oh-my-pi/docs/environment-variables.md

Environment Variables (Current Runtime Reference)

This reference is derived from current code paths in:

• packages/coding-agent/src/**
• packages/ai/src/** (provider/auth resolution used by coding-agent)
• packages/utils/src/** and packages/tui/src/** where those vars directly affect coding-agent runtime

It documents only active behavior.

Resolution model and precedence

Most runtime lookups use $env from @oh-my-pi/pi-utils (packages/utils/src/env.ts).

$env loading order:

1. Existing process environment (Bun.env)
2. Project .env ($PWD/.env) for keys not already set
3. Agent .env (~/.omp/agent/.env, respecting PI_CONFIG_DIR / PI_CODING_AGENT_DIR) for keys not already set
4. Config-root .env (~/.omp/.env, respecting PI_CONFIG_DIR) for keys not already set
5. Home .env (~/.env) for keys not already set

Additional rule inside each .env file: OMP_* keys are mirrored to PI_* keys in that parsed file.

---

1) Model/provider authentication

These are consumed via getEnvApiKey() (packages/ai/src/stream.ts) unless noted otherwise.

Core provider credentials

Variable	Used for	Required when	Notes / precedence
ANTHROPIC_OAUTH_TOKEN	Anthropic API auth	Using Anthropic with OAuth token auth	Takes precedence over ANTHROPIC_API_KEY for provider auth resolution
ANTHROPIC_API_KEY	Anthropic API auth	Using Anthropic without OAuth token	Fallback after ANTHROPIC_OAUTH_TOKEN
ANTHROPIC_FOUNDRY_API_KEY	Anthropic via Azure Foundry / enterprise gateway	CLAUDE_CODE_USE_FOUNDRY enabled	Takes precedence over ANTHROPIC_OAUTH_TOKEN and ANTHROPIC_API_KEY when Foundry mode is enabled
OPENAI_API_KEY	OpenAI auth	Using OpenAI-family providers without explicit apiKey argument	Used by OpenAI Completions/Responses providers
GEMINI_API_KEY	Google Gemini auth	Using google provider models	Primary key for Gemini provider mapping
GOOGLE_API_KEY	Gemini image tool auth fallback	Using gemini_image tool without GEMINI_API_KEY	Used by coding-agent image tool fallback path
GROQ_API_KEY	Groq auth	Using Groq models
CEREBRAS_API_KEY	Cerebras auth	Using Cerebras models
FIREWORKS_API_KEY	Fireworks auth	Using Fireworks models
FIREPASS_API_KEY	Fire Pass auth	Using Fire Pass models
TOGETHER_API_KEY	Together auth	Using together provider
AIMLAPI_API_KEY	AIML API auth	Using aimlapi provider	OpenAI-compatible AIML API endpoint at https://api.aimlapi.com/v1
HUGGINGFACE_HUB_TOKEN	Hugging Face auth	Using huggingface provider	Primary Hugging Face token env var
HF_TOKEN	Hugging Face auth	Using huggingface provider	Fallback when HUGGINGFACE_HUB_TOKEN is unset
SYNTHETIC_API_KEY	Synthetic auth	Using Synthetic models
NVIDIA_API_KEY	NVIDIA auth	Using nvidia provider
NANO_GPT_API_KEY	NanoGPT auth	Using nanogpt provider
NOVITA_API_KEY	Novita auth	Using novita provider
VENICE_API_KEY	Venice auth	Using venice provider
LITELLM_API_KEY	LiteLLM auth	Using litellm provider	OpenAI-compatible LiteLLM proxy key
LM_STUDIO_API_KEY	LM Studio auth (optional)	Using lm-studio provider with authenticated hosts	Local LM Studio usually runs without auth; any non-empty token works when a key is required
OLLAMA_API_KEY	Ollama auth (optional)	Using ollama provider with authenticated hosts	Local Ollama usually runs without auth; any non-empty token works when a key is required
LLAMA_CPP_API_KEY	llama.cpp auth (optional)	Using llama.cpp provider with authenticated hosts	Local llama.cpp usually runs without auth; any non-empty token works when a key is configured
