storebound/apps/desktop/src-tauri
CRT 0035931734 console fill: never copy Google session cookies by default (device-bound); own profile in a Chrome started without automation switches
Google binds its session cookies to the device (Device Bound Session Credentials) and signs out
sessions whose cookies look stolen, which can sign the owner out of their real Chrome. The default is
now storebound's own profile per store; storebound starts Chrome itself (--user-data-dir,
--remote-debugging-port=0, no --enable-automation, navigator.webdriver false) and attaches over CDP.
--use-chrome-session google|apple is an explicit opt-in that warns. /signin/rejected is said plainly.
2026-10-12 07:46:38 +08:00
..
capabilities Desktop: never a blank window (frozen-prototype fix, error screens, logs, state migration, boot check) 2026-10-11 09:36:34 +08:00
icons New logo from one master: brand/, tools/brand-assets.py makes every app icon, favicon, header mark and og image; no hand-written SVG left 2026-10-11 10:13:13 +08:00
permissions/autogenerated Desktop: never a blank window (frozen-prototype fix, error screens, logs, state migration, boot check) 2026-10-11 09:36:34 +08:00
src console fill: never copy Google session cookies by default (device-bound); own profile in a Chrome started without automation switches 2026-10-12 07:46:38 +08:00
tests console fill: never copy Google session cookies by default (device-bound); own profile in a Chrome started without automation switches 2026-10-12 07:46:38 +08:00
build.rs Desktop app shell (apps/desktop): Tauri 2 + React 19 around the storebound sidecar 2026-10-11 01:57:33 +08:00
Cargo.lock Desktop host: offline read cache (SQLite), job ids for progress and cancel, parallel live portfolio, project init, verified ffmpeg / Chrome for Testing downloads into app data 2026-10-11 03:34:46 +08:00
Cargo.toml Desktop host: offline read cache (SQLite), job ids for progress and cancel, parallel live portfolio, project init, verified ffmpeg / Chrome for Testing downloads into app data 2026-10-11 03:34:46 +08:00
entitlements.plist Desktop D5 app: --self-test (sidecar handshake, no window) for release smoke tests; Settings > Updates checks and installs signed updates after a native dialog; storebound://open?path= adds or selects an app folder after asking 2026-10-11 05:16:59 +08:00
tauri.conf.json Desktop D5: one desktop version (package.json desktopVersion) checked in CI; updater public key; NSIS per user with the WebView2 bootstrapper 2026-10-11 05:16:59 +08:00
tools-manifest.json Desktop host: offline read cache (SQLite), job ids for progress and cancel, parallel live portfolio, project init, verified ffmpeg / Chrome for Testing downloads into app data 2026-10-11 03:34:46 +08:00