[BUG] awsAuthRefresh no longer displays device verification code before opening browser

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

When awsAuthRefresh triggers aws sso login, the device verification code is no longer displayed in the Claude Code terminal. The browser opens for device authorisation, but the user cannot verify the code matches because nothing is shown in the console until after the auth flow completes.

This worked correctly until approximately a week ago (mid-July 2026).

What Should Happen?

The verification code should be displayed in the terminal before the browser opens, so the user can confirm it matches the code shown in the browser's authorisation page.

Error Messages/Logs

Steps to Reproduce

1. Configure awsAuthRefresh in ~/.claude/settings.json:

"awsAuthRefresh": "aws sso login --profile <profile>"

1. Let the SSO session expire (or start a fresh day)
2. Launch claude — the browser opens for device auth but no verification code is shown in the terminal

Claude Model

Opus

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.212

Platform

AWS Bedrock

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

Environment

• Claude Code version: 2.1.212
• OS: macOS (Darwin 25.5.0)
• Installed via: Homebrew cask
• AWS CLI v2 (latest via brew)