You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
AuthArea: what it touches
ImprovementsKind: in v2.1.223,
ImprovementsSection of the release
What
The project-scope error mapper gained two new reasons and broadened an existing one, so the message tells you which situation you are in.
Details
custom_client: a custom OAuth client cannot be granted project scopes
save_failed: refreshed credentials could not be stored because secure storage was unavailable, and the server has already consumed the old ones, so the advice is to run /login and retry
no_refresh now covers expired or revoked refresh tokens generally, not just CLAUDE_CODE_OAUTH_TOKEN
Evidence
Could not save the refreshed claude.ai credentials (secure storage was unavailable), and the server has already consumed the stored ones. Run /login to reconnect, then retry.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.