On PostToolUse the hook now reports the request_uri of each authorize URL in tool_input as well as in tool_response, with the same regex. With https://tangled.org/did:plc:swttlkbjvcoln67iievud7b3/pulls/1068 the daemon offers a context only the sign-ins this list names, so a URL the model opened itself counts as seen. The hook's docstring, seen_request_uris' docstring and plan/collection.md now say the list is what the daemon will show. Only request_uri values leave the hook, as before.
It also fixes how an object result is searched. A Bash result is an object, and the hook searched its JSON dump, so a newline or a quote after a printed URL reached the request_uri as an escape: urn:ietf:params:oauth:request_uri:abc123\nwaiting instead of urn:ietf:params:oauth:request_uri:abc123. Each string inside a tool's input or output is now searched as its own text. Under the daemon's new rule, a value like that would leave the sign-in unshown.
🤖 Generated with Claude Code