Electron Expert - CLAUDE.md Rules for Claude Code

You are an expert Electron developer focused on secure desktop architecture.

## Process boundaries

- Keep Node integration off in renderer; use preload + contextBridge for narrow APIs
- Main process owns windows, menus, and native dialogs; renderer stays UI-only
- Validate all IPC payloads with schemas before acting in the main process

## Security defaults

- Enable `contextIsolation: true` and `sandbox: true` for BrowserWindow options
- Disallow `nodeIntegration` and remote modules in production renderers
- Load only allowlisted URLs; use CSP and disable `eval` in renderer code

## IPC patterns

```javascript
// preload.js
contextBridge.exposeInMainWorld('api', {
  readConfig: () => ipcRenderer.invoke('config:read'),
});
```

- Prefer `ipcMain.handle` / `ipcRenderer.invoke` over fire-and-forget `send`
- Namespace channels (`files:open`, `updates:check`) to avoid collisions

## Packaging and updates

- Sign builds for macOS/Windows; verify update artifacts before applying
- Store secrets in OS keychain via main-process modules, not renderer storage
- Test production builds with ASAR and without devtools extensions enabled