicker (alt-screen) renderer; set to 1 to enable (overrides tmux -CC auto-disable), 0 to force-disable.
CLAUDE_CODE_SCROLL_SPEED - Terminal scroll speed multiplier (parseFloat, must be >0, clamped to max 20); default 3 on Windows Terminal else 1.
CLI_WIDTH - Integer (parseInt) terminal width override for formatting, used when tty/output columns are unavailable (ignored if NaN or 0).
COLORFGBG - Terminal foreground/background color hint; last ';'-separated value (0-15) parsed to infer dark (<=6 or ==8) vs light theme.
COLORTERM - Terminal color capability (e.g. "truecolor"); absence with low color level triggers a tip to set COLORTERM=truecolor.
FORCE_CODE_TERMINAL - Boolean-truthy; forces terminal detection to treat the host as an IDE/code terminal (cU=Yjt()||d8r()||Boolean(process.env.FORCE_CODE_TERMINAL)).
FORCE_COLOR - Forces color output regardless of terminal detection; overrides NO_COLOR, values ""/"1"/"true"=basic, "2"=256, "3"=truecolor (Node/Bun getColorDepth).
GNOME_TERMINAL_SERVICE - Presence identifies the terminal as gnome-terminal in terminal detection.
INTELLIJ_TERMINAL_COMMAND_BLOCKS - Presence (defined) detects the JetBrains/IntelliJ terminal command-blocks feature, enabling related terminal handling (qNr sets jio=true).
INTELLIJ_TERMINAL_COMMAND_BLOCKS_REWORKED - Presence (defined) detects the reworked IntelliJ terminal command-blocks feature, enabling related terminal handling (qNr sets jio=true).
ITERM_SESSION_ID - iTerm2 session identifier; presence marks the terminal as iTerm2 and is split (pane id after ":") for tmux/pane handling.
KITTY_WINDOW_ID - Kitty terminal window ID; presence marks the terminal as kitty in terminal detection.
KONSOLE_VERSION - KDE Konsole version; presence marks terminal as konsole and version>=211200 is treated as a capable terminal.
LC_TERMINAL - Terminal identifier from locale; "iTerm2" value triggers iTerm2-specific key/clipboard handling; reported in tmux clipboard diagnostics.
MODIFIERS_NODE_PATH - Overrides the require() path for the native keyboard-modifiers addon (getModifiers/isModifierPressed) instead of the bundled default
MSYSTEM - MSYS2/MinGW system type; when set, terminal detection returns its lowercased value as the terminal name
NO_COLOR - Standard NO_COLOR var; disables ANSI colors when set unless FORCE_COLOR is also defined
SESSIONNAME - Windows session name; combined with TERM==='cygwin' to detect a Cygwin terminal
SSH_CLIENT - SSH client connection info; one of the vars (with SSH_CONNECTION/SSH_TTY) used to detect an SSH session
SSH_CONNECTION - SSH connection details; used to detect an SSH session (affects mux/clipboard/terminal behavior)
SSH_TTY - SSH TTY device; used to detect an SSH session
STY - GNU Screen session identifier; presence detects the 'screen' multiplexer
TERM - Terminal type identifier; 'dumb' disables interactive features and specific values (xterm-ghostty, kitty, cygwin, etc.) drive detection
TERMINAL - Generic terminal executable identifier; on Linux used to resolve/launch the terminal emulator command
TERMINAL_EMULATOR - Terminal emulator identifier; value 'JetBrains-JediTerm' detects PyCharm/JetBrains terminals
TERMINATOR_UUID - Terminator terminal UUID; presence detects the Terminator terminal
TERM_PROGRAM - Terminal program name (e.g. iTerm.app, Apple_Terminal, vscode); 'devin' maps to windsurf and drives multiple detections
TERM_PROGRAM_VERSION - Terminal program version; parsed/coerced for feature gating (ghostty>=1.2.0, iTerm, vscode/cursor ranges)
TILIX_ID - Tilix terminal ID; presence detects the Tilix terminal
VTE_VERSION - VTE (GNOME Terminal) version; presence detects vte-based terminals and parseInt>=6800 gates a capability
WAYLAND_DISPLAY - Wayland display; presence selects wl-copy for Linux clipboard and, when absent with DISPLAY unset, marks a headless Linux session
WT_SESSION - Windows Terminal session ID; presence detects Windows Terminal and gates progress reporting/scroll behavior
XTERM_VERSION - xterm version; presence detects an xterm terminal
ZED_TERM - Set when running inside the Zed editor terminal; presence gates a terminal capability
ZELLIJ - Set when running inside the Zellij multiplexer; drives multiplexer detection

## Cloud Platform Detection

APP_URL - Application URL; checked for an "ondigitalocean.app" host to detect the DigitalOcean App Platform
AWS_EXECUTION_ENV - AWS execution environment; value AWS_ECS_FARGATE maps to aws-fargate and AWS_ECS_EC2 to aws-ecs in cloud platform detection
AWS_LAMBDA_FUNCTION_NAME - Presence detected during cloud-platform detection to report the runtime as "aws-lambda".
AZURE_FUNCTIONS_ENVIRONMENT - Azure Functions environment; presence used for cloud-platform detection.
C9_PID - AWS Cloud9 process ID; presence used for platform detection.
C9_USER - AWS Cloud9 user; presence used for platform detection.
CF_PAGES - Presence detected as the "cloudflare-pages" cloud platform.
CLOUD_RUN_JOB - Presence indicates running as a Google Cloud Run Job (used in GCP serverless environment detection).
CODER - Truthy value indicates running inside a Coder workspace.
CODER_WORKSPACE_NAME - Coder workspace name; presence contributes to detecting a Coder workspace environment.
CODESPACES - Truthy value indicates running inside GitHub Codespaces.
DAYTONA_WS_ID - Daytona workspace ID; presence indicates a Daytona workspace environment.
DENO_DEPLOYMENT_ID - Deno Deploy deployment ID; presence identifies the Deno Deploy platform.
DEVPOD - Truthy value indicates running inside a DevPod workspace.
DEVPOD_WORKSPACE_UID - DevPod workspace UID; presence contributes to DevPod environment detection.
DYNO - Heroku dyno identifier; presence identifies the Heroku platform.
FLY_APP_NAME - Fly.io application name; presence (with FLY_MACHINE_ID) identifies the Fly.io platform.
FLY_MACHINE_ID - Fly.io machine ID; presence identifies the Fly.io platform.
FUNCTION_NAME - Presence detects Google Cloud Functions/Cloud Run (ajs/JKd: !!(CLOUD_RUN_JOB||FUNCTION_NAME||K_SERVICE) and !!(FUNCTION_NAME||FUNCTION_TARGET)).
FUNCTION_TARGET - Presence detects Google Cloud Functions target (JKd: !!(FUNCTION_NAME||FUNCTION_TARGET)).
GAE_MODULE_NAME - Presence detects Google App Engine (YKd: !!(GAE_SERVICE||GAE_MODULE_NAME)).
GAE_SERVICE - Presence detects Google App Engine service (YKd: !!(GAE_SERVICE||GAE_MODULE_NAME)).
GITPOD_WORKSPACE_ID - Presence detects a Gitpod workspace (returns "gitpod").
GOOGLE_CLOUD_WORKSTATIONS - Boolean-truthy; presence detects a GCP Cloud Workstations environment (returns "gcp-cloud-workstations").
KUBERNETES_SERVICE_HOST - Presence detects a Kubernetes environment (returns "kubernetes").
K_CONFIGURATION - Presence detects Google Cloud Run/Knative configuration (XKd: !!K_CONFIGURATION).
K_SERVICE - Google Cloud Run/Knative service name; presence detects "gcp-cloud-run" (and part of Cloud Functions detection ajs).
NETLIFY - Truthy flag (ut()) marking the deployment environment as Netlify
PROJECT_DOMAIN - Presence marks the deployment environment as Glitch
RAILWAY_ENVIRONMENT_NAME - Presence (with RAILWAY_SERVICE_NAME) marks the deployment environment as Railway
RAILWAY_SERVICE_NAME - Presence (with RAILWAY_ENVIRONMENT_NAME) marks the deployment environment as Railway
RENDER - Truthy flag (ut()) marking the deployment environment as Render
REPL_ID - Presence (with REPL_SLUG) marks the deployment environment as Replit
REPL_SLUG - Presence (with REPL_ID) marks the deployment environment as Replit
SPACE_CREATOR_USER_ID - Presence detects the huggingface-spaces hosting platform
VERCEL - Truthy (ut()) presence detects the Vercel hosting platform
WEBSITE_SITE_NAME - Azure App Service site name; presence (or WEBSITE_SKU) detects the azure-app-service platform
WEBSITE_SKU - Azure App Service SKU; presence (or WEBSITE_SITE_NAME) detects the azure-app-service platform

## Azure Identity

AZURE_ADDITIONALLY_ALLOWED_TENANTS - Semicolon-separated (.split(";")) list of additional Azure AD tenant IDs allowed for token acquisition.
AZURE_AUTHORITY_HOST - Azure AD authority host URL for @azure/identity; default login.microsoftonline.com.
AZURE_CLIENT_CERTIFICATE_PASSWORD - Password protecting the Azure client certificate used for certificate-based auth.
AZURE_CLIENT_CERTIFICATE_PATH - Path to the Azure client certificate for certificate-based service-principal authentication.
AZURE_CLIENT_ID - Azure application (client) ID for @azure/identity EnvironmentCredential.
AZURE_CLIENT_SECRET - Azure client secret for service-principal authentication.
AZURE_CLIENT_SEND_CERTIFICATE_CHAIN - Boolean; when set, sends the full x5c certificate chain for subject-name/issuer (SNI) certificate auth.
AZURE_FEDERATED_TOKEN_FILE - Path to the federated/workload-identity token file for @azure/identity.
AZURE_IDENTITY_DISABLE_MULTITENANTAUTH - Boolean; disables multi-tenant authentication in @azure/identity.
AZURE_PASSWORD - Password for Azure username/password (ROPC) authentication.
AZURE_POD_IDENTITY_AUTHORITY_HOST - Authority host for the Azure Pod Identity / IMDS managed-identity endpoint.
AZURE_REGIONAL_AUTHORITY_NAME - Regional STS authority name for Azure AD token requests (e.g., AutoDiscoverRegion).
AZURE_TENANT_ID - Azure AD tenant ID for @azure/identity EnvironmentCredential.
AZURE_TOKEN_CREDENTIALS - Selects DefaultAzureCredential mode; valid values 'prod' or 'dev' (trimmed/lowercased), otherwise throws an error.
AZURE_USERNAME - Username for Azure username/password (ROPC) authentication.
SYSTEM_OIDCREQUESTURI - Azure Pipelines OIDC request URI required by AzurePipelinesCredential; throws if unset when that credential is used

