[BUG] Crash When Auto-Update Runs and Checksums Dont Match

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Crash in both Claude Desktop and Claude Code CLI - likely related to auto-update functionality on a corporate network with HTTPS inspection. In desktop, as soon as the UX prompts that a download is available, the UX hangs and becomes un-responsive requiring the threads to be killed manually. In CLI, it throws the errors below and appear hung. Yes I understand I need to run down why the hash is changing (likely deep packet inspection) and that is on my side but both the desktop app and claude code should handle it gracefully and not hang the process.

What Should Happen?

Neither the Claude Desktop app nor claude code CLI should crash when the update routes are corrupted

Error Messages/Logs

The logs show these errors - 
2026-07-27 19:16:10 [error] Setting the document's base URI to 'https://claude.ai/' violates the following Content Security Policy directive: "base-uri 'none'". The action has been blocked.
2026-07-27 19:16:11 [error] Uncaught (in promise) Error: Error invoking remote method '$eipc_message$_935e1991-d508-4ce4-a4ac-d719893bd36a_$_claude.buddy_$_BuddyBleTransport_$_reportState': Error: No handler registered for '$eipc_message$_935e1991-d508-4ce4-a4ac-d719893bd36a_$_claude.buddy_$_BuddyBleTransport_$_reportState'   
- 
It appears that our corporate firewall / Cloudflare One Client (or related infra) is inspecting HTTPS packets and changing the hash and the program panics on that case. 

This is from a claude --update CLI. 

Current version: 2.1.215
Checking for updates to latest version...
Updating to 2.1.220...
Error: Failed to install native update
TelemetrySafeError: Checksum mismatch: expected af5bf1f1b2aadffc768eccd787084c6fdf9ba81624cbe96c1c6d9ac1a1550231, got 18ac38786dea81aeffe10aa5d783775225f9fe43e35ec2deb45a020d4ce60519
Try running "claude doctor" for diagnostics

When you run claude doctor in CLI, this is the message

Check with your IT/security team about whether outbound traffic to downloads.claude.ai is being intercepted — that would explain a reproducible checksum failure on a managed corporate machine.

Failed — needs your attention:

claude update failed twice in a row with a checksum mismatch (the downloaded installer's hash didn't match what the server said to expect — first for 2.1.218, then for 2.1.219 on retry). This isn't a fluke I should keep retrying; it usually points to a corporate proxy/TLS-inspection or antivirus product rewriting the download in transit, or a flaky mirror. claude doctor confirms no other installation issues (native install healthy, on PATH, config consistent). You're still on 2.1.215.

Suggest: try claude update again later (transient network issue), or check with your IT/security team about whether outbound traffic to downloads.claude.ai is being intercepted — that would explain a reproducible checksum failure on a managed corporate machine.

Everything else checked out clean — no unused extensions to remove, no CLAUDE.md bloat, no slow hooks, no denied commands to pre-approve

**Claude.adi-web.log:**
2026-07-27 19:16:10 [warn] MaxListenersExceededWarning: Possible EventEmitter memory leak detected. 11 eipcmessage 935e1991-d508-4ce4-a4ac-d719893bd36a$claude.web$AutoUpdater$updaterState$store$_update listeners added. Use emitter.setMaxListeners() to increase limit

**cowork-service.log:**
2026/07/27 19:16:05.939356 [Server] Client connected
2026/07/27 19:16:06.775723 [Server] Client signature verified: :\Program Files\WindowsApps\Claude_1.24012.1.0_x64__pzs8sxrjxfjjc\app\claude.exe (subject: Anthropic, PBC)
2026/07/27 19:16:06.778023 [Server] Client connected: user=[redacted] exe=claude.exe isDev=false
2026/07/27 19:16:06.778538 [Server] Persistent RPC: entering loop
2026/07/27 19:16:06.825670 [Server] Persistent RPC: connection ended: failed to read length: EOF
2026/07/27 19:16:06.825670 [Server] Session [Redacted]:\AppData\Local\Packages\Claude_pzs8sxrjxfjjc\LocalCache\Roaming\Claude has no active connections, idle timeout starts

**main.log:**
2026-07-27 19:16:08 [info] [buddy] starting bridge
2026-07-27 19:16:08 [info] [buddy] starting bridge
2026-07-27 19:16:08 [info] [buddy] bridge started
2026-07-27 19:16:08 [info] [buddy] bridge started
2026-07-27 19:16:08 [info] [EventLogging] Flushing 50 events
2026-07-27 19:16:08 [info] [EventLogging] Flushing 50 events
2026-07-27 19:16:09 [info] [growthbook] refreshing for account change
2026-07-27 19:16:09 [info] [growthbook] refreshing for account change
2026-07-27 19:16:09 [info] [growthbook] loaded 235 features (0 changed)
2026-07-27 19:16:09 [info] [growthbook] loaded 235 features (0 changed)
2026-07-27 19:16:09 [info] [growthbook] next refresh in 60 min
2026-07-27 19:16:09 [info] [growthbook] next refresh in 60 min
2026-07-27 19:16:10 [warn] Blocked permission check {
permission: 'background-sync',
requestingOrigin: 'https://a.claude.ai/',
requestingUrl: 'https://a.claude.ai/isolated-segment.html?v=20d9aa4742',
isMainFrame: false,
topFrameUrl: 'https://claude.ai/new'
}
2026-07-27 19:16:10 [warn] Blocked permission check {
permission: 'background-sync',
requestingOrigin: 'https://a.claude.ai/',
requestingUrl: 'https://a.claude.ai/isolated-segment.html?v=20d9aa4742',
isMainFrame: false,
topFrameUrl: 'https://claude.ai/new'
}

Steps to Reproduce

Be on a network that has deep packet inspection where downloads.claude.ai is being inspected and impacting the hash. Load either claude desktop or claude code with an outdated version. Crash.

Claude Model

None

Is this a regression?

No, this never worked

Last Working Version

_No response_

Claude Code Version

2.1.215 (Claude Code) and Claude 1.24012.1 (0adcae) 2026-07-21T20:59:53.000Z (Claude Desktop)

Platform

Anthropic API

Operating System

Windows

Terminal/Shell

Windows Terminal

Additional Information

_No response_