{"version":"2.1.257","anchor":"eval-sandbox-auth-is-now-handed-to-child-processes-via-file","canonical_anchor":"eval-sandbox-auth-is-now-handed-to-child-processes-via-file","heading":"Eval sandbox auth is now handed to child processes via file descriptor or snapshot file instead of env vars directly","tier":"internal","area":"Auth","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257\/e\/eval-sandbox-auth-is-now-handed-to-child-processes-via-file","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257","markdown":"### Eval sandbox auth is now handed to child processes via file descriptor or snapshot file instead of env vars directly\n\nEval sandbox children get credentials via file descriptor, or a temp snapshot file on Windows, rather than env vars.\n\nEval sandbox subprocesses now receive OAuth and gateway credentials through a new `vf()` helper instead of directly via environment variables. On non-Windows this uses `CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR` (or the gateway equivalent); on Windows it writes a `snapshot.json` under a `claude-eval-auth-` temp directory and points `CLAUDE_BG_AUTH_SNAPSHOT_PATH` at it. Stale snapshot directories older than 2 hours are cleaned up automatically on startup.\n\n- Area: Auth\n- Names: `CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR`, `CLAUDE_BG_AUTH_SNAPSHOT_PATH`\n- Tier: Under the hood\n- Useful: 3\/5\n- Signal: 4\/5"}