{"version":"2.1.257","anchor":"new-file-descriptor-based-secret-passing-for-subprocesses","canonical_anchor":"new-file-descriptor-based-secret-passing-for-subprocesses","heading":"New file-descriptor-based secret passing for subprocesses","tier":"use","area":"Auth","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257\/e\/new-file-descriptor-based-secret-passing-for-subprocesses","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257","markdown":"### New file-descriptor-based secret passing for subprocesses\n\nAuth tokens can now be handed to subprocesses over file descriptors instead of plaintext environment variables.\n\nNew environment variables \u2014 `CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR`, `CLAUDE_CODE_GATEWAY_TOKEN_FILE_DESCRIPTOR`, `CLAUDE_CODE_API_KEY_FILE_DESCRIPTOR`, and `CLAUDE_CODE_WEBSOCKET_AUTH_FILE_DESCRIPTOR` \u2014 let auth tokens be passed to subprocesses via file descriptor instead of plaintext environment variables. The list of secret env vars scrubbed from subprocess environments was also expanded.\n\n- Area: Auth\n- Names: `CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR`, `CLAUDE_CODE_API_KEY_FILE_DESCRIPTOR`, `CLAUDE_CODE_GATEWAY_TOKEN_FILE_DESCRIPTOR`, `CLAUDE_CODE_WEBSOCKET_AUTH_FILE_DESCRIPTOR`\n- Tier: Use it now\n- Useful: 5\/5\n- Signal: 4\/5"}