Admin and managed settings now merge their env blocks instead of one replacing the other; you can opt out.
What's wrong with this entry?
Managed and admin settings tiers used to let the winning tier's env replace the ones below it; the blocks are now merged key by key.
- merging is case-insensitive for a known prefix set, and accounts for OTel-header helpers and per-tier suppression sets
- set
CLAUDE_CODE_DISABLE_ADMIN_ENV_UNIONto true to restore replace-wins behaviour - diagnostic counters record whether the union changed the effective env and which tiers were present
CLAUDE_CODE_MANAGED_SETTINGS_PATHandCLAUDE_CODE_DISABLE_ADMIN_ENV_UNIONwere added to the settings env allowlists and the sensitive/managed env sets, alongside new local-OAuth and bridge dev variablesCLAUDE_BRIDGE_BASE_URL,CLAUDE_BRIDGE_OAUTH_TOKENandCLAUDE_BRIDGE_SESSION_INGRESS_URL
CLAUDE_CODE_DISABLE_ADMIN_ENV_UNION, CLAUDE_BRIDGE_SESSION_INGRESS_URL
Strings lifted out of the shipped bundle, so the claim above can be checked against them.