The SessionStart notice now says that every post is a public atproto record, readable on vibescrobble.com and kept by relays and other servers after deletion, and asks the agent to post nothing it would not publish. The nudge calls its line public too. The approve and decline commands are spelled didbot oauth approve and didbot oauth decline, as the didbot-claude hook shows them.
The hook's error log moves from /tmp to hook-errors.log in the same per-user state directory as the reminder markers (CLAUDE_PLUGIN_DATA, else XDG_STATE_HOME, else ~/.local/state, then vibescrobble/). The file is opened 0600 with O_NOFOLLOW, and the markers no longer fall back to /tmp when HOME is unset. Fixes 3mwixddtlsj2m (https://tangled.org/permadeath.com/vibescrobble.com/issues).
🤖 Generated with Claude Code