Unclear It is not clear what values CLAUDE_CODE_USER_DELEGATED_SESSION_ALLOWED_CHECK_MODELS accepts or which models it lets through.
Claude Code now recognises two environment variables (named settings passed to a program when it starts) for what it calls a user delegated session:
CLAUDE_CODE_USER_DELEGATED_SESSION_DIRECT_APICLAUDE_CODE_USER_DELEGATED_SESSION_ALLOWED_CHECK_MODELS
Both are copied into the environment of the processes and sessions Claude Code starts. CLAUDE_CODE_CCR_REQUESTS_BY_FETCH is also on that list. For sessions on your own infrastructure, CLAUDE_CODE_USER_DELEGATED_SESSION_DIRECT_API is set to 1 when the matching option is on. CLAUDE_CODE_USER_DELEGATED_SESSION_ALLOWED_CHECK_MODELS is filled in for sessions that run the agent loop.
When CLAUDE_CODE_USER_DELEGATED_SESSION_DIRECT_API is set:
--bg, which starts a background session, refuses to run and tells you to run the task in the current session instead.plugin evalrefuses to run and says nothing was run.- In auto mode, a model checks each action before it runs. When that check is unavailable, the message now reads "No allowed model can check this action". Without the variable, the message is still "Claude Code no longer checks actions itself".
This prepares for delegated sessions that call the API directly and limit which models may run the permission check on each action. If you see one of these refusals or the new auto mode message, a delegated session setting is in effect.
It is not clear what values `CLAUDE_CODE_USER_DELEGATED_SESSION_ALLOWED_CHECK_MODELS` accepts or which models it lets through.