XIAOMI_API_KEY	Xiaomi MiMo auth	Using xiaomi provider
XIAOMI_TOKEN_PLAN_AMS_API_KEY	Xiaomi MiMo Token Plan auth (AMS)	Using xiaomi-token-plan-ams provider
XIAOMI_TOKEN_PLAN_CN_API_KEY	Xiaomi MiMo Token Plan auth (CN)	Using xiaomi-token-plan-cn provider
XIAOMI_TOKEN_PLAN_SGP_API_KEY	Xiaomi MiMo Token Plan auth (SGP)	Using xiaomi-token-plan-sgp provider
MOONSHOT_API_KEY	Moonshot auth	Using moonshot provider
XAI_API_KEY	xAI auth	Using xAI models or as fallback for xai-oauth
XAI_OAUTH_TOKEN	xAI OAuth/SuperGrok auth	Using xai-oauth provider	Takes precedence over XAI_API_KEY for xai-oauth
OPENROUTER_API_KEY	OpenRouter auth	Using OpenRouter models	Also used by image tool when preferred/auto provider is OpenRouter
MISTRAL_API_KEY	Mistral auth	Using Mistral models
ZAI_API_KEY	z.ai auth	Using z.ai models	Also used by z.ai web search provider
ZHIPU_API_KEY	Zhipu Coding Plan auth	Using zhipu-coding-plan provider
UMANS_AI_CODING_PLAN_API_KEY	Umans AI Coding Plan auth	Using umans provider
MINIMAX_API_KEY	MiniMax auth	Using minimax provider
MINIMAX_CODE_API_KEY	MiniMax Code auth	Using minimax-code provider
MINIMAX_CODE_CN_API_KEY	MiniMax Code CN auth	Using minimax-code-cn provider
OPENCODE_API_KEY	OpenCode auth	Using opencode-go / opencode-zen models
QIANFAN_API_KEY	Qianfan auth	Using qianfan provider
QWEN_OAUTH_TOKEN	Qwen Portal auth	Using qwen-portal with OAuth token	Takes precedence over QWEN_PORTAL_API_KEY
QWEN_PORTAL_API_KEY	Qwen Portal auth	Using qwen-portal with API key	Fallback after QWEN_OAUTH_TOKEN
ZENMUX_API_KEY	ZenMux auth	Using zenmux provider	Used for ZenMux OpenAI and Anthropic-compatible routes
VLLM_API_KEY	vLLM auth/discovery opt-in	Using vllm provider (local OpenAI-compatible servers)	Any non-empty value works for no-auth local servers
CURSOR_ACCESS_TOKEN	Cursor provider auth	Using Cursor provider
AI_GATEWAY_API_KEY	Vercel AI Gateway auth	Using vercel-ai-gateway provider
CLOUDFLARE_AI_GATEWAY_API_KEY	Cloudflare AI Gateway auth	Using cloudflare-ai-gateway provider	Base URL must be configured as https://gateway.ai.cloudflare.com/v1/<account>/<gateway>/anthropic
ALIBABA_CODING_PLAN_API_KEY	Alibaba Coding Plan auth	Using alibaba-coding-plan provider
ALIBABA_TOKEN_PLAN_API_KEY	QwenCloud Token Plan auth	Using alibaba-token-plan provider	Preferred provider-specific name
BAILIAN_TOKEN_PLAN_API_KEY	QwenCloud Token Plan auth	Using alibaba-token-plan provider	Compatible with Qwen Code's Token Plan preset
DEEPSEEK_API_KEY	DeepSeek auth	Using DeepSeek models
KILO_API_KEY	Kilo auth	Using Kilo models
OLLAMA_CLOUD_API_KEY	Ollama Cloud auth	Using ollama-cloud provider
WAFER_SERVERLESS_API_KEY	Wafer Serverless auth	Using wafer-serverless provider	Pay-as-you-go Wafer SKU; validated against https://pass.wafer.ai/v1/models
GITLAB_TOKEN	GitLab Duo auth	Using gitlab-duo provider

GitHub/Copilot tokens

Variable	Used for	Notes
COPILOT_GITHUB_TOKEN	GitHub Copilot provider auth	Generic GitHub tokens are not used here
GH_TOKEN	GitHub API auth in web scraper	Web scraper fallback after GITHUB_TOKEN
GITHUB_TOKEN	GitHub API auth in web scraper	Web scraper checks this before GH_TOKEN

Auth broker / auth gateway (remote credential vault)

When the broker is enabled, the local SQLite credential store is bypassed and all OAuth refresh / access tokens live on the broker host. See auth-broker-gateway.md for the full protocol, CLI surface, and 5-min/15-s usage cache layering.