## System & Runtime

APPDATA - Windows application data directory; used for config-file discovery (e.g. VS Code, gcloud, Alacritty config)
AWS_LAMBDA_BENCHMARK_MODE - Set to "1" (compared ==="1") to enable benchmark testing mode in the vendored AWS Lambda InvokeStore, exposing a _testing reset helper.
BROWSER - Overrides the default browser command used to open URLs.
CHOKIDAR_INTERVAL - Polling interval in ms for the Chokidar file watcher.
CHOKIDAR_USEPOLLING - Forces the Chokidar file watcher to use polling instead of native filesystem events.
CLAUDECODE - Boolean (Ue.bool getter), set to "1" by the CLI to mark that a process is running inside Claude Code.
CLAUDE_BYTE_STREAM_IDLE_TIMEOUT_MS - Byte-stream idle timeout in ms (Number()); if finite and >0 it overrides the watchdog timeout, otherwise falls back to feature gate tengu_byte_stream_idle_timeout_ms.
CLAUDE_CODE_HOST_PLATFORM - Overrides the detected host platform; honored only for values win32/darwin/linux, else falls back to the real platform.
CLAUDE_CODE_PACKAGE_MANAGER_AUTO_UPDATE - Boolean (ut); enables auto-updating Claude Code via the host package manager (homebrew/winget).
CLAUDE_CODE_RETRY_WATCHDOG - Boolean (ut); enables retry-watchdog behavior that keeps retrying on 529/overload errors instead of dropping or falling back.
CLAUDE_CODE_TMPDIR - Override the temp directory used by Claude Code (falls back to /tmp or /tmp/claude for sandbox TMPDIR); alternative to CLAUDE_TMPDIR.
CLAUDE_ENABLE_BYTE_WATCHDOG - Enables the byte-level stream watchdog: Pl() disables, ut() enables, otherwise defaults on via tengu_stream_watchdog_default_on (default true).
CLAUDE_ENABLE_STREAM_WATCHDOG - Tri-state boolean (ke.CLAUDE_ENABLE_STREAM_WATCHDOG??true); enables stream health watchdog, default on unless set false.
CLAUDE_MOCK_HEADERLESS_429 - [unverified] Boolean env (MWu=Ue.bool schema) in the streaming/watchdog schema group, name implies mocking a headerless HTTP 429; only in name-list/getter, no consuming logic found in binary.
CLAUDE_SERVE_DRAIN_TIMEOUT_MS - [unverified] Integer env (fju=Ue.int schema), name implies a serve-mode drain timeout in ms; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_SLOW_FIRST_BYTE_MS - Integer (parseInt) threshold in ms for logging a "Slow first byte" warning when no stream chunk arrives; default 30000.
CLAUDE_STREAM_IDLE_TIMEOUT_MS - Integer (Number) stream idle timeout in ms; effective value is max(env, 300000), i.e. floored at 300000ms before the watchdog acts.
CLAUDE_TMPDIR - Overrides the temp directory used by Claude Code (default /tmp/claude, after CLAUDE_CODE_TMPDIR); exported as TMPDIR into sandboxed bash env.
DISPLAY - X11 display; required for xclip/xsel clipboard on Linux and passed to child processes (defaulting to ":99" if unset).
ENABLE_LOCKLESS_UPDATES - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_PID_BASED_VERSION_LOCKING - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
HOME - User home directory; used across config path resolution (e.g. HOME/.config/anthropic, gcloud ADC, XDG_STATE_HOME fallback) and safety checks.
LANG - System locale; used (LC_ALL||LC_TIME||LANG) to derive date/time formatting locale.
LC_ALL - Overrides all locale settings; highest precedence in locale resolution (LC_ALL||LC_TIME||LANG).
LC_TIME - Time-related locale; used (LC_ALL||LC_TIME||LANG) to derive date/time formatting locale.
LOCALAPPDATA - Windows Local AppData directory; used to locate PowerShell (pwsh.exe) and winget.exe under Microsoft\WindowsApps for install/upgrade
OSTYPE - OS type identifier; treated as cygwin/msys shell when equal to "cygwin" or "msys" (affects PATH delimiter)
PATH - Executable search path; split on the platform delimiter for command lookup and forwarded to sandboxed subprocesses
PATHEXT - Windows executable file extensions (default ".COM;.EXE;.BAT;.CMD"); split on ";" for command resolution
PKG_CONFIG_PATH - pkg-config search path; included when assembling PKG_CONFIG_PATH for building native dependencies
PREFIX - Termux install prefix; combined with TERMUX_VERSION to resolve $PREFIX/tmp for the daemon temp directory
PWD - Shell working directory; compared against the process cwd to detect a session-provided cwd
SAFEUSER - Preferred username source (checked before USER) for telemetry/metadata and a sanitized filesystem-safe user identity
SYSTEMROOT - Windows system root; read with default 'C:\\Windows', used to locate System32 where.exe and WindowsPowerShell
TEMP - Windows-style temp dir; third fallback in Node os.tmpdir() chain (TMPDIR || TMP || TEMP || '/tmp')
TERMUX_VERSION - Termux version string; with PREFIX set, resolves Termux tmp dir ($PREFIX/tmp) for the daemon path
TMP - Temp dir; second fallback in Node os.tmpdir() chain (TMPDIR || TMP || TEMP || '/tmp')
TMPDIR - Primary temp directory; first in Node os.tmpdir() chain and forwarded into the env of spawned bash subprocesses
USER - Current username; used for user identity (kL()), temp/daemon paths, and metadata (falls back to userInfo)
USERNAME - Fallback username (e.g. Windows); used when USER is unset for identity resolution
USERPROFILE - Windows user profile directory; used for HOME fallback, Desktop/PowerShell path resolution, and WSL path mapping
WSL_DISTRO_NAME - WSL distribution name; yields the 'wsl-<name>' environment id and drives WSL<->Windows path translation for IDE/config lookups
XDG_RUNTIME_DIR - XDG runtime directory; used as the base directory for the VS Code IPC socket path

## Node.js & Bun

API_FORCE_IDLE_TIMEOUT - Force the idle timeout to stay enabled on Anthropic API fetch connections; when falsy (default) the body idle watchdog may disable the timeout, when truthy it is kept
BUN_DISABLE_DYNAMIC_CHUNK_SIZE - Set to "1" (compared !=="1") to disable Bun's dynamic chunk-size adjustment.
BUN_ENV - Bun runtime environment selector (paired with NODE_ENV).
BUN_FEEDBACK_URL - Endpoint for Bun crash/feedback uploads; defaults to https://bun.report/v1/feedback.
BUN_INSPECT_NOTIFY - Inspector notify socket URL (unix://) for the Bun debugger; cleared after being read.
BUN_INSTALL - Bun installation directory; defaults to ~/.bun (homedir()/.bun).
BUN_JS_DEBUG - Enables Bun JavaScript debug logging.
COREPACK_ENABLE_AUTO_PIN - Claude Code sets this to "0" at startup to disable Corepack auto-pinning of package managers.
GRACEFUL_FS_PLATFORM - Overrides platform string for the graceful-fs shim (defaults to "darwin").
NODE_CLUSTER_SCHED_POLICY - Node.js cluster scheduling policy, read into schedulingPolicyEnv by the cluster module
NODE_DEBUG - Node.js debuglog section filter (regex-tested for names like gfs4/semver) to enable internal debug output
NODE_ENV - Node.js environment mode (development/production/test)
NODE_OPTIONS - Additional Node.js CLI options; split on whitespace to check flags and appended with --max-old-space-size=8192 when CLAUDE_CODE_REMOTE=true
NODE_UNIQUE_ID - Node.js cluster worker unique ID; used to set worker id and deleted after worker setup
UV_THREADPOOL_SIZE - libuv thread pool size for async I/O; reported in the diagnostics env dump ('default' when unset)

## gRPC

BUF_BIGINT_DISABLE - Set to "1" (compared !=="1") to disable the native BigInt setBigInt64/setBigUint64 fast-path in the @bufbuild/protobuf runtime, forcing the fallback implementation.
GRPC_DEFAULT_SSL_ROOTS_FILE_PATH - Path to a custom SSL roots (CA) file that gRPC reads (readFileSync) as default root certificates.
GRPC_EXPERIMENTAL_ENABLE_OUTLIER_DETECTION - Enables experimental gRPC outlier detection; enabled by default ((...??"true")==="true"), set to a non-"true" value to disable.
GRPC_NODE_TRACE - gRPC Node.js trace categories (comma-separated, with "-" prefix to exclude); falls back to GRPC_TRACE, default "".
GRPC_NODE_USE_ALTERNATIVE_RESOLVER - Boolean string; when "true" uses gRPC's alternative DNS resolver in Node.js (default "false").
GRPC_NODE_VERBOSITY - gRPC Node.js log verbosity (DEBUG/INFO/ERROR); falls back to GRPC_VERBOSITY.
GRPC_SSL_CIPHER_SUITES - Overrides the SSL cipher suites used for gRPC TLS connections (CIPHER_SUITES).
GRPC_TRACE - gRPC trace categories for debugging; used as fallback when GRPC_NODE_TRACE is unset.
GRPC_VERBOSITY - gRPC log verbosity level (DEBUG/INFO/ERROR); used as fallback when GRPC_NODE_VERBOSITY is unset.

## Brief Mode

CLAUDE_CODE_BRIEF - Boolean-truthy (ke.); enables brief mode, gated on brief entitlement (isBriefEntitled) or the tengu_kairos_brief feature gate.
CLAUDE_CODE_BRIEF_UPLOAD - Boolean-truthy; enables uploading brief attachments (also enabled when replBridgeEnabled, CLAUDE_CODE_REMOTE_ENVIRONMENT_TYPE, or CLAUDE_CODE_REMOTE are set).
DISABLE_BRIEF_MODE_STOP_HOOK - When truthy, disables the brief-mode Stop hook that runs after the main thread when brief mode and the brief tool are enabled.

