CRT 0035931734 console fill: never copy Google session cookies by default (device-bound); own profile in a Chrome started without automation switches ... Google binds its session cookies to the device (Device Bound Session Credentials) and signs out sessions whose cookies look stolen, which can sign the owner out of their real Chrome. The default is now storebound's own profile per store; storebound starts Chrome itself (--user-data-dir, --remote-debugging-port=0, no --enable-automation, navigator.webdriver false) and attaches over CDP. --use-chrome-session google|apple is an explicit opt-in that warns. /signin/rejected is said plainly.		2026-10-12 07:46:38 +08:00
..
diagrams	No hand-written SVG: visx charts, lucide icons, Mermaid journey diagram	2026-10-11 08:49:30 +08:00
img	No hand-written SVG: visx charts, lucide icons, Mermaid journey diagram	2026-10-11 08:49:30 +08:00
research	docs: desktop D3 (studios, accounts, store-only apps, owner actions, writes) and R&D note on a fastlane importer and a RevenueCat adapter	2026-10-11 04:26:57 +08:00
agents-core.md	pitfalls: store-pitfalls skill and docs/pitfalls.md, store list lag warnings (apple iap-review exits 1), dryPlan table and a scan for count-only dry runs	2026-10-12 03:29:53 +08:00
api-coverage.md	console fill: one app shown twice is one app; App Privacy opens by app id via the API	2026-10-12 06:32:21 +08:00
desktop-release.md	docs: Windows runner on the VDS (Server 2022 eval in a KVM VM, CRT user level, windows:host); desktop.yml comments	2026-10-11 06:59:02 +08:00
desktop.md	console fill: never copy Google session cookies by default (device-bound); own profile in a Chrome started without automation switches	2026-10-12 07:46:38 +08:00
idempotency.md	console fill: walk the whole form; the owner only reviews and presses the final button	2026-10-12 06:51:01 +08:00
pitfalls.md	console fill: never copy Google session cookies by default (device-bound); own profile in a Chrome started without automation switches	2026-10-12 07:46:38 +08:00