Variable	Used for	Required when	Notes / precedence
OMP_AUTH_BROKER_URL	Base URL of the remote auth-broker (e.g. https://broker.tailnet:8765); selects broker mode	Resolving credentials through a broker; also required by omp auth-gateway serve (the gateway is itself a broker client)	Wins over auth.broker.url in config.yml. When set with no resolvable token, resolveAuthBrokerConfig() hard-errors instead of falling back to local SQLite.
OMP_AUTH_BROKER_TOKEN	Bearer token sent on every broker endpoint except /v1/healthz	OMP_AUTH_BROKER_URL is set and no token is available from auth.broker.token or <config-dir>/auth-broker.token	Resolution: this env → auth.broker.token ($ENV_NAME indirection supported) → <config-dir>/auth-broker.token (mode 0600). <config-dir> is ~/.omp/ (respecting PI_CONFIG_DIR).
OMP_AUTH_BROKER_SNAPSHOT_TTL_MS	Freshness window for the encrypted local broker snapshot cache	Optional in broker mode	Default 3600000 (1 h). Freshness is based on broker snapshot.generatedAt; 0 disables cache reads/writes and forces the old blocking fetch every startup.
OMP_AUTH_BROKER_SNAPSHOT_CACHE	Path to the encrypted local broker snapshot cache	Optional in broker mode	Defaults to ~/.omp/cache/auth-broker-snapshot.enc (or XDG cache equivalent). Useful for tests, ephemeral hosts, or relocating the 0600 cache file.
OMP_AUTH_BROKER_ACCOUNT_POOL_FILE	Process-scoped OAuth account routing for a trusted broker client	Optional in broker mode	Path to a JSON object mapping provider IDs to exact broker identityKey arrays. Missing providers are unrestricted; [] hides that provider's OAuth accounts; API keys remain visible. Parsed once at startup and fails closed on invalid input. This is not server authorization.

The gateway has no dedicated env vars — it inherits OMP_AUTH_BROKER_*. Its own inbound bearer token lives at <config-dir>/auth-gateway.token and is managed via omp auth-gateway token.

---

2) Provider-specific runtime configuration

Anthropic Foundry Gateway (Azure / enterprise proxy)

When CLAUDE_CODE_USE_FOUNDRY is enabled, Anthropic requests switch to Foundry mode:

• Base URL resolves from FOUNDRY_BASE_URL (fallback remains model/default base URL if unset).

• API key resolution for provider anthropic becomes: ANTHROPIC_FOUNDRY_API_KEY → ANTHROPIC_OAUTH_TOKEN → ANTHROPIC_API_KEY.

• ANTHROPIC_CUSTOM_HEADERS is parsed as comma/newline-separated key: value pairs and merged into request headers. They are also forwarded when ANTHROPIC_BASE_URL points to a non-Anthropic host (e.g. a corporate API gateway), so enterprise gateways requiring proprietary auth headers work without enabling Foundry mode.

• TLS client/server material can be injected from env values: NODE_EXTRA_CA_CERTS, CLAUDE_CODE_CLIENT_CERT, CLAUDE_CODE_CLIENT_KEY. Each accepts either:

  • a filesystem path to PEM content, or
  • inline PEM (including escaped \n sequences).

  NODE_EXTRA_CA_CERTS is honoured for every provider fetch (OpenAI-compatible, Codex, Ollama, Azure Responses, Google, Anthropic), not just Foundry — Bun's fetch does not consume the env var natively, so the bundle is merged into RequestInit.tls.ca alongside the system root store. The CLAUDE_CODE_* mTLS material remains Anthropic-Foundry-specific.