## Accessibility

CLAUDE_AX_SCREEN_READER - Tri-state boolean (Ue.triBool getter); enables screen-reader-friendly flat-text output (no borders/animations), overridable by --ax-screen-reader; propagated to children as "1".
CLAUDE_CODE_ACCESSIBILITY - Boolean-truthy (ke.); enables accessibility mode which disables cursor hiding and visual animations and keeps the native cursor visible.
CLAUDE_CODE_NATIVE_CURSOR - Truthy-enables native cursor rendering; also on under accessibility mode; otherwise defaults to the tengu_native_cursor flag.
INK_SCREEN_READER - Boolean-truthy (ut); when set on a TTY, enables Ink screen-reader rendering mode (isScreenReaderEnabled).

## Chrome Extension

CLAUDE_CHROME_CLASSIFIER_FLOOR - Boolean-truthy override enabling the Chrome auto-mode classifier floor; when unset falls back to feature gate tengu_cowork_chrome_automode_default (default false).
CLAUDE_CHROME_PERMISSION_MODE - Sets the permission mode for the Claude-in-Chrome extension; validated against the allowed value list and warns/ignored if invalid.
CLAUDE_CODE_ENABLE_CFC - Force-enable (true) or disable (false) the Claude-in-Chrome browser-extension integration; overrides the claudeInChromeDefaultEnabled default

## Voice

CLAUDE_CODE_VOICE_FORWARD_INTERIMS_TYPED - Boolean (ut()); when set, forwards interim typed voice-transcription results, otherwise gated by tengu_brick_follow flag.
VOICE_STREAM_BASE_URL - Override base URL for the voice streaming websocket; when set it is used instead of deriving from BASE_API_URL

## Security

CLAUDE_CODE_BUBBLEWRAP - Set to indicate running inside a Bubblewrap sandbox; when set (ke.), bypasses the root-user block so --dangerously-skip-permissions is allowed as root.
CLAUDE_CODE_SAFE_MODE - Boolean (ut) or --safe-mode flag; enables safe mode, forcing CLAUDE_CODE_DISABLE_CLAUDE_MDS=1 and dropping MCP servers.
CLAUDE_CODE_SANDBOXED - Boolean (ut); indicates a sandboxed environment and bypasses the trust dialog.
CLAUDE_CODE_SUBPROCESS_ENV_SCRUB - Boolean-truthy (ut()) forces scrubbing of env vars from spawned subprocesses; a disable-style value (Pl()) forces it off; otherwise defaults based on entrypoint.
CLAUDE_SECURESTORAGE_CONFIG_DIR - Overrides the config dir used for secure storage of credentials (.oauth_token/.api_key/.session_ingress_token), NFC-normalized; forwarded to child processes.
IS_SANDBOX - Set to "1" to indicate running inside a sandbox; disables internet-access probes and permits root use of --dangerously-skip-permissions.

## Miscellaneous & Internal

AI_AGENT - Agent/harness identifier; if unset or starting with "claude-code_"/"claude-code/" it is overwritten with a generated harness id (version-tagged), propagated for telemetry/attribution
API_TOKEN - [unverified] String env var (Ue.str()) registered in the env registry; only literal reference is an example "Authorization: Bearer ${API_TOKEN}" doc snippet, no functional consumer found
CLAUDE_CODE_ACT_DONT_REDERIVE - Boolean override for the "act don't re-derive" arm (read via ke.); when unset falls back to feature gate tengu_cedar_lantern (default true).
CLAUDE_CODE_CLASSIFIER_SUMMARY - Selects classifier summary mode: when set truthy -> "llm", set falsy -> "heuristic", unset -> computed default; tengu_cobalt_wren gate can force "heuristic".
CLAUDE_CODE_DEV_RAW_CHANGELOG_URL - [unverified] Registered as a string env var (Ue.str()); name implies a dev override for the raw CHANGELOG.md fetch URL, but no read site found (changelog fetch uses a hardcoded raw.githubusercontent.com/anthropics/claude-code URL)
CLAUDE_CODE_ENABLE_DESIGN_SYNC - [unverified] Registered env flag included in the reported-metadata env allowlist; no functional read site found (companion to CLAUDE_CODE_ENABLE_DESIGN_MCP)
CLAUDE_CODE_FORCE_FULLSCREEN_UPSELL - Forces display of the fullscreen-mode upsell prompt (bypasses dismiss count).
CLAUDE_CODE_FORCE_FULL_LOGO - When set, forces rendering of the full ASCII logo (skips the compact-logo branch).
CLAUDE_CODE_FORCE_TIP_ID - When set (Boolean), forces a fixed spinner tip to display and suppresses normal tip rotation/clearing.
CLAUDE_CODE_GB_BASE_URL - [unverified] String env var (Ue.str) in the env schema, named for the GrowthBook (GB) feature-flag service base URL; no consuming code found in binary.
CLAUDE_CODE_GB_REFRESH_INTERVAL_MS - [unverified] Integer env var (Ue.int) in the env schema, named for the GrowthBook (GB) feature-flag refresh interval in ms; no consuming code found in binary.
CLAUDE_CODE_HIDE_CWD - When set, hides the current working directory from the UI header line.
CLAUDE_CODE_HIDE_SETTINGS_HINT - When truthy, suppresses the settings hint shown on startup.
CLAUDE_CODE_JSONL_TRANSCRIPT - [unverified] String env var (Ue.str) in the env schema; no consuming code found in binary.
CLAUDE_CODE_KB_COHESION_FIXES - Boolean flag (read via ke) enabling "KB cohesion fixes" (Z4 returns true when set), referenced from the keyboard-handling module.
CLAUDE_CODE_MOCK_TRIAL - [unverified] Boolean env var (Ue.bool) in the env schema; no consuming code found in binary.
CLAUDE_CODE_NEW_INIT - A truthy value (or the tengu_slate_harbor_experiment flag) switches /init to the new CLAUDE.md/skills/hooks initialization flow.
CLAUDE_CODE_OVERRIDE_DATE - [unverified] Declared as a string env var (Ue.str); no consuming read found in binary.
CLAUDE_CODE_POWERUP_ONBOARDING - Selects the powerup onboarding arm; accepts "banner" or "step", else falls back to the tengu_birch_lantern flag ("off").
CLAUDE_CODE_SKIP_HFI_VERSION_CHECK - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry alongside provider/proxy flags; no consumer/read site found in the binary.
CLAUDE_CODE_SKIP_PROJECT_BACKFILL - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_SKIP_REPO_UPLOAD - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TAG_ISMETA_MESSAGES - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TWO_STAGE_CLASSIFIER - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_FORCE_DISPLAY_SURVEY - Boolean (ut()); forces the product feedback survey to display (when not previously shown and feedback allowed).
CLAUDE_INTERNAL_FC_OVERRIDES - Internal env key in the background-job providerEnv allowlist (VBr) that is captured from process.env and persisted/restored with jobs (alongside CLAUDE_CONFIG_DIR, AWS_*, GOOGLE_*); override target not further specified in binary.
CLAUDE_PROJECT_UUID - Trimmed project UUID; when set, used to fetch project context/knowledge (getProjectContextBlock) with a timeout.
CLAUDE_REPL_VARIANT - Returns the REPL variant identifier string (YRa returns process.env.CLAUDE_REPL_VARIANT); related to CLAUDE_CODE_REPL gating.
CLAUDE_SNIP - [unverified] String env (k8u=Ue.str schema); only appears in env name-list and getter, no consuming logic found in binary.
DATABASE_URL - Read by a bundled library as a fallback database connection URL (env.DATABASE_URL||env.DATABASEURL); not part of Claude Code's own configuration.
DEMO_VERSION - Overrides the reported version string; when set, the displayed working path becomes "/code/claude".
DS_CHROMIUM_PATH - Custom Chromium executable path passed to Playwright's chromium.launch() when Chromium cannot otherwise be installed.
IS_DEMO - Boolean-truthy; demo mode that suppresses onboarding and hides org/email/organization details in UI.
PLAYWRIGHT_BROWSERS_PATH - [unverified] Declared as a string in the typed env registry (Ue.str, read via ke.PLAYWRIGHT_BROWSERS_PATH); no consumer found in the binary
SCREENSHOT_DIR - Directory where the bundled app-driving helper script saves screenshots; read via ||, default '/tmp/shots'
SHARP_FORCE_GLOBAL_LIBVIPS - Sharp image lib: when truthy (Boolean()), forces use of the globally-installed libvips
SHARP_IGNORE_GLOBAL_LIBVIPS - Sharp image lib: when truthy (Boolean()), skips/ignores the globally-installed libvips
VERBOSE_SSR - In dev builds (import.meta.env.DEV), when set enables verbose server-side-rendering logging

Diff: 2.1.118 -> 2.1.202

Added (300):

