[BUG] awsAuthRefresh failing to surface Okta authentication URL

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

awsAuthRefresh flow fails to present the authentication logs, in particular the provider URL (Okta).
It seems that they are printed as debug logs (visible with claude --debug).
The CLI hangs or waits indefinitely without displaying the URL.

What Should Happen?

The CLI should print the Okta authentication URL to the console so the user can click/copy it to complete the login.

Error Messages/Logs

-01-26T16:05:53.482Z [ERROR] Open the following URL to begin Okta device authorization for the AWS CLI

<provider URL>

Steps to Reproduce

• Configure claude-code to use AWS authentication with Okta as the provider.
• Trigger a session refresh (e.g., let the token expire or force a refresh).
• Run claude --debug.
• Observe the terminal output and the logs produced in debug mode.

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.19

Platform

AWS Bedrock

Operating System

Windows

Terminal/Shell

WSL (Windows Subsystem for Linux)

Additional Information

Something similar had already been raised here.