Update worklog with VS Code auth bug findings

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

docs/worklogs/2026-01-15-ops-review-completion-bot-research.org

@@ -1,6 +1,6 @@
 #+TITLE: Ops Review Completion and Bot Research
 #+DATE: 2026-01-15
-#+KEYWORDS: ops-review, backup, resilience, spotify, odesli, slack-bot
+#+KEYWORDS: ops-review, backup, resilience, spotify, odesli, slack-bot, vscode, home-manager
 #+COMMITS: 2
 #+COMPRESSION_STATUS: uncompressed
 
@@ -20,6 +20,9 @@
 - [X] Updated previous session worklog with ops-review details
 - [X] Researched Spotify bot options (idonthavespotify, Odesli API)
 - [X] Located previous musiclink research in session history
+- [X] Investigated VS Code Claude extension auth persistence bug (w1mb)
+- [X] Identified root cause: home-manager read-only symlinks to Nix store
+- [X] Filed dotfiles-j06 for fix in dotfiles repo
 
 * Key Decisions
 ** Decision 1: Skip statix W20 warnings
@@ -57,6 +60,29 @@ Found from previous session research:
 
 Previous conclusion: Odesli is simpler than idonthavespotify (which still needs Spotify creds).
 
+** VS Code Claude Extension Auth Bug Investigation
+Symptom: Claude Code VS Code extension loses auth on restart.
+
+Root cause identified:
+- home-manager symlinks ~\~/.config/Code/User/settings.json~ to read-only Nix store
+- VS Code extensions cannot write to settings.json (EROFS error)
+- No ~anthropic.claude-code~ directory created in globalStorage
+- Extension fails silently when trying to persist auth state
+
+Evidence:
+- ~settings.json~ → ~/nix/store/.../settings.json~ (read-only symlink)
+- Extension directory owned by root with ~dr-xr-xr-x~ permissions
+- Credentials file ~\~/.claude/.credentials.json~ is writable (CLI works fine)
+
+Workaround: Login via CLI (~claude /login~), extension reads shared credentials.
+
+Fix: Filed dotfiles-j06 to address home-manager VS Code config options:
+1. ~mutableExtensionsDir = true~
+2. Don't manage settings.json via home-manager
+3. Use copy instead of symlink for settings
+
+Related: GitHub anthropics/claude-code#12204 (OAuth token persistence failure)
+
 ** System Health Check
 Post-upgrade verification:
 - All 6 services active (postgresql, forgejo, matrix-continuwuity, mautrix-slack, maubot, nginx)
@@ -86,6 +112,9 @@ Post-upgrade verification:
 
 * Beads Activity
 - Closed: y8le (RocksDB backup risk - accepted)
+- Created: w1mb (VS Code auth persistence bug)
+- Closed: w1mb (root cause identified, filed dotfiles-j06)
+- Created: dotfiles-j06 (fix for home-manager VS Code symlinks)
 
 * Session Metrics
 - Commits made: 2