OAuth refresh delegation installs only when CLAUDE_CODE_SDK_HAS_OAUTH_REFRESH is set and the entrypoint matches.
What
Instead of refreshing the login token itself, the client can hand that job to the program embedding it. This is installed only when CLAUDE_CODE_SDK_HAS_OAUTH_REFRESH is set and CLAUDE_CODE_ENTRYPOINT names one of a fixed set of entry points, so it is off by default.
Details
- Whether the bridge was installed is reported as
oauth_bridgein the session-started event.
Evidence
CLAUDE_CODE_SDK_HAS_OAUTH_REFRESH
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundleCLAUDE_CODE_SDK_HAS_OAUTH_REFRESHCLAUDE_CODE_ENTRYPOINT