Electron
- Separate main process (Node.js) from renderer process (Chromium) — never access Node APIs directly from renderer. Use `contextBridge.exposeInMainWorld()` with `preload` scripts for safe IPC. Enable `contextIsolation: true` and disable `nodeIntegration` in all BrowserWindows.
Electron
- Separate main process (Node.js) from renderer process (Chromium) — never access Node APIs directly from renderer. Use `contextBridge.exposeInMainWorld()` with `preload` scripts for safe IPC. Enable `contextIsolation: true` and disable `nodeIntegration` in all BrowserWindows.
- Use `ipcMain.handle()` / `ipcRenderer.invoke()` for async request-response IPC — avoid `send/on` for bidirectional flows. Package with `electron-builder` or `electron-forge` — configure auto-update with `electron-updater`. Use `app.getPath()` for platform-correct file paths (userData, temp, documents). Implement `BrowserWindow.webContents.session` for secure cookie and permission management.