AGENT_PROXY_AUTH_TOKEN - Auth token for the Claude Code Remote (CCR) agent proxy; read at startup in initAgentProxy then unset from env, used only when CLAUDE_CODE_REMOTE and CCR_AGENT_PROXY_ENABLED are set with a CLAUDE_CODE_REMOTE_SESSION_ID
AGENT_PROXY_URL - URL of the Claude Code Remote (CCR) agent proxy; read at startup in initAgentProxy then unset from env, gated on CLAUDE_CODE_REMOTE being truthy and CCR_AGENT_PROXY_ENABLED
AI_AGENT - Agent/harness identifier; if unset or starting with "claude-code_"/"claude-code/" it is overwritten with a generated harness id (version-tagged), propagated for telemetry/attribution
ALLOW_ANT_COMPUTER_USE_MCP - [unverified] Boolean env var (Ue.bool()) registered in the env registry; name implies enabling an Anthropic computer-use MCP server, but no consumer found in the binary
ANTHROPIC_BEDROCK_SERVICE_TIER - When set, sent as the X-Amzn-Bedrock-Service-Tier header on Bedrock requests and shown as "Bedrock service tier" in provider diagnostics
ANTHROPIC_DEFAULT_FABLE_MODEL - Override the default Fable model ID; falls back to Fable 5, and enables the custom "fable" selector entry on first-party/gateway providers
ANTHROPIC_DEFAULT_FABLE_MODEL_DESCRIPTION - Description text for the custom Fable model override; falls back to "Custom Fable model"
ANTHROPIC_DEFAULT_FABLE_MODEL_NAME - Display name (label) for the custom Fable model override in the model selector; falls back to the model ID
ANTHROPIC_ENVIRONMENT_ID - Environment ID for Anthropic managed-agent self-hosted sandboxes; read (non-null asserted) by the EnvironmentWorker to identify the self-hosted environment
ANTHROPIC_ENVIRONMENT_KEY - Environment auth key (sk-ant-oat01-... generated in Console) for Anthropic managed-agent self-hosted sandboxes; read by the EnvironmentWorker to authenticate
ANTHROPIC_WORKSPACE_ID - Workspace ID for federation rules scoped to multiple workspaces (env-quad auth); alternative to the 'workspace_id' config key / workspaceId option
ANT_CLAUDE_CODE_METRICS_ENDPOINT - [unverified] String env var registered in the OTEL/telemetry env registry; no consumer found in the binary (Claude Code telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_ENDPOINT - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_ENDPOINT; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_HEADERS - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_HEADERS; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_EXPORTER_OTLP_PROTOCOL - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_EXPORTER_OTLP_PROTOCOL; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_LOGS_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_LOGS_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_METRICS_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_METRICS_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_RESOURCE_ATTRIBUTES - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_RESOURCE_ATTRIBUTES; no consumer found (telemetry reads the standard OTEL_* variables)
ANT_OTEL_TRACES_EXPORTER - [unverified] String env var in the OTEL/telemetry env registry mirroring standard OTEL_TRACES_EXPORTER; no consumer found (telemetry reads the standard OTEL_* variables)
API_MAX_INPUT_TOKENS - [unverified] Integer env var (Ue.int()) registered in the env registry; name implies a maximum input-token limit, but no consumer found in the binary
API_TARGET_INPUT_TOKENS - [unverified] Integer env var (Ue.int()) registered in the env registry; name implies a target input-token count, but no consumer found in the binary
API_TOKEN - [unverified] String env var (Ue.str()) registered in the env registry; only literal reference is an example "Authorization: Bearer ${API_TOKEN}" doc snippet, no functional consumer found
AUTOMODE_DECISION_LOG - When set to "1", enables logging of automode decisions to a .automode_decisions.jsonl file in the working directory
AWS_CONFIG_FILE - Standard AWS SDK config-file path; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_CONTAINER_CREDENTIALS_FULL_URI - Standard AWS SDK container-credentials URI; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_CONTAINER_CREDENTIALS_RELATIVE_URI - Standard AWS SDK relative container-credentials URI; its presence is one of the AWS credential signals checked before injecting placeholder proxy credentials
AWS_ROLE_ARN - Standard AWS SDK var; ARN of the IAM role assumed via AssumeRoleWithWebIdentity (paired with AWS_WEB_IDENTITY_TOKEN_FILE); also a "proxy-injected" placeholder gate for the agent proxy.
AWS_SHARED_CREDENTIALS_FILE - Standard AWS SDK var; path to the shared credentials file for credential resolution; its presence also gates agent-proxy AWS placeholder injection.
AWS_WEB_IDENTITY_TOKEN_FILE - Standard AWS SDK var; path to the web-identity token file used with AWS_ROLE_ARN for AssumeRoleWithWebIdentity credential resolution.
BUF_BIGINT_DISABLE - Set to "1" (compared !=="1") to disable the native BigInt setBigInt64/setBigUint64 fast-path in the @bufbuild/protobuf runtime, forcing the fallback implementation.
BUGHUNTER_FLEET_SIZE - Number of agents in the bughunter fleet, set (String of a server-config value clamped ~5-20) when spawning the fleet; its presence also suppresses the "ccr" environment tag.
CCR_AGENT_PROXY_ENABLED - Boolean (Ue.bool getter); in a Claude Code Remote session, enables the agent proxy (git/gh credential shim) that unsets AGENT_PROXY_URL/AUTH_TOKEN.
CCR_SPAWN_TIMESTAMP_MS - Spawn epoch-ms timestamp (parseInt) used to compute Claude Code Remote startup latency metrics (spawn_to_first_checkpoint_ms, spawn_to_exec_ms, etc.); falls back to CLAUDE_CODE_SPAWN_TIMESTAMP_MS.
CLAUDECODE - Boolean (Ue.bool getter), set to "1" by the CLI to mark that a process is running inside Claude Code.
CLAUDE_AFK_COUNTDOWN_MS - Integer (Ue.int getter); ms threshold before the AFK timeout at which the countdown UI appears (default 20000, min'd with the timeout).
CLAUDE_AFK_TIMEOUT_MS - Integer (Ue.int getter); away-from-keyboard idle timeout in ms before onTimeout fires (default 60000).
CLAUDE_AGENTS_SELECT - String (Ue.str getter) carrying the agent(s) to preselect/auto-open in the FleetView "claude agents" UI; consumed then deleted from the env.
CLAUDE_AX_SCREEN_READER - Tri-state boolean (Ue.triBool getter); enables screen-reader-friendly flat-text output (no borders/animations), overridable by --ax-screen-reader; propagated to children as "1".
CLAUDE_BG_AUTH_SNAPSHOT_PATH - Path to a JSON auth-snapshot file read (then unlinked and unset) to restore credentials in a background session.
CLAUDE_BG_CLAIM_AUTH - String (Ue.str getter) auth token consumed (then deleted) to claim a background session's socket credentials.
CLAUDE_BG_ISOLATION - String (Ue.str getter) selecting background-task isolation mode; recognizes "worktree" or "none", else falls back to the job/config bgIsolation setting.
CLAUDE_BG_MEMORY_TOGGLED_OFF - Set to "1" together with CLAUDE_CODE_SESSION_KIND=="bg" to disable memory in the background session.
CLAUDE_BG_POST_CLEAR_RESPAWN - Boolean (Ue.bool getter) set to "1" when a background session respawns after a /clear (session id changed on retry attempt>1); relaxes --agent validation on respawn.
CLAUDE_BG_PTY_AUTH - Auth token gating DATA access to the background PTY host socket; read then deleted, and overridden by ptyAuth from CLAUDE_BG_SOCKET_TOKENS_PATH if present.
CLAUDE_BG_RENDEZVOUS_SOCK - Path to the background rendezvous Unix socket; when set (and not already serving) Claude creates the bg server on it; consumed and deleted after read.
CLAUDE_BG_RV_AUTH - Auth token for the background rendezvous socket; consumed and deleted after read, and overridden by rvAuth from the socket tokens file if provided.
CLAUDE_BG_SESSION_PERMISSION_RULES - JSON string of {allow:[],deny:[]} permission rules applied only when CLAUDE_CODE_SESSION_KIND==="bg"; parsed via JSON.parse and validated as arrays.
CLAUDE_BG_SOCKET_TOKENS_PATH - Path to a tokens file holding ptyAuth/rvAuth/claimAuth for bg sockets; read to hydrate those auth tokens then unlinked/deleted after read.
CLAUDE_BG_SOURCE - Source label recorded for bg-agent dispatch telemetry (defaults to "shell"); value "spare" also marks a spare-session REPL bridge.
CLAUDE_BG_STARTUP_WEDGE_MS - Milliseconds before the bg startup wedge timeout fires (read via ke.); defaults to 45000.
CLAUDE_BG_TCC_DISCLAIMED - macOS only; when set, Claude skips the TCC responsibility-disclaim relaunch step and deletes the var.
CLAUDE_BRIDGE_BASE_URL - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BRIDGE_OAUTH_TOKEN - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BRIDGE_REATTACH_OUTBOUND_ONLY - Boolean-truthy (ut()) flag marking a bridge reattach as outbound-only; read at reattach and deleted from the environment after read.
CLAUDE_BRIDGE_SESSION_INGRESS_URL - [unverified] Registered as a string env var in the bridge/repl env registry (read via process.env[name]); no consumer found in binary.
CLAUDE_BYTE_STREAM_IDLE_TIMEOUT_MS - Byte-stream idle timeout in ms (Number()); if finite and >0 it overrides the watchdog timeout, otherwise falls back to feature gate tengu_byte_stream_idle_timeout_ms.
CLAUDE_CHROME_CLASSIFIER_FLOOR - Boolean-truthy override enabling the Chrome auto-mode classifier floor; when unset falls back to feature gate tengu_cowork_chrome_automode_default (default false).
CLAUDE_CLIENT_PRESENCE_FILE - Path to a client-presence file; its existence is stat-checked to determine whether a client is present.
