Repository Issue Activity (beta)

#1578 Security audit: confirmed auth-bypass on web /api routes + RBAC/input-bound gaps across MCP & SDK packages (fixes attached)

#1237 Self-hosted v0.0.5: API key auth broken — 401 "Either userId or orgId not found" even with banner key

#1577 [Bug]: v0.0.8 self-hosted memory generation fails with No model provider configured while doctor detects OpenAI

#1321 Reranker crashes on self-hosted: undefined is not an object (evaluating 'b.AI.run')

#1325 server-v0.0.6 migration 0000_quiet_slyde fails on stores created by v0.0.5: schema "observatory" already exists

#1417 Python SDK test suites never run in CI

#1299 Where is the source for supermemory-server?

#1314 failed to apply embedded migration schema "observatory" already exists

#1546 Discount codes are never cleared: `usePromoCode().clear` is dead code, so the code applies to every future checkout forever

#1552 `check-types` in the browser extension breaks whenever a file is added to `public/` until you re-run `bun install`

#1542 `AnonymousAuth` is dead code that is broken at runtime and fails `check-types`

#1541 iOS Shortcut API key creation reads `res.key` instead of `res.data.key`, always yields `undefined`

#1540 Middleware: `?view=mcp` bypasses the auth gate on every route, including `/api/*`

#1561 check-types fails on main for the browser extension: textContent (string | null) passed where string is required

#1559 perf(web): optimize document upload validation with static sets, MIME checks, and 50MB size guard

#1551 MCP: a transient `/v3/session` failure is reported to the client as an invalid token

#1548 `@repo/lib/constants` does not resolve — three web components use an alias that isn't mapped

#1544 `bun run check-types` has never passed on main — `@repo/web` reports ~90 errors

#1550 MCP `SupermemoryClient` has no test file — #1406 shipped error-handling logic with tests that don't exist

#1549 `forgetMemoryRequest` drops its 30s timeout whenever a caller passes a signal

#1547 Claude memory tool: path → customId normalization collides, silently overwriting unrelated memory files

#1545 `@supermemory/tools` fails `check-types`: 31 errors in `test/`, including an import of a file that no longer exists

#1543 `NEXT_PUBLIC_GOOGLE_AUTH_ENABLED` / `NEXT_PUBLIC_GITHUB_AUTH_ENABLED` are inverted — setting them *hides* the button

#1538 Supermemory v0.0.8 |Cannot load documents and stats that's NOT from localhost

#1300 Memory agent timeout discards memories the model already produced; document is finalized as `done` with 0 memories