A client can print its authorize URL where no hook reads it, and a long poll can be slower than the agent asking. `didbot-oauth show <url>` looks that request up, and `approve --url` and `decline --url` answer it. It is the seen_request_uris fast path made manual, over the same authenticated getAuthorization: the URL's origin must be the server this daemon serves, and the record still comes back only to the account it names, so which account approves stays the record's to say. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Change-Id: I5550737b8607c0f85e3f237804f5d46035d6fb02