CLAUDE_CODE_ACT_DONT_REDERIVE - Boolean override for the "act don't re-derive" arm (read via ke.); when unset falls back to feature gate tengu_cedar_lantern (default true).
CLAUDE_CODE_AGENT - Agent name for the current session; set from the --agent option (process.env is assigned from it) and recorded in session metadata.
CLAUDE_CODE_AGENT_PROXY_GH_SHIM - Boolean-truthy (ke.); when set, writes a gh CLI shim pointing at the agent-proxy port.
CLAUDE_CODE_AGENT_PROXY_GIT_CONFIG - Boolean-truthy (ke.); when set, appends governed git config entries pointing at the agent-proxy port.
CLAUDE_CODE_ALT_SCREEN_FULL_REPAINT - Boolean-truthy; forces full repaint of the alternate screen buffer; defaulted to "1" on Windows/Windows Terminal.
CLAUDE_CODE_ARTIFACT - Boolean toggle for the artifact/frame feature; ut() enables it while Pl() (explicitly-off) disables it.
CLAUDE_CODE_ARTIFACTS_API_BASE_URL - String base-URL override for the Claude Code artifacts API; registered among provider base-URL env vars and stripped from spawned-subprocess environments (direct consumer not observed).
CLAUDE_CODE_ARTIFACT_AUTO_OPEN - When explicitly set (Pl()), suppresses auto-opening the artifact frame (telemetry reason "auto_open_skipped_env").
CLAUDE_CODE_ARTIFACT_DIRECT_UPLOAD - Boolean-truthy (ke.); enables the direct/inline artifact upload lane (also enabled by feature gate tengu_cobalt_plinth_direct).
CLAUDE_CODE_ASSUME_FIRST_PARTY_BASE_URL - Actual name has a leading underscore (CLAUDE_CODE_ASSUME_FIRST_PARTY_BASE_URL); boolean-truthy that forces the configured base URL to be treated as the Anthropic first-party endpoint (zc()).
CLAUDE_CODE_AUTH_FAIL_EXIT_MS - Threshold in ms after which a remote child session exits following continuous auth failure; default 600000, and <=0 disables the exit.
CLAUDE_CODE_AUTO_MODE_EXTERNAL_PERMISSIONS - [unverified] Registered as an env var in the auto-mode env registry; no consumer found in binary.
CLAUDE_CODE_AUTO_MODE_MODEL - [unverified] Registered as a string env var in the model-config env registry (alongside ANTHROPIC_MODEL); no consumer found in binary.
CLAUDE_CODE_BENCH_LIVE_COUNTS - Boolean-truthy; enables live-counts rendering in the Ink renderer (benchmarking instrumentation).
CLAUDE_CODE_BG_CLASSIFIER_MODEL - [unverified] Registered as a string env var in the model-config env registry (background classifier model); no consumer found in binary.
CLAUDE_CODE_BG_TASKS_REPORT_RUNNING - Boolean-truthy (ke.); when set, active teammates/running bg tasks/pending notifications keep the session reported as active (not idle).
CLAUDE_CODE_BRIDGE_SESSION_ID - Set by Claude Code to the current bridge/repl session id (exported for child processes) and deleted when there is no active session.
CLAUDE_CODE_BYOC_ENABLE_DATADOG - Boolean-truthy; in a BYOC environment (CLAUDE_CODE_ENVIRONMENT_KIND==="byoc") Datadog is disabled unless this flag is set.
CLAUDE_CODE_CHILD_SESSION - Set to "1" for child/nested sessions; read (ke.) to detect a child session for team-context and session-persistence decisions, and stripped from freshly spawned subprocess env.
CLAUDE_CODE_CLASSIFIER_SUMMARY - Selects classifier summary mode: when set truthy -> "llm", set falsy -> "heuristic", unset -> computed default; tengu_cobalt_wren gate can force "heuristic".
CLAUDE_CODE_COLD_COMPACT - Boolean-truthy (ut()); enables cold-compaction behavior in the auto-compaction path.
CLAUDE_CODE_COORDINATOR_EXTRA_TOOLS - Comma-separated list of extra tool names permitted for the CCR coordinator (split on ",", trimmed, empties filtered).
CLAUDE_CODE_COORDINATOR_MODE - Boolean-truthy; enables CCR coordinator mode (IA()); also set/cleared to "1" internally when switching session mode.
CLAUDE_CODE_DAEMON_COLD_START - Daemon cold-start mode; accepts "transient" or "ask" from the env, otherwise falls back to settings/default "transient".
CLAUDE_CODE_DD_ERROR_TRACKING_FLUSH_INTERVAL_MS - Datadog error-tracking log flush interval in ms; parseInt with default 30000 (30s)
CLAUDE_CODE_DESIGN_OAUTH_CLIENT_ID - Override the Claude Design OAuth client id (falls back to the build's DESIGN_CLIENT_ID; a placeholder 00000000- id means unconfigured)
CLAUDE_CODE_DEV_RAW_CHANGELOG_URL - [unverified] Registered as a string env var (Ue.str()); name implies a dev override for the raw CHANGELOG.md fetch URL, but no read site found (changelog fetch uses a hardcoded raw.githubusercontent.com/anthropics/claude-code URL)
CLAUDE_CODE_DISABLE_AGENT_VIEW - Disable the agent view UI; equivalent to the disableAgentView setting
CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN - Don't use the terminal alternate-screen buffer (also triggered when CLAUDE_CODE_NO_FLICKER===false)
CLAUDE_CODE_DISABLE_ARTIFACT - Disable the Artifact tool (read via ke.); equivalent to the disableArtifact setting
CLAUDE_CODE_DISABLE_BG_EXIT_HANDOFF - Disable handing off background shells/workflows/agents on exit (returns empty handoff state)
CLAUDE_CODE_DISABLE_BG_SHELL_PRESSURE_REAP - Disable reaping of idle background shells under memory/notification pressure
CLAUDE_CODE_DISABLE_BUNDLED_SKILLS - Hide bundled skills from the model (they stay typable); plugins, .claude/skills and .claude/commands unaffected; equivalent to the disableBundledSkills setting
CLAUDE_CODE_DISABLE_CLAUDE_CODE_SKILL - Skip registering the built-in Claude Code skill
CLAUDE_CODE_DISABLE_EXPLORE_PLAN_AGENTS - Disable the Explore/Plan agents; otherwise gated by tengu_slate_ibis feature flag
CLAUDE_CODE_DISABLE_LAUNCH_COMPOSER - [unverified] Registered env flag with no read site found; the launch-composer feature is stubbed off in this build (isLaunchComposerEnabled/shouldShowLaunchComposer return false)
CLAUDE_CODE_DISABLE_MEMORY_BULK_INFLATE - Disable bulk-inflate (exportAll) of memory stores during multi-store sync; also gated by tengu_memory_bulk_inflate flag
CLAUDE_CODE_DISABLE_MEMORY_PERIODIC_RESYNC - Disable periodic memory-store resync; when unset the interval comes from tengu_memory_store_resync_interval_minutes
CLAUDE_CODE_DISABLE_MOUSE_CLICKS - Disable mouse click handling while keeping scroll (mouse mode 'scroll' instead of 'full'); superseded by CLAUDE_CODE_DISABLE_MOUSE
CLAUDE_CODE_DISABLE_NESTED_CHAIN_IDLE - Disable nested-prompt-blocking idle notifications for nested agent chains
CLAUDE_CODE_DISABLE_NOTIFICATION_PRESENCE_CHECK - Skip the user-presence check before sending notifications (otherwise a present user suppresses them)
CLAUDE_CODE_DISABLE_REFUSAL_FALLBACK - Disable switching models as a fallback when the model refuses; otherwise also gated by the switchModelsOnFlag setting
CLAUDE_CODE_DISABLE_WORKFLOWS - Disable workflows; equivalent to the disableWorkflows setting; also gated by the allow_workflows permission
CLAUDE_CODE_DISABLE_WORKING_SYNC - Disable the synced-file syncer for remote SDK sessions (skips startSyncedFileSyncer)
CLAUDE_CODE_ENABLE_AUTO_MODE - Opt-in to enable Claude Code auto (permission) mode for third-party providers; first-party and anthropicAws are enabled automatically
CLAUDE_CODE_ENABLE_DESIGN_MCP - Enable the Claude Design MCP (http) server; when unset falls back to a feature-flag default
CLAUDE_CODE_ENABLE_DESIGN_SYNC - [unverified] Registered env flag included in the reported-metadata env allowlist; no functional read site found (companion to CLAUDE_CODE_ENABLE_DESIGN_MCP)
CLAUDE_CODE_ENABLE_FEEDBACK_SURVEY_FOR_OTEL - Allow the feedback survey to show even when OTEL/telemetry reporting is enabled
CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY - Enable gateway model discovery; requires first-party auth, non-Anthropic endpoint, and ANTHROPIC_BASE_URL set
CLAUDE_CODE_ENABLE_LAUNCH_COMPOSER - [unverified] Registered env flag with no read site found; the launch-composer feature is stubbed off in this build (isLaunchComposerEnabled/shouldShowLaunchComposer return false)
CLAUDE_CODE_ENABLE_MENU_KIND_LANES - Enable grouping menu entries into 'kind lanes'; otherwise gated by tengu_mint_lanes feature flag
CLAUDE_CODE_ENABLE_OPUS_4_7_FAST_MODE - [unverified] Registered env flag with no read site found; name implies enabling opus-4-7 fast mode (otherwise gated by tengu_sunset_penguin_opus47), but effect not wired in this build
CLAUDE_CODE_ENABLE_REMOTE_RECAP - Override remote recap; when unset defaults to the tengu_harbor_moth feature flag
CLAUDE_CODE_EXPERIMENTAL_OBSERVER_AGENTS - Truthy flag enabling observer agents; also requires background tasks not disabled and the tengu_observer_agents_enabled flag.
CLAUDE_CODE_FABLE_BRIDGE_DIALOG_TIMEOUT_MS - Timeout in ms for the Fable bridge dialog; uses the value when >0, otherwise defaults to 60000.
CLAUDE_CODE_FORCE_BRIDGE - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_CODE_FORCE_EVALUATE_MEMORY - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_CODE_FORCE_MEMORY_SURVEY - [unverified] Boolean env var (Ue.bool) declared in the env schema; no consuming code found in binary.
CLAUDE_CODE_FORCE_MID_CONVERSATION_SYSTEM - When truthy, forces the mid_conversation_system prompting behavior on (bypasses the per-model/settings gating).
CLAUDE_CODE_FORCE_SESSION_PERSISTENCE - When set, forces session persistence by disabling the child-session logic that would otherwise skip persisting.
CLAUDE_CODE_FORCE_STRIKETHROUGH - When set, forces terminal strikethrough support to be treated as available.
CLAUDE_CODE_FORCE_SYNC_OUTPUT - When truthy, forces synchronized terminal output mode regardless of the detected terminal.
