[BUG] Cowork completely broken - CSP blocks a-api.anthropic.com, tasks hang on "Starting up..." indefinitely - macOS

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Claude 1.1.4498 (24f768) 2026-02-26T19:47:09.000Z
Platform: macOS (darwin, Apple Silicon)

Cowork is completely unusable. Tasks hang on "Starting up..." indefinitely and never run. Root cause appears to be the app's Content Security Policy blocking a-api.anthropic.com.

Root Cause: CSP blocks API endpoint
The app's built-in CSP connect-src directive does not include a-api.anthropic.com, causing all API calls to be blocked:
[error] Connecting to 'https://a-api.anthropic.com/v1/m' violates the following
Content Security Policy directive: "connect-src 'self' https://api.segment.io
https://.segment.io https://.segment.com https://a-cdn.anthropic.com
https://.google.com https://.facebook.com https://.facebook.net
https://.doubleclick.net". The action has been blocked.
[error] Fetch API cannot load https://a-api.anthropic.com/v1/m. Refused to connect
because it violates the document's Content Security Policy.
Network environment ruled out
Twingate was initially suspected but ruled out. scutil --proxy confirms no proxy is active:
<dictionary> {
ExcludeSimpleHostnames : 0
}
Secondary issue: queue-operation flood
In earlier sessions today, when the backend partially connected, the logs were flooded continuously with:
[warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
[warn] [LOCAL_SESSION] unknown sdk message type: rate_limit_event
Thousands of these per session, causing UI to freeze and responses not to render. This appears to be a separate bug — the client does not recognize queue-operation or rate_limit_event as valid SDK message types.
Additional errors observed
[error] Uncaught Error: Minified React error #418 (hydration mismatch, recurring)
[error] Uncaught (in promise) UnknownError: Internal error opening backing store for indexedDB.open
[error] [MCP] Could not connect to MCP server Filesystem: reply was never sent
[error] [MCP] Could not connect to MCP server Control Chrome: reply was never sent
[error] [MCP] Could not connect to MCP server Figma: reply was never sent
[error] [MCP] Could not connect to MCP server PDF Tools: reply was never sent
[error] [LOCAL_SESSION] Failed to load local file: LocalFileAccessError: [USER_DENIED]

What Should Happen?

a-api.anthropic.com should be included in the CSP connect-src allowlist. Cowork tasks should start and run successfully.

Error Messages/Logs

2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:36 [error] Connecting to 'https://a-api.anthropic.com/v1/m' violates the following Content Security Policy directive: "connect-src 'self' https://api.segment.io https://*.segment.io https://*.segment.com https://a-cdn.anthropic.com https://*.google.com https://*.facebook.com https://*.facebook.net https://*.doubleclick.net". The action has been blocked.
2026-03-04 16:54:36 [error] Fetch API cannot load https://a-api.anthropic.com/v1/m. Refused to connect because it violates the document's Content Security Policy.
2026-03-04 16:54:36 [error] Error sending segment performance metrics TypeError: Failed to fetch
2026-03-04 16:59:53 [warn] ProseMirror expects the CSS white-space property to be set, preferably to 'pre-wrap'. It is recommended to load style/prosemirror.css from the prosemirror-view package.
lsander@BL-lsander-FVFH72Z1Q6LR ~ % cat ~/Library/Logs/Claude/claude.ai-web.log | tail -50
2026-03-04 16:43:13 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:13 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:13 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:13 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:13 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:13 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:13 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:43:44 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:51:08 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:07 [error] Error: Network request failed for URL: https://api-iam.intercom.io/messenger/web/ping
2026-03-04 16:54:36 [error] Connecting to 'https://a-api.anthropic.com/v1/m' violates the following Content Security Policy directive: "connect-src 'self' https://api.segment.io https://*.segment.io https://*.segment.com https://a-cdn.anthropic.com https://*.google.com https://*.facebook.com https://*.facebook.net https://*.doubleclick.net". The action has been blocked.
2026-03-04 16:54:36 [error] Fetch API cannot load https://a-api.anthropic.com/v1/m. Refused to connect because it violates the document's Content Security Policy.
2026-03-04 16:54:36 [error] Error sending segment performance metrics TypeError: Failed to fetch
2026-03-04 16:59:53 [warn] ProseMirror expects the CSS white-space property to be set, preferably to 'pre-wrap'. It is recommended to load style/prosemirror.css from the prosemirror-view package.
2026-03-04 17:03:06 [error] Uncaught (in promise) Error: Error invoking remote method '$eipc_message$_61a9f65f-1ad1-4154-b2da-52d6d0694886_$_claude.settings_$_Startup_$_isStartupOnLoginEnabled': Error: Result from method "isStartupOnLoginEnabled" in interface "Startup" failed to pass validation
2026-03-04 17:04:14 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation
2026-03-04 17:04:14 [warn] [LOCAL_SESSION] unknown sdk message type: queue-operation

Steps to Reproduce

Launch Claude Desktop 1.1.4498 on macOS Apple Silicon
Confirm no proxy active via scutil --proxy
Open Cowork and start any task
Task hangs on "Starting up..." indefinitely
Check logs — CSP errors blocking a-api.anthropic.com appear immediately

Claude Model

Not sure / Multiple models

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

1.1.4498 (24f768) 2026-02-26T19:47:09.000Z

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_