Repository Issue Activity (beta)

#1546 CREATE_NOTEBOOK RPC CCqFvf returns status=3 (Invalid argument) since Jun 10

#1571 View & Archive Artifact Prompts

#1550 Track: izAoDd → ozz5Z second ADD_SOURCE RPC + dual-RPC fallback (some cohorts require it)

#1569 auth check --test text mode exits 0 on token-fetch failure; need passive validation contract

#1537 Headless re-auth: optional keepalive profile-touch to keep the L3 fallback profile warm (P3 follow-up)

#1558 IMPORT_RESEARCH envelope probe is ambiguous for a flat single-source result

#1549 Track: GET_NOTEBOOK (rLM1Ne) tail also migrated to nested [2,…,[1]] shape (read path — not yet failing)

#1541 MCP: research_import integration test only covers empty-sources path (no LBwxtb import leg)

#1540 MCP: normalize notebook_create output shape (nests under 'notebook'; siblings are flat)

#1535 Notebook.created_at exposes the last-MODIFIED time, not creation (reads data[5][5]; creation is data[5][8])

#1517 Logging redaction misses NID / LSOLH / __Host-GAPS session cookies (credential leak to logs)

#1518 UnknownRPCMethodError.data_at_failure spliced into str()/repr() without scrubbing

#1521 Artifact download follows redirects to arbitrary hosts without re-validating the trusted-domain allowlist

#1529 Note.created_at and note-backed MindMap.created_at silently drop the timestamp present in the response

#1520 profile delete (+ text-mode list/create/rename) escape the CLI error contract as a raw traceback

#1522 source delete partial-id resolver missing the exact-match-wins rule

#1519 API timestamps decoded as naive local-time datetimes — created_at is host-TZ-dependent

#1523 Split-state PSIDTS recovery writes a duplicate __Secure-3PSIDTS row to storage_state.json

#1513 Harden Playwright storage_state cookie filter: type-guard domain + write-time duplicate-name dedup

#1514 browser_capture: surface BROWSER_CLOSED_HELP if TargetClosed escapes to the outer exception handler

#1497 Broaden rpc_decode_errors to count feature-layer safe_index drift (post-rpc_call)

#1501 arch(burndown): drain the single-level positional-RPC indexing allowlist (#1491 follow-up)

#1493 Tighten two guard seams that gate a narrower dimension than their invariant: _app boundary lint allows deep rpc imports; API-compat audit captures but never asserts has_all

#1494 Cassette matching is shape-only (rpcids + body shape) — add golden-payload/decoded-row assertions for high-risk RPCs

#1492 Drift observability gaps: no first-class rpc_decode_errors metric, and the chat path (GenerateFreeFormStreamed) escapes the drift canary