{"version":"2.1.257","anchor":"cli-entrypointtoken-wiring-reorganized-under-a-claude-code","canonical_anchor":"cli-entrypointtoken-wiring-reorganized-under-a-claude-code","heading":"CLI entrypoint\/token wiring reorganized under a CLAUDE_CODE_REMOTE check","tier":"internal","area":"Auth","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257\/e\/cli-entrypointtoken-wiring-reorganized-under-a-claude-code","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257","markdown":"### CLI entrypoint\/token wiring reorganized under a CLAUDE_CODE_REMOTE check\n\nReading tokens from file descriptors is now skipped under CLAUDE_CODE_REMOTE, which also affects entrypoint detection.\n\nStartup now gates reading of several file-descriptor-based secret sources, the OAuth token FD, gateway token FD (`CLAUDE_CODE_GATEWAY_TOKEN_FILE_DESCRIPTOR`), API key FD, and websocket auth FD, behind `!$e(a.CLAUDE_CODE_REMOTE)`. \"Remote\" entrypoint detection now also treats `CLAUDE_CODE_REMOTE` being set together with a resolved websocket or gateway token as a remote entrypoint.\n\n- Area: Auth\n- Names: `CLAUDE_CODE_REMOTE`, `CLAUDE_CODE_GATEWAY_TOKEN_FILE_DESCRIPTOR`\n- Tier: Under the hood\n- Useful: 3\/5\n- Signal: 4\/5"}