Variable	Value type	Behavior
CLAUDE_CODE_USE_FOUNDRY	Boolean-like string (1, true, yes, on)	Enables Foundry mode for Anthropic provider
FOUNDRY_BASE_URL	URL string	Anthropic endpoint base URL in Foundry mode
ANTHROPIC_FOUNDRY_API_KEY	Token string	Used for Authorization: Bearer <token>
ANTHROPIC_CUSTOM_HEADERS	Header list string	Extra headers; format header-a: value, header-b: value or newline-separated. Also forwarded outside Foundry whenever ANTHROPIC_BASE_URL is non-Anthropic.
NODE_EXTRA_CA_CERTS	PEM path or inline PEM	Extra CA chain for server certificate validation
CLAUDE_CODE_CLIENT_CERT	PEM path or inline PEM	mTLS client certificate
CLAUDE_CODE_CLIENT_KEY	PEM path or inline PEM	mTLS client private key (must be paired with cert)

Amazon Bedrock

Variable	Default / behavior
AWS_REGION	Primary region source
AWS_DEFAULT_REGION	Fallback if AWS_REGION unset
AWS_PROFILE	Enables named profile auth path
AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY	Enables IAM key auth path
AWS_BEARER_TOKEN_BEDROCK	Highest-precedence bearer token auth path; skips AWS profile/credential-chain lookup when set
AWS_CONTAINER_CREDENTIALS_RELATIVE_URI / AWS_CONTAINER_CREDENTIALS_FULL_URI	Marks Bedrock as available in provider detection (credential resolution itself covers env keys, profiles/SSO/credential_process, then IMDSv2)
AWS_WEB_IDENTITY_TOKEN_FILE + AWS_ROLE_ARN	Marks Bedrock as available in provider detection (same caveat as the ECS variables above)
AWS_BEDROCK_SKIP_AUTH	If 1, injects dummy credentials (proxy/non-auth scenarios)
HTTPS_PROXY / HTTP_PROXY	Honored via Bun's native fetch proxy support (the provider no longer ships an AWS SDK / proxy-agent transport)
NO_PROXY	Excludes matching hosts from Bun's native proxy routing

Region fallback in provider code: options.region → AWS_REGION → AWS_DEFAULT_REGION → us-east-1.

Azure OpenAI Responses

Variable	Default / behavior
AZURE_OPENAI_API_KEY	Required unless API key passed as option
AZURE_OPENAI_API_VERSION	Default v1
AZURE_OPENAI_BASE_URL	Direct base URL override
AZURE_OPENAI_RESOURCE_NAME	Used to construct base URL: https://<resource>.openai.azure.com/openai/v1
AZURE_OPENAI_DEPLOYMENT_NAME_MAP	Optional mapping string: modelId=deploymentName,model2=deployment2

Base URL resolution: option azureBaseUrl → env AZURE_OPENAI_BASE_URL → option/env resource name → model.baseUrl.

Google Vertex AI

Variable	Required?	Notes
GOOGLE_CLOUD_PROJECT	Yes (unless passed in options)	Primary project ID source
GCP_PROJECT	Fallback	Alternate project ID source
GCLOUD_PROJECT	Fallback	Alternate project ID source
GOOGLE_CLOUD_PROJECT_ID	OAuth login helper only	Used by Gemini CLI OAuth project discovery
GOOGLE_VERTEX_LOCATION	Yes (unless passed in options)	Primary Vertex location source
GOOGLE_CLOUD_LOCATION	Fallback	Alternate Vertex location source
VERTEX_LOCATION	Fallback	Alternate Vertex location source
GOOGLE_CLOUD_API_KEY	Conditional	Direct Vertex API-key auth; otherwise ADC fallback can authenticate when project and location are set
GOOGLE_APPLICATION_CREDENTIALS	Conditional	If set, file must exist; otherwise ADC fallback path is checked (~/.config/gcloud/application_default_credentials.json)

Kimi

Variable	Default / behavior
KIMI_CODE_OAUTH_HOST	Primary OAuth host override
KIMI_OAUTH_HOST	Fallback OAuth host override
KIMI_CODE_BASE_URL	Overrides Kimi usage endpoint base URL (usage/kimi.ts)

OAuth host chain: KIMI_CODE_OAUTH_HOST → KIMI_OAUTH_HOST → https://auth.kimi.com.

