[BUG] [1.0.64-] authentification to subagents are no longer propagated

Environment

• Platform (select one):
• [ ] Anthropic API
• [x] AWS Bedrock
• [ ] Google Vertex AI
• [ ] Other: <!-- specify -->
• Claude CLI version: 1.0.64 (Claude Code)
• Operating System: macOS 15.5
• Terminal: iTerm2

Bug Description

When using environment variables to configure Claude Code for AWS Bedrock usage, subagents are no longer seem to receive all informations.

Subagent tasks return API errors while the main context runs without issues.

⏺ I'll use the foo agent to analyze the code duplication across the commands and identify opportunities for refactoring.
  ⎿  API Error (403 {"Message":"User: arn:aws:sts::000000:assumed-role/a-user-role/my-user is not authorized to perform: bedrock:InvokeModel on resource: arn:aws:bedrock:eu-central-1:000000:inference-profile/eu.anthropic.claude-sonnet-4-20250514-v1:0 because no identity-based policy allows the bedrock:InvokeModel action"}) · Retrying in 1 seconds… (attempt 1/10)

A rollback to 1.0.63 fixes the issue.

Steps to Reproduce

1. AWS_ACCESS_KEY_ID=000000 AWS_CA_BUNDLE=.... claude
2. Run a subagent

Expected Behavior

Subagents are processing steps successfully

Actual Behavior

Subagents retries until the retry limit is reached than Claude Code starts processing successfully in the main thread.

Additional Context

We are using the Teleport tsh CLI to enable access to AWS Bedrock