What
OAuth authentication now attempts to recover from 401 errors by re-reading credentials from the system keychain.
Details
- When a 401 error occurs, Claude Code checks if the keychain has newer credentials
- If different credentials are found, they're used without requiring re-authentication
- Reduces unnecessary login prompts when tokens are refreshed externally
- Telemetry event:
tengu_oauth_401_recovered_from_keychain
Evidence
C1B() at line 146443 (OAuth recovery, contains "tengu_oauth_401_recovered_from_keychain")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.