Gemini CLI compatibility

Variable	Default / behavior
PI_AI_GEMINI_CLI_VERSION	Overrides Gemini CLI user-agent version tag (0.35.3 if unset)

OpenAI Codex responses (feature/debug controls)

Variable	Behavior
PI_CODEX_DEBUG	1/true enables Codex provider debug logging
PI_CODEX_WEBSOCKET	1/true enables websocket transport preference
PI_CODEX_RESPONSES_LITE	1/true forces Responses Lite; 0/false forces the standard Responses body; unset uses the model catalog default
PI_OPENAI_STATEFUL	Overrides the stateful-chaining default for the platform OpenAI Responses API (previous_response_id, forces store: true): on by default against api.openai.com, off elsewhere
PI_CODEX_WEBSOCKET_IDLE_TIMEOUT_MS	Positive integer override (default 300000)
PI_CODEX_WEBSOCKET_RETRY_BUDGET	Non-negative integer override (default 5)
PI_CODEX_WEBSOCKET_RETRY_DELAY_MS	Positive integer base backoff override (default 500)
PI_OPENAI_STREAM_FIRST_EVENT_TIMEOUT_MS	Positive integer OpenAI first-event timeout override; 0 disables. omp config set providers.streamFirstEventTimeoutSeconds <seconds> provides the persisted config equivalent
PI_OPENAI_STREAM_IDLE_TIMEOUT_MS	Positive integer OpenAI stream idle timeout override; 0 disables. omp config set providers.streamIdleTimeoutSeconds <seconds> provides the persisted config equivalent

Cursor provider debug

Variable	Behavior
DEBUG_CURSOR	Enables provider debug logs; 2/verbose for detailed payload snippets
DEBUG_CURSOR_LOG	Optional file path for JSONL debug log output

Prompt cache compatibility switch

Variable	Behavior
PI_CACHE_RETENTION	If long, enables long retention where supported (anthropic, openai-responses, Bedrock retention resolution)

---

3) Web search subsystem

Search provider credentials

Variable	Used by
EXA_API_KEY	Exa search provider and Exa MCP tools
BRAVE_API_KEY	Brave search provider
PERPLEXITY_API_KEY	Perplexity search provider API-key mode
PERPLEXITY_COOKIES	Perplexity cookie-auth search mode
TAVILY_API_KEY	Tavily search provider
ZAI_API_KEY	z.ai search provider (also checks stored OAuth in agent.db)
OPENAI_API_KEY / Codex OAuth in DB	Codex search provider availability/auth
PI_CODEX_WEB_SEARCH_MODEL	Codex search provider model override
MOONSHOT_SEARCH_API_KEY / KIMI_SEARCH_API_KEY	Kimi/Moonshot search provider env auth
MOONSHOT_SEARCH_BASE_URL / KIMI_SEARCH_BASE_URL	Kimi/Moonshot search endpoint override
KAGI_API_KEY	Kagi search provider
JINA_API_KEY	Jina search provider
PARALLEL_API_KEY	Parallel search provider
SEARXNG_ENDPOINT, SEARXNG_TOKEN	SearXNG endpoint and optional bearer token
SEARXNG_BASIC_USERNAME, SEARXNG_BASIC_PASSWORD	SearXNG HTTP Basic Auth credentials

SearXNG also reads the equivalent searxng.endpoint, searxng.token, searxng.basicUsername, and searxng.basicPassword settings from ~/.omp/agent/config.yml; environment variables are fallbacks.

Anthropic web search auth chain

searchAnthropic() resolves credentials in this order:

1. ANTHROPIC_SEARCH_API_KEY
2. authStorage.getApiKey("anthropic") fallback credentials (runtime/config overrides, stored API-key credentials, stored OAuth credentials, then generic Anthropic env fallback: ANTHROPIC_FOUNDRY_API_KEY in Foundry mode, otherwise ANTHROPIC_OAUTH_TOKEN / ANTHROPIC_API_KEY)

For either credential path, base URL resolution is:

1. ANTHROPIC_SEARCH_BASE_URL
2. FOUNDRY_BASE_URL when CLAUDE_CODE_USE_FOUNDRY is enabled
3. ANTHROPIC_BASE_URL
4. https://api.anthropic.com

