Under the hood
Login-credential health checks now recognize two ways an injected token can recover after failing
What
When Claude Code gets a 401 (an authentication failure) response and checks whether the login credential behind it is still working, it now looks at a new signal called injectedTokenRecovery, used specifically for credentials that were injected rather than logged in normally. This signal can be:
none, meaning the credential is treated as dead (no longer usable)sdk_host_refresh, meaning the credential is still treated as liverunner_rotation, meaning the credential is still treated as live
Why
Previously a 401 may have simply meant a credential was assumed dead. This change lets Claude Code recognize cases where an injected token can recover on its own, avoiding unnecessary treatment of a still-usable credential as broken.