fix: isolate guest user data directory to prevent seeing other users' data
Some checks failed
Release Binaries / release (push) Has been cancelled

This commit is contained in:
Gemini AI
2025-12-29 03:35:30 +04:00
Unverified
parent 92352c5936
commit 4a6878b77b

View File

@@ -68,6 +68,17 @@ export function setupCliIPC(mainWindow: BrowserWindow, cliManager: CliProcessMan
})
ipcMain.handle("users:createGuest", async () => {
const user = createGuestUser()
// Set up isolated environment for guest user
const root = getUserDataRoot(user.id)
cliManager.setUserEnv({
CODENOMAD_USER_DIR: root,
CLI_CONFIG: path.join(root, "config.json"),
})
await cliManager.stop()
const devMode = process.env.NODE_ENV === "development"
await cliManager.start({ dev: devMode })
// Set as active user
setActiveUser(user.id)
return user
})
ipcMain.handle("users:login", async (_, payload: { id: string; password?: string }) => {