Related vars:

Variable	Default / behavior
ANTHROPIC_SEARCH_API_KEY	API key used exclusively for the Anthropic web search provider. Highest-priority search auth; overrides ANTHROPIC_API_KEY / OAuth / Foundry for search calls without affecting chat completions.
ANTHROPIC_SEARCH_BASE_URL	Base URL used exclusively for the Anthropic web search provider. Applied to either ANTHROPIC_SEARCH_API_KEY or fallback Anthropic credentials; overrides ANTHROPIC_BASE_URL (and FOUNDRY_BASE_URL in Foundry mode) for search calls.
ANTHROPIC_SEARCH_MODEL	Search model override. Defaults to claude-haiku-4-5.
ANTHROPIC_BASE_URL	Generic fallback base URL for Anthropic requests when no search-specific base URL is set.

Use ANTHROPIC_SEARCH_BASE_URL (optionally with ANTHROPIC_SEARCH_API_KEY) to keep chat routed through an enterprise gateway (ANTHROPIC_BASE_URL or CLAUDE_CODE_USE_FOUNDRY=true) while pointing web search at a direct Anthropic endpoint, or vice versa.

Perplexity OAuth flow behavior flag

Variable	Behavior
PI_AUTH_NO_BORROW	If set, disables macOS native-app token borrowing path in Perplexity login flow

---

4) Python tooling and kernel runtime

Variable	Default / behavior
PI_PY	Boolean-like override for the Python eval backend: truthy (1/true/yes/on) enables, any other value disables; unset defers to the eval.py setting (default enabled)
PI_JS	Same boolean-like override for the JavaScript eval backend; unset defers to the eval.js setting (default enabled)
PI_PYTHON_SKIP_CHECK	If 1, skips Python interpreter availability checks (subprocess runner still starts on demand)
PI_PYTHON_INTEGRATION	If 1, opts gated integration tests in (e.g. python-runner.integration.test.ts) into running against real Python
PI_PYTHON_IPC_TRACE	If 1, logs NDJSON frames exchanged with the Python runner subprocess
VIRTUAL_ENV	Highest-priority venv path for Python runtime resolution

Extra conditional behavior:

• If BUN_ENV=test or NODE_ENV=test, Python availability checks are treated as OK and warming is skipped.
• Python env filtering denies common API keys and allows safe base vars + LC_, XDG_, PI_ prefixes.

