Reading these comments I'm also curious about this.
I'm currently using some custom bwrap scripts (like [1]) to isolate projects with their own vscode /w claude extension
The desktop app I wonder if is worse because your web chat is accessible. In my bwrap sandbox, obviously some claude auth token is approved for using claude code, which I could be wrong but assume is limited and can't reach into web session history.
Reading these comments I'm also curious about this.
I'm currently using some custom bwrap scripts (like [1]) to isolate projects with their own vscode /w claude extension
The desktop app I wonder if is worse because your web chat is accessible. In my bwrap sandbox, obviously some claude auth token is approved for using claude code, which I could be wrong but assume is limited and can't reach into web session history.
[1] https://gist.github.com/digitalsignalperson/9f8c995dd7c0f61f...