# cowork-harness host-side credentials.
#
# Copy to `.env`. Resolution order: exported env > `--dotenv <path>` > `./.env` (cwd) >
# `<install-root>/.env` — so a global/npm-linked install still finds this file at the package
# root even when you run from an unrelated directory. Already-exported vars always win.
# `.env` is gitignored. SECURITY: keep this at your repo/working-dir ROOT — never inside a
# mounted skill/project folder, or its contents would be copied into the agent's sandbox.
# The token value is also scrubbed from all persisted run logs regardless of source.

# Preferred: a long-lived OAuth token. Mint one with `claude setup-token` (valid ~1 year).
CLAUDE_CODE_OAUTH_TOKEN=

# Alternative: an API key (used ONLY when no OAuth token is set; cowork drops API keys when a
# token is present, mirroring the desktop).
# ANTHROPIC_API_KEY=

# Alternative: a raw Anthropic auth token. Same precedence as ANTHROPIC_API_KEY (used only when
# no OAuth token is set) — set at most one of the two.
# ANTHROPIC_AUTH_TOKEN=

# Optional: timezone passed through to the agent.
# TZ=America/New_York