---

5) Agent/runtime behavior toggles

Variable	Default / behavior
PI_SMOL_MODEL	Ephemeral model-role override for smol (CLI --smol takes precedence)
PI_SLOW_MODEL	Ephemeral model-role override for slow (CLI --slow takes precedence)
PI_PLAN_MODEL	Ephemeral model-role override for plan (CLI --plan takes precedence)
PI_NO_TITLE	If set (any non-empty value), disables auto session title generation on first user message
PI_TINY_DEVICE	ONNX execution provider for local tiny models; overrides the providers.tinyModelDevice setting (default: CPU; supports cpu, gpu, metal/webgpu, auto, cuda, dml, coreml, wasm, webnn, webnn-gpu, webnn-cpu, webnn-npu)
PI_TINY_DTYPE	ONNX quantization/precision for local tiny models; overrides the providers.tinyModelDtype setting (default: each model's shipped dtype, currently q4; supports auto, fp32, fp16, q8, int8, uint8, q4, bnb4, q4f16, q2, q2f16, q1, q1f16)
PI_NO_INTERLEAVED_THINKING	If 1, disables Anthropic interleaved thinking budget behavior and uses output-token inflation for older thinking mode
NULL_PROMPT	If true, system prompt builder returns empty string
PI_BLOCKED_AGENT	Blocks a specific subagent type in task tool
PI_SUBPROCESS_CMD	Overrides subagent spawn command (omp / omp.cmd resolution bypass)
PI_TASK_MAX_OUTPUT_BYTES	Max captured output bytes per subagent (default 500000)
PI_TASK_MAX_OUTPUT_LINES	Max captured output lines per subagent (default 5000)
PI_TIMING	If set (any non-empty value), prints a hierarchical timing-span tree to stderr via logger.printTimings(). In interactive mode the tree prints once the agent is ready (before the TUI starts); in print mode it prints after the whole prompt batch completes. Print-mode prompts are wrapped in print:prompt:initial / print:prompt:next spans so each user message shows up as its own row. PI_TIMING=x exits the process with code 0 right after printing in interactive mode (use to measure cold startup only). PI_TIMING=full lists every module-load entry instead of just the top N.
PI_DEBUG_STARTUP	If set (any non-empty value), streams one synchronous [startup] <phase>:start / :done marker line to stderr as each startup phase begins/ends — including command-module imports (cli:load:<name>) and the native addon extraction/dlopen (native:*). Unlike PI_TIMING (which prints only once startup completes), the markers survive a hard hang: the last line on stderr names the phase the process is stuck in. Combine with PI_TIMING freely; markers and the span tree share the same phase names.
PI_PACKAGE_DIR	Overrides package asset base dir resolution (docs/, examples/, CHANGELOG.md)
PI_DISABLE_LSPMUX	If 1, disables lspmux detection/integration and forces direct LSP server spawning
PI_RPC_EMIT_TITLE	Boolean-like flag enabling title events in RPC mode
SMITHERY_URL	Smithery web URL override (default https://smithery.ai)
SMITHERY_API_URL	Smithery API base URL override (default https://api.smithery.ai)
SMITHERY_API_KEY	Smithery API key for managed MCP auth lookup
PUPPETEER_EXECUTABLE_PATH	Browser tool Chromium executable override
LITELLM_BASE_URL	LiteLLM proxy base URL fallback (http://localhost:4000/v1 if unset); explicit providers.litellm.baseUrl / models.yml config wins
LM_STUDIO_BASE_URL	Default implicit LM Studio discovery base URL override (http://127.0.0.1:1234/v1 if unset)
OLLAMA_BASE_URL	Default implicit Ollama discovery base URL override (OLLAMA_HOST if unset, then http://127.0.0.1:11434)
OLLAMA_HOST	Ollama host used for implicit Ollama discovery when OLLAMA_BASE_URL is unset; accepts Ollama-style values such as 127.0.0.1:11434 or http://host:11434
OLLAMA_CONTEXT_LENGTH	Positive integer context-window override for implicit Ollama discovery; affects OMP context budgeting only and does not change Ollama's runtime num_ctx
LLAMA_CPP_BASE_URL	Default implicit Llama.cpp discovery base URL override (http://127.0.0.1:8080 if unset)
PI_EDIT_VARIANT	Forces edit tool variant when valid (patch, replace, hashline, apply_patch)
PI_STRICT_EDIT_MODE	If 1, disables built-in model-specific edit-mode fallbacks, so the configured/global edit.mode is used unless PI_EDIT_VARIANT or edit.modelVariants overrides it
PI_FORCE_IMAGE_PROTOCOL	Forces supported image protocol (kitty, iterm2/iterm, sixel, none) where used
PI_ALLOW_SIXEL_PASSTHROUGH	Allows SIXEL passthrough when PI_FORCE_IMAGE_PROTOCOL=sixel
PI_NO_PTY	If 1, disables interactive PTY path for bash tool
OMP_MCP_TIMEOUT_MS	Overrides MCP client request timeout (ms) for every MCP server. 0 disables client-side timeouts (AbortSignal never fires). Invalid (negative or non-numeric) values are ignored with a warning and the per-server config or default (30000) is used.

PI_NO_PTY is also set internally when CLI --no-pty is used.

---

6) Storage and config root paths

These affect where coding-agent stores data and which process-local settings overlays it loads.

Variable	Default / behavior
PI_CONFIG_DIR	Config root dirname under home (default .omp)
PI_CODING_AGENT_DIR	Full override for agent directory (default ~/<PI_CONFIG_DIR or .omp>/agent)
PI_CONFIG_FILES	Platform path-list of settings overlays (: on Unix, ; on Windows); loaded in order before explicit --config overlays
PWD	Used when matching canonical current working directory in path helpers

---

7) Shell/tool execution environment

(From packages/utils/src/procmgr.ts and coding-agent bash tool integration.)

