219
main process vs renderer
also Electron main, Tauri core
The shell process owns the files and the OS. The window is a guest.
What is main process vs renderer?
A desktop shell has a privileged process and a window that draws UI. In Electron the privileged one is the main process and the window is a renderer. In Tauri the core process plays the same role. The window can be compromised like a browser tab. The shell process must not be.
Why does main process vs renderer matter when vibe coding?
A generated desktop app enables Node in the window “so the UI can read the disk.” One XSS is then a shell. Name which process may touch the filesystem.
How do you do main process vs renderer?
UI in the window. Files, dialogs, and updates in the shell process. The window asks. It does not import the OS APIs.
How do you ask a model for main process vs renderer?
Keep (feature) in the main process. The renderer may only ask over a named IPC channel. Do not enable Node in the window. Do not import fs in UI code.
What goes wrong with main process vs renderer?
A preload script that re-exports the entire Node API into the page.