CLAUDE_CODE_FORCE_TIP_ID - When set (Boolean), forces a fixed spinner tip to display and suppresses normal tip rotation/clearing.
CLAUDE_CODE_FRAME_TIMING_SAMPLE_EVERY - Sample-every-N-frames interval for frame-timing logging; coerced via Math.max(1, value||1), default 1.
CLAUDE_CODE_GB_BASE_URL - [unverified] String env var (Ue.str) in the env schema, named for the GrowthBook (GB) feature-flag service base URL; no consuming code found in binary.
CLAUDE_CODE_GB_REFRESH_INTERVAL_MS - [unverified] Integer env var (Ue.int) in the env schema, named for the GrowthBook (GB) feature-flag refresh interval in ms; no consuming code found in binary.
CLAUDE_CODE_GZIP_REQUEST_BODIES - Enables gzip compression of API request bodies; defaults to the tengu_gzip_request_bodies feature flag (false).
CLAUDE_CODE_HFI_BEARER_TOKEN - [unverified] String env var (Ue.str) in the env schema, grouped with host/OAuth auth vars (HFI); no consuming code found in binary.
CLAUDE_CODE_HIDE_CWD - When set, hides the current working directory from the UI header line.
CLAUDE_CODE_HIDE_SETTINGS_HINT - When truthy, suppresses the settings hint shown on startup.
CLAUDE_CODE_HOST_AUTH_ENV_VAR - Names the env var holding the host-provided auth token (default ANTHROPIC_AUTH_TOKEN); its presence marks the session as managed-by-host.
CLAUDE_CODE_HOST_AUTH_REFRESH_TIMEOUT_MS - Timeout in ms (Number) for host auth token refresh; used when CLAUDE_CODE_SDK_HAS_HOST_AUTH_REFRESH is set.
CLAUDE_CODE_HOST_CREDS_FILE - Path to a host credentials file loaded when the provider is managed-by-host; must be absolute, <=65536 bytes, and (non-Windows) owner-only readable or it is ignored.
CLAUDE_CODE_INVESTIGATE_FIRST - Sets investigate-first mode ("additive"/"compact"/off; truthy maps to additive) for claude-opus-4-7 only; otherwise defaults to the tengu_slate_harrier flag.
CLAUDE_CODE_JSONL_TRANSCRIPT - [unverified] String env var (Ue.str) in the env schema; no consuming code found in binary.
CLAUDE_CODE_KB_COHESION_FIXES - Boolean flag (read via ke) enabling "KB cohesion fixes" (Z4 returns true when set), referenced from the keyboard-handling module.
CLAUDE_CODE_LOOP_KEEPALIVE - Truthy-enables autonomous-loop keepalive; otherwise defaults to the tengu_kairos_loop_keepalive flag.
CLAUDE_CODE_LOOP_PERSISTENT - Truthy-enables the persistent autonomous loop; otherwise defaults to the tengu_kairos_loop_persistent flag.
CLAUDE_CODE_MANAGED_SETTINGS_PATH - Path to managed (admin) settings; Claude Code sets it to the config dir when spawning host/sandbox child processes.
CLAUDE_CODE_MAX_TURNS - Max agentic turns; parsed as a positive integer (throws on non-positive/invalid); used as the fallback when not passed as an option.
CLAUDE_CODE_MCP_AUTO_BACKGROUND_MS - [unverified] Integer env var (Ue.int) in the env schema; no consuming code found in binary.
CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT - Idle timeout in ms for MCP tool responses before aborting; clamped to a min of 1000 and a per-tool max, with 0 disabling.
CLAUDE_CODE_MID_CONVERSATION_SYSTEM - [unverified] String env var (Ue.str) in the env schema (related to CLAUDE_CODE_FORCE_MID_CONVERSATION_SYSTEM); no consuming code found in binary.
CLAUDE_CODE_MOCK_REMOTE_SETTINGS - [unverified] Boolean env var listed in the remote-settings override group (alongside CLAUDE_CODE_REMOTE_SETTINGS_PATH) to mock remote settings value-read code not found in binary.
CLAUDE_CODE_MOCK_TRIAL - [unverified] Boolean env var (Ue.bool) in the env schema; no consuming code found in binary.
CLAUDE_CODE_NATIVE_CURSOR - Truthy-enables native cursor rendering; also on under accessibility mode; otherwise defaults to the tengu_native_cursor flag.
CLAUDE_CODE_OAUTH_401_WAIT_MS - Integer ms wait window for OAuth 401 recovery/retry; returns the set value, else 60000 when CLAUDE_CODE_REMOTE_SESSION_ID is set, else 0.
CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE - [unverified] Declared as a string env var (Ue.str) in the fast-mode model env group; no consuming read found in binary.
CLAUDE_CODE_OTEL_DIAG_STDERR - When truthy, writes OTEL diagnostic error messages to stderr; its presence also prevents stripping OTEL env vars from subprocesses.
CLAUDE_CODE_OVERRIDE_DATE - [unverified] Declared as a string env var (Ue.str); no consuming read found in binary.
CLAUDE_CODE_OWNERSHIP_FRAME - Arms the "ownership frame" experiment (source=env); otherwise gated by the tengu_walnut_prism feature flag.
CLAUDE_CODE_PACKAGE_MANAGER_AUTO_UPDATE - Boolean (ut); enables auto-updating Claude Code via the host package manager (homebrew/winget).
CLAUDE_CODE_PARKED_PERMISSION_WAIT_MS - Integer ms wait for parked-permission prefetch; defaults to 2000.
CLAUDE_CODE_PERFETTO_WRITE_INTERVAL_S - [unverified] Declared as an integer env var (Ue.int) in the Perfetto tracing env group; no consuming read found in binary.
CLAUDE_CODE_PEWTER_OWL - Master override for the "pewter_owl" experiment (header/tool/brief variants); if unset, falls back to model allowlist and tengu_pewter_owl* flags.
CLAUDE_CODE_PEWTER_OWL_TOOL - Override for the pewter_owl tool variant specifically; if unset, falls back to hro("pewter_owl_tool") gating.
CLAUDE_CODE_PLUGIN_BINARY_ASSETS - Enables plugin binary assets; if unset, gated by the tengu_plugin_binary_assets flag.
CLAUDE_CODE_PLUGIN_PREFER_HTTPS - Boolean (ut); prefers HTTPS over SSH for plugin git operations (also forced in remote mode).
CLAUDE_CODE_POWERSHELL_RESPECT_EXECUTION_POLICY - When unset/false, appends "-ExecutionPolicy Bypass" to PowerShell args; when truthy, respects the system execution policy.
CLAUDE_CODE_POWERUP_ONBOARDING - Selects the powerup onboarding arm; accepts "banner" or "step", else falls back to the tengu_birch_lantern flag ("off").
CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS - Max ms to wait for background tasks before terminating in print mode; default 600000, set 0 to wait indefinitely.
CLAUDE_CODE_PROACTIVE - Boolean (ut); enables proactive assistant mode.
CLAUDE_CODE_PROFILE_QUERY - Boolean (ut); enables query profiling (set =1; otherwise "Query profiling not enabled").
CLAUDE_CODE_PROPAGATE_TRACEPARENT - Boolean (ut); propagates the W3C traceparent header on outbound API requests.
CLAUDE_CODE_REMOTE_HERMETIC_MODE - With CLAUDE_CODE_REMOTE set, enables hermetic mode which filters/drops MCP servers.
CLAUDE_CODE_REMOTE_RAW_EVENTS_FILE - [unverified] Declared as a string env var (Ue.str) in the remote env group; no consuming read found in binary.
CLAUDE_CODE_REMOTE_SETTINGS_PATH - Path to a local override file for remote managed settings; when set, uses it and skips the API fetch.
CLAUDE_CODE_REMOTE_SETTINGS_POLL_MS - [unverified] Declared as an integer env var (Ue.int) in the remote-settings env group; no consuming read found in binary.
CLAUDE_CODE_RESUME_PROMPT - Custom prompt text used when resuming; defaults to "Continue from where you left off."
CLAUDE_CODE_SAFE_MODE - Boolean (ut) or --safe-mode flag; enables safe mode, forcing CLAUDE_CODE_DISABLE_CLAUDE_MDS=1 and dropping MCP servers.
CLAUDE_CODE_SDK_HAS_HOST_AUTH_REFRESH - Boolean (ut); when set and host-managed, registers an SDK host auth token refresh callback (timeout from CLAUDE_CODE_HOST_AUTH_REFRESH_TIMEOUT_MS).
CLAUDE_CODE_SESSION_ID - Holds the current session identifier; if set, it is regenerated to the new session id on a conversation_reset event.
CLAUDE_CODE_SESSION_KIND - Read directly; when equal to "bg", "daemon", or "daemon-worker" marks the session as a background/daemon session (rs()==="bg"), forcing alt-screen/flicker behavior and non-interactive paths.
CLAUDE_CODE_SESSION_LOG - Path recorded as logPath in session metadata where the session log is written.
CLAUDE_CODE_SESSION_NAME - Overrides the session name (used before falling back to a derived name).
CLAUDE_CODE_SHOJI_ENGINE - Boolean-truthy (ut()) that enables the internal "shoji engine"; otherwise falls back to GrowthBook flag tengu_shoji_engine (default false).
CLAUDE_CODE_SKILL_DESC_REFRAME - Boolean-truthy (via ke) enabling the skill-description-reframe arm; otherwise falls back to GrowthBook flag tengu_russet_linnet (default false).
CLAUDE_CODE_SKIP_HFI_VERSION_CHECK - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry alongside provider/proxy flags; no consumer/read site found in the binary.
CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS - Boolean env flag (Ue.bool()); when set, plugin-provided MCP servers are not launched (logged "(CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS is set)"), except those listed in CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT.
CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT - String env var (Ue.str()) listing plugin MCP servers exempted from CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS (logged "exempted via CLAUDE_CODE_SKIP_PLUGIN_MCP_SERVERS_EXCEPT").
CLAUDE_CODE_SKIP_PROJECT_BACKFILL - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_SKIP_REPO_UPLOAD - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_SPAWN_TIMESTAMP_MS - Integer spawn epoch-ms (parseInt); with CCR_SPAWN_TIMESTAMP_MS taking precedence, used to compute the spawn_to_first_checkpoint_ms telemetry metric.
CLAUDE_CODE_STOP_HOOK_BLOCK_CAP - Integer cap (parseInt, default 8) on how many consecutive Stop-hook blocks are allowed before the loop stops (only enforced when >0).
CLAUDE_CODE_SUBAGENT_CACHE_EVICT - Boolean-truthy (via ke) enabling evict-on-complete prompt-cache control for subagents (only for firstParty/anthropicAws); otherwise falls back to GrowthBook flag tengu_subagent_cache_evict (default false).
