The hook no longer reads sign-in request_uris from the output of a shell command that runs didbot inbox. That output is what other accounts wrote. A stranger can push a sign-in request for an agent's account and post its authorize URL in a comment. If the hook read that URL, the daemon would offer the stranger's sign-in as one the agent started.
The URLs an agent runs or opens itself are still read as before. This lands before didbot inbox exists, as didbot's inbox epic requires.
🤖 Generated with Claude Code