Variable	Behavior
PI_BASH_NO_CI	Suppresses automatic CI=true injection into spawned shell env
CLAUDE_BASH_NO_CI	Legacy alias fallback for PI_BASH_NO_CI
PI_BASH_NO_LOGIN	Disables login-shell mode; shell args become ['-c'] instead of ['-l','-c']
CLAUDE_BASH_NO_LOGIN	Legacy alias fallback for PI_BASH_NO_LOGIN
PI_SHELL_PREFIX	Optional command prefix wrapper
CLAUDE_CODE_SHELL_PREFIX	Legacy alias fallback for PI_SHELL_PREFIX
VISUAL	Preferred external editor command
EDITOR	Fallback external editor command

Current implementation: PI_BASH_NO_LOGIN/CLAUDE_BASH_NO_LOGIN are active; when either is set, getShellArgs() returns ['-c'].

---

8) UI/theme/session detection (auto-detected env)

These are read as runtime signals; they are usually set by the terminal/OS rather than manually configured.

Variable	Used for
COLORTERM, TERM, WT_SESSION	Color capability detection (theme color mode)
COLORFGBG	Terminal background light/dark auto-detection
TERM_PROGRAM, TERM_PROGRAM_VERSION, TERMINAL_EMULATOR	Terminal identity in system prompt/context
TMUX_PANE, CMUX_SURFACE_ID, KITTY_WINDOW_ID, TERM_SESSION_ID, WT_SESSION	Stable per-terminal session breadcrumb IDs
SHELL, ComSpec, TERM_PROGRAM, TERM	System info diagnostics
APPDATA, XDG_CONFIG_HOME	lspmux config path resolution
HOME	Path shortening in MCP command UI

---

9) TUI runtime flags (shared package, affects coding-agent UX)

Variable	Behavior
PI_NOTIFICATIONS	off / 0 / false suppress desktop notifications
PI_TUI_WRITE_LOG	If set, logs TUI writes to file
PI_TUI_RAW_BACKSPACE_IS_CTRL	If 1, interprets raw 0x08 as Ctrl+Backspace instead of Backspace; use when SSH/container hops hide a Windows Terminal client
PI_HARDWARE_CURSOR	If 1, enables hardware cursor mode
PI_NO_SYNC_OUTPUT	If set (any non-empty value), disables DEC 2026 synchronized-output wrappers while keeping TUI autowrap guards
PI_NO_DECCARA	If set (truthy), disables Kitty DECCARA rectangular-SGR background fills (forces padded-string rendering)
PI_DEBUG_REDRAW	If 1, enables redraw debug logging
PI_FORCE_IMAGE_PROTOCOL	Forces terminal image protocol detection (kitty, iterm2/iterm, sixel, none)
PI_TUI_RESIZE_IN_PLACE	1/true force in-place resize (no alt-screen borrow, no ED3 rewrap); 0/false force the alt-screen fast path. Default-on for Warp, which re-reports its size on alt-screen toggles

---

10) Commit generation controls

Variable	Behavior
PI_COMMIT_TEST_FALLBACK	If true (case-insensitive), force commit fallback generation path
PI_COMMIT_NO_FALLBACK	If true, disables fallback when agent returns no proposal
PI_COMMIT_MAP_REDUCE	If false, disables map-reduce commit analysis path
DEBUG	If set, commit agent error stack traces are printed

---

Security-sensitive variables

Treat these as secrets; do not log or commit them:

• Provider/API keys and OAuth/bearer credentials (all *_API_KEY, *_TOKEN, OAuth access/refresh tokens)
• Cloud credentials (AWS_*, GOOGLE_APPLICATION_CREDENTIALS path may expose service-account material)
• Search/provider auth vars (EXA_API_KEY, BRAVE_API_KEY, PERPLEXITY_API_KEY, Anthropic search keys)
• Foundry mTLS material (CLAUDE_CODE_CLIENT_CERT, CLAUDE_CODE_CLIENT_KEY, NODE_EXTRA_CA_CERTS when it points to private CA bundles)

Python runtime also explicitly strips many common key vars before spawning kernel subprocesses (packages/coding-agent/src/eval/py/runtime.ts).