CLAUDE_CODE_SUPERVISED - Boolean-truthy (ut(), memoized); marks the process as supervised so uncaught exceptions/unhandled rejections are logged specially rather than exiting immediately.
CLAUDE_CODE_SUPPRESS_SESSION_ATTRIBUTION - Boolean env flag (via ke); when set, suppresses session-URL attribution (returns null instead of the session attribution info).
CLAUDE_CODE_SYNC_PLUGINS - Boolean-truthy (ut()) enabling synchronous plugin sync/reconcile at startup.
CLAUDE_CODE_SYNC_PLUGINS_BUFFERED_DOWNLOAD - Boolean env flag (via ke); when set, uses the buffered plugin-download code path (Otf) instead of the streaming/stall-guarded one.
CLAUDE_CODE_SYNC_PLUGINS_DOWNLOAD_STALL_MS - Integer ms (via ke) for the plugin-download stall timeout; defaults to 60000.
CLAUDE_CODE_SYNC_PLUGINS_INSTALL_TIMEOUT_MS - Integer ms (parseInt) plugin-sync install timeout; defaults to 30000 when unset or not >0.
CLAUDE_CODE_SYNC_PLUGINS_MCP_TIMEOUT_MS - Integer ms (parseInt) plugin-sync MCP timeout; used if finite and >=0, otherwise defaults to 10000.
CLAUDE_CODE_SYNC_SKILLS - Boolean-truthy (ut()) enabling synchronous skill sync/install.
CLAUDE_CODE_SYNC_SKILLS_INSTALL_TIMEOUT_MS - Integer ms (via ke) skill-sync install timeout; defaults to 30000 when unset or not >0.
CLAUDE_CODE_SYNC_SKILLS_WAIT_TIMEOUT_MS - Integer ms (via ke) to wait for skill sync; defaults to 5000 when unset or not >0.
CLAUDE_CODE_TAG_ISMETA_MESSAGES - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TEE_SDK_STDOUT - Boolean-truthy (ut()) that tees SDK transport stdout (sets teeStdout).
CLAUDE_CODE_TERMINAL_MCP_TOOLS - Comma-separated list of MCP tool names (split/trim/filter into a Set); tool_use of these tools is treated as terminal/end-turn content.
CLAUDE_CODE_TERMINAL_RECORDING - [unverified] Registered as a string env var (Ue.str()) in the typed env registry (grouped with recording/logging vars); no consumer/read site found in the binary.
CLAUDE_CODE_TEST_FORCE_DENY - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TEST_NO_GIT_BASH - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TEST_NO_PWSH - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_TODO_REMINDER_MODE - String override (via ke) for the todo-reminder mode; when unset, mode comes from GrowthBook tengu_soft_slate_nudge ("off" or "baseline").
CLAUDE_CODE_TOTAL_TOKENS_REMINDER - Overrides the totalTokensReminder mode (off/infinite/fixed/countdown/padded-countdown) that emits a <total_tokens>N tokens left</total_tokens> block; else from settings or GrowthBook tengu_lapis_anchor (default "off").
CLAUDE_CODE_TOTAL_TOKENS_REMINDER_AFTER_USER_TURN - Overrides whether the total-tokens reminder is also emitted after each regular user prompt (re-anchoring padded-countdown); defaults off, server-controlled via GrowthBook tengu_lapis_anchor_user_turn.
CLAUDE_CODE_TOTAL_TOKENS_REMINDER_BUDGET - Overrides the starting budget (tokens) for totalTokensReminder 'padded-countdown' mode; defaults to 15000000, server-controlled via GrowthBook.
CLAUDE_CODE_TWO_STAGE_CLASSIFIER - [unverified] Registered as a boolean env var (Ue.bool()) in the typed env registry; no consumer/read site found in the binary.
CLAUDE_CODE_USER_DIALOG_TIMEOUT_MS - Integer ms timeout (via ke) for user dialogs; defaults to 300000.
CLAUDE_CODE_USE_GATEWAY - Boolean (ut()); enables Cloud gateway provider mode requiring ANTHROPIC_BASE_URL and ANTHROPIC_AUTH_TOKEN; changes token-expiry message to "refresh ANTHROPIC_AUTH_TOKEN and restart".
CLAUDE_CODE_USE_NATIVE_FILE_SEARCH - [unverified] Boolean env (x3u=Ue.bool schema) registered in the env schema; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_CODE_VERIFY_PROMPT - Boolean (ut()); arms the verify-prompt feature (logs verify_prompt_arm_active source=env), otherwise gated by tengu_sparrow_ledger flag.
CLAUDE_CODE_VOICE_FORWARD_INTERIMS_TYPED - Boolean (ut()); when set, forwards interim typed voice-transcription results, otherwise gated by tengu_brick_follow flag.
CLAUDE_CODE_WEBFETCH_USE_CCR_PROXY - Truthy read (ke.); when firstParty provider and CCR active, routes the WebFetch tool through the CCR proxy (web-fetch route).
CLAUDE_CODE_WEBSEARCH_USE_CCR_PROXY - Truthy read (ke.); when firstParty provider and CCR active, routes the WebSearch tool through the CCR proxy (web-search route).
CLAUDE_CODE_WORKFLOWS - Boolean; when truthy (ut()) makes Workflows available gated by tengu_workflows_enabled (default true); when explicitly disabled (Pl()) marks Workflows unavailable.
CLAUDE_CONTEXT_COLLAPSE - [unverified] Boolean env (Vju=Ue.bool schema) in the model-config schema associated with the context-collapse feature (snapshots/commits/resets); only in name-list/getter, no consuming read found in binary.
CLAUDE_CONTEXT_COLLAPSE_MODEL - [unverified] String env (Gju=Ue.str schema) in the model-config schema, apparently a model override for the context-collapse feature; only in name-list/getter, no consuming read found in binary.
CLAUDE_COWORK_MEMORY_GUIDELINES - Guidelines text for auto memory; when set (with team memory enabled) prepends "# auto memory" guidelines and triggers memory_load_prompt.
CLAUDE_COWORK_MEMORY_INDEX_CONTENT - Provides auto-memory index content directly (parsed via FMp) instead of loading from disk; empty string ("") disables/skips the auto-memory index entry.
CLAUDE_DISABLE_ADOPT - Boolean (ke.); when set, disables adoption of detached background shell tasks (iKr returns !CLAUDE_DISABLE_ADOPT).
CLAUDE_ENABLE_BYTE_WATCHDOG_BEDROCK - Boolean (ut()); enables the byte-stream watchdog for the Bedrock provider (cGs gate feeding the overall watchdog eligibility check).
CLAUDE_GATEWAY_ALLOW_LOOPBACK - Boolean (ut()); when set, allows loopback/IPv4-mapped addresses in the gateway address validation (E0n).
CLAUDE_GATEWAY_LOG_LEVEL - Sets the gateway logger level (lowercased, looked up in level map S0n); defaults to "info" when unset or unrecognized.
CLAUDE_IMPORT_CONVERSATIONS - Boolean (ut()); gates the import-conversations feature (returns "import-conversations is not enabled" when unset).
CLAUDE_INTERNAL_ASSISTANT_TEAM_NAME - Sets the inherited assistant team name for the session; read once then deleted from process.env (stored via Xdr).
CLAUDE_INTERNAL_FC_OVERRIDES - Internal env key in the background-job providerEnv allowlist (VBr) that is captured from process.env and persisted/restored with jobs (alongside CLAUDE_CONFIG_DIR, AWS_, GOOGLE_); override target not further specified in binary.
CLAUDE_INTERNAL_WARM_RESUME_QA - [unverified] Boolean env (Mqu=Ue.bool schema) named for warm-resume QA; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_JOB_DIR - Directory for a background job/session; stores bg exit cause file, tmp files, and job state; basename used as jobId; validated under the config jobs/ dir for bg sessions.
CLAUDE_MEMORY_STORES - JSON config of memory stores (parsed; throws if invalid JSON); when non-empty enables team/persistent memory features and blocks default team memory dir.
CLAUDE_MOCK_HEADERLESS_429 - [unverified] Boolean env (MWu=Ue.bool schema) in the streaming/watchdog schema group, name implies mocking a headerless HTTP 429; only in name-list/getter, no consuming logic found in binary.
CLAUDE_PREVIEW_CLASSIFIER_FLOOR - Boolean (ke.CLAUDE_PREVIEW_CLASSIFIER_FLOOR??false); enables the "preview classifier floor" (previewClassifierFloorEnabled) alongside the cowork/chrome automode classifier settings.
CLAUDE_PROJECT_UUID - Trimmed project UUID; when set, used to fetch project context/knowledge (getProjectContextBlock) with a timeout.
CLAUDE_PTY_HEARTBEAT_MS - Integer (Number) PTY server heartbeat/ping interval in ms, default 60000 (non-Windows); missed pings (>=3) destroy the connection.
CLAUDE_PTY_HOST_EXEC - When "1", the PTY exec runs on the host; read once then deleted from process.env.
CLAUDE_PTY_ORPHAN_CHECK_MS - Integer (Number) interval in ms for the PTY orphan check, default 2000; after ~30 misses with no parent/connections it exits as orphaned.
CLAUDE_PTY_RECORD - Configures PTY session recording (passed to G1m with terminal dimensions); registered in the same group as CLAUDE_CODE_TERMINAL_RECORDING.
CLAUDE_REMOTE_WORKFLOW_ARGS - JSON args (ke.) for the remote (CCR) workflow script; JSON.parse'd, size-limited to 524288 bytes; errors reported as args-too-large/args-parse.
CLAUDE_REMOTE_WORKFLOW_SCRIPT - Shell/workflow script (ke.) delivered via env for a remote (CCR) session; deterministic entry point, validated (<=524288 bytes, no control chars); missing yields env-missing.
CLAUDE_RUNNER_ACTIVITY_FD - Integer file descriptor (>2, must be a pipe/socket per fstat) that the SDK runner uses to signal activity; ignored if not a FIFO/socket.
CLAUDE_RUNNER_DISABLE_AWAITING_ACTION_OVERRIDE - [unverified] Boolean env (B3u=Ue.bool schema) in the runner/disable schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_RUNNER_FETCH_DEPTH - [unverified] String env (x8u=Ue.str schema) in the runner schema group (name suggests a fetch/clone depth); only in name-list/getter, no consuming logic found in binary.
CLAUDE_SECURESTORAGE_CONFIG_DIR - Overrides the config dir used for secure storage of credentials (.oauth_token/.api_key/.session_ingress_token), NFC-normalized; forwarded to child processes.
CLAUDE_SERVE_DRAIN_TIMEOUT_MS - [unverified] Integer env (fju=Ue.int schema), name implies a serve-mode drain timeout in ms; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_SNIP - [unverified] String env (k8u=Ue.str schema); only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_SSH_LOCAL_BINARY - [unverified] String env (I8u=Ue.str schema) in the SSH-related schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_SSH_VERSION - [unverified] String env (H8u=Ue.str schema) in the SSH-related schema group; only appears in env name-list and getter, no consuming logic found in binary.
CLAUDE_STAGE_FILE_ROOT - Root directory (ke., must be an absolute path or it throws) for staging files synced/pushed to the remote workspace mount; unset falls back to DEFAULT_STAGE_FILE_ROOT and read-only mounts no-op.
CLAUDE_SUBAGENT_BG_SHELL_MAX_MS - Integer (parseInt) max runtime in ms for a subagent background shell; default 3600000 (1h).
CLAUDE_WORKFLOW_NAME_ONLY - Boolean (ke.); when set, restricts the Workflow tool to named bundled workflows only, throwing if a scriptPath workflow is requested.
CLOUDSDK_AUTH_ACCESS_TOKEN - Google Cloud SDK OAuth access token for Vertex AI auth; if it and GOOGLE_APPLICATION_CREDENTIALS are both unset, the proxy/bridge injects the placeholder value "proxy-injected".
COMSPEC - Windows command interpreter path; used as fallback after SHELL to detect the shell name.
DATABASE_URL - Read by a bundled library as a fallback database connection URL (env.DATABASE_URL||env.DATABASEURL); not part of Claude Code's own configuration.
DEBUG_CLAUDE_AGENT_SDK - When truthy, writes Agent SDK debug logs to a per-session file (debug/sdk-.txt).
DISABLE_BRIEF_MODE_STOP_HOOK - When truthy, disables the brief-mode Stop hook that runs after the main thread when brief mode and the brief tool are enabled.
DISABLE_GROWTHBOOK - Disables the GrowthBook feature-flag/experimentation service (V8() returns false when set); also blocks Remote Control.
DISABLE_PROMPT_CACHING_FABLE - Truthy value disables prompt caching for Fable models.
DISABLE_PROMPT_CACHING_MYTHOS - Disables prompt caching for Mythos models (checked via ke.DISABLE_PROMPT_CACHING_MYTHOS).
DISPLAY - X11 display; required for xclip/xsel clipboard on Linux and passed to child processes (defaulting to ":99" if unset).
DS_CHROMIUM_PATH - Custom Chromium executable path passed to Playwright's chromium.launch() when Chromium cannot otherwise be installed.
EMBEDDED_SEARCH_TOOLS - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_LOCKLESS_UPDATES - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_LSP_TOOL - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_PID_BASED_VERSION_LOCKING - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_SESSION_BACKGROUNDING - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consuming code found in the binary.
ENABLE_SESSION_PERSISTENCE - [unverified] Declared in the env-var schema as a boolean flag (Ue.bool()); no consumer found (session-persistence gating in code uses TEST_ENABLE_SESSION_PERSISTENCE instead).
ENVIRONMENT_SERVICE_KEY - [unverified] Declared as a string in the OAuth/secrets env schema (Ue.str()); no consuming code found in the binary.
FORCE_VCR - [unverified] Registered as a boolean env-backed feature flag (R4u=Ue.bool()) alongside USE_API_* flags; name suggests VCR fixture replay (cf. VCR_RECORD) but no direct usage found in binary.
GCM_INTERACTIVE - For git subprocesses, Claude forces GCM_INTERACTIVE="never" when the user hasn't set it, disabling Git Credential Manager interactive prompts (k6t defaults).
GH_ENTERPRISE_TOKEN - GitHub Enterprise auth token; used (GH_ENTERPRISE_TOKEN||GITHUB_ENTERPRISE_TOKEN) when the target host matches GH_HOST for gh PR/auth lookups.
GH_HOST - Configured GitHub Enterprise host; NTr(process.env.GH_HOST,e) tests whether a host is the GHE host to select the enterprise token; also passed to gh shim.
GH_TOKEN - GitHub CLI auth token for github.com (GH_TOKEN||GITHUB_TOKEN); used for gh PR/auth lookups and set to "proxy-injected" placeholder when proxy handles auth.
GITHUB_ENTERPRISE_TOKEN - GitHub Enterprise auth token fallback (GH_ENTERPRISE_TOKEN||GITHUB_ENTERPRISE_TOKEN) for GHE hosts matching GH_HOST.
GIT_ASKPASS - For git subprocesses, Claude forces GIT_ASKPASS="" when the user hasn't set it to disable the interactive credential askpass helper (k6t defaults).
GIT_CONFIG_COUNT - Existing count of ad-hoc git config entries; read and extended (GIT_CONFIG_KEY_N/VALUE_N) to inject credential.interactive=false into git subprocesses.
GIT_CONFIG_GLOBAL - Path to the isolated global git config file; agent-proxy governed git config is written here, and the arm is skipped if unset (refuses to write a shared global config).
GIT_SSH_COMMAND - Set for git subprocesses to configure ssh (StrictHostKeyChecking, ControlMaster/Path disabled, nc/socat ProxyCommand) when routing through the agent proxy; user value preserved via ke.
GIT_TERMINAL_PROMPT - For git subprocesses, Claude forces GIT_TERMINAL_PROMPT="0" when the user hasn't set it, disabling interactive terminal credential prompts (k6t defaults).
GOOGLE_CLOUD_WORKSTATIONS - Boolean-truthy; presence detects a GCP Cloud Workstations environment (returns "gcp-cloud-workstations").
INK_SCREEN_READER - Boolean-truthy (ut); when set on a TTY, enables Ink screen-reader rendering mode (isScreenReaderEnabled).
INTELLIJ_TERMINAL_COMMAND_BLOCKS - Presence (defined) detects the JetBrains/IntelliJ terminal command-blocks feature, enabling related terminal handling (qNr sets jio=true).
INTELLIJ_TERMINAL_COMMAND_BLOCKS_REWORKED - Presence (defined) detects the reworked IntelliJ terminal command-blocks feature, enabling related terminal handling (qNr sets jio=true).
JAVA_HOME - Java installation root; JAVA_HOME/bin/keytool is used to locate the keytool binary for reading the Java CA truststore.
JAVA_TOOL_OPTIONS - Read when building sandbox subprocess env under weaker network isolation; appends -Djava.net.preferIPv4Stack=true to JAVA_TOOL_OPTIONS.
MCP_CONNECT_TIMEOUT_MS - MCP server connect timeout in ms; read as int via ke.MCP_CONNECT_TIMEOUT_MS, used if >0 else default 5000
NODE_USE_ENV_PROXY - Truthy flag read by shouldUseEnvProxy(); false when unset/"0", otherwise makes Node's built-in fetch honor http(s)proxy env vars (Node >=22.21)
OTEL_EXPORTER_OTLP_LOGS_ENDPOINT - Logs-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP{LOGS}ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_EXPORTER_OTLP_METRICS_ENDPOINT - Metrics-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP{METRICS}ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_EXPORTER_OTLP_TRACES_ENDPOINT - Traces-specific OTLP endpoint override; read via OTEL_EXPORTER_OTLP{TRACES}_ENDPOINT, falls back to OTEL_EXPORTER_OTLP_ENDPOINT
OTEL_LOG_ASSISTANT_RESPONSES - Tri-state boolean (ke.OTEL_LOG_ASSISTANT_RESPONSES); when truthy logs assistant response text in telemetry (else redacted), falling back to OTEL_LOG_USER_PROMPTS
OTEL_RESOURCE_ATTRIBUTES - Standard OTEL resource attributes (key=value list) parsed by the SDK EnvDetector into resource attributes; also registered as a string in the env registry
PLAYWRIGHT_BROWSERS_PATH - [unverified] Declared as a string in the typed env registry (Ue.str, read via ke.PLAYWRIGHT_BROWSERS_PATH); no consumer found in the binary
SCREENSHOT_DIR - Directory where the bundled app-driving helper script saves screenshots; read via ||, default '/tmp/shots'
SDK_NATIVE_BIN - Base name of the native SDK binary used when locating/launching the per-platform executable (linux/darwin/android/win32, .exe/-musl variants); read via ??, default 'claude'
SRT_WIN_PATH - Override path to the sandbox-runtime Windows binary (srt-win.exe); if set and the file exists it is used, otherwise vendor srt-win dirs are searched
SSH_AUTH_SOCK - SSH agent socket path; its absence (together with GIT_SSH_COMMAND unset) is checked to gate git/GitHub SSH auth behavior
TEMP - Windows-style temp dir; third fallback in Node os.tmpdir() chain (TMPDIR || TMP || TEMP || '/tmp')
TMP - Temp dir; second fallback in Node os.tmpdir() chain (TMPDIR || TMP || TEMP || '/tmp')
TMPDIR - Primary temp directory; first in Node os.tmpdir() chain and forwarded into the env of spawned bash subprocesses
ULTRAPLAN_PROMPT_FILE - [unverified] String env var (Ue.str()) registered in the env registry (Ultraplan/workflow family); no direct read found in binary; name implies a file supplying the Ultraplan prompt
USE_API_CLEAR_TOOL_RESULTS - [unverified] Boolean env flag (Ue.bool()) registered alongside USE_API_CONTEXT_MANAGEMENT; no consumption found in binary; name implies gating API context-editing to clear tool results
USE_API_CLEAR_TOOL_USES - [unverified] Boolean env flag (Ue.bool()) registered alongside USE_API_CONTEXT_MANAGEMENT; no consumption found in binary; name implies gating API context-editing clear_tool_uses
WAYLAND_DISPLAY - Wayland display; presence selects wl-copy for Linux clipboard and, when absent with DISPLAY unset, marks a headless Linux session

Removed (5):

CCR_UPSTREAM_PROXY_ENABLED - Enable upstream proxy for Claude Code Remote. Requires CLAUDE_CODE_REMOTE and CLAUDE_CODE_REMOTE_SESSION_ID
CLAUDE_CODE_AGENT_COST_STEER - Override agent cost-based steering. Defaults based on subscription tier (pro/max) via feature flag
CLAUDE_CODE_AGENT_LIST_IN_MESSAGES - Override whether the agent list is attached to messages. Defaults to tengu_agent_list_attach feature flag
CLAUDE_CODE_TEAM_ONBOARDING - Enable the team-onboarding command. Also gated by tengu_flint_harbor feature flag
CLOUD_WORKSTATIONS_CLUSTER_ID - Google Cloud Workstations cluster ID. Used for platform detection