fix(stage-tamagotchi): restrict to sender matched calls when dispatching events for electron window related api

Author: nekomeowww

apps/stage-tamagotchi/package.json

@@ -49,7 +49,7 @@
     "@tresjs/cientos": "^5.1.0",
     "@tresjs/core": "^5.1.0",
     "@types/audioworklet": "^0.0.87",
-    "@unbird/eventa": "^0.2.0",
+    "@unbird/eventa": "^0.2.1",
     "@vueuse/core": "^13.9.0",
     "@vueuse/shared": "^13.9.0",
     "@xsai-ext/providers-cloud": "catalog:",

apps/stage-tamagotchi/src/main/services/electron/window.ts

@@ -23,6 +23,21 @@ export function createWindowService(params: { context: ReturnType<typeof createC
   onAppBeforeQuit(() => stop())
   defineInvokeHandler(params.context, startLoopGetBounds, () => start())
 
-  defineInvokeHandler(params.context, electron.window.getBounds, () => params.window.getBounds())
-  defineInvokeHandler(params.context, electron.window.setIgnoreMouseEvents, invokeOpts => params.window.setIgnoreMouseEvents(invokeOpts[0], invokeOpts[1]))
+  defineInvokeHandler(params.context, electron.window.getBounds, (_, options) => {
+    if (params.window.webContents.id === options?.raw.ipcMainEvent.sender.id) {
+      return params.window.getBounds()
+    }
+
+    return {
+      x: 0,
+      y: 0,
+      width: 0,
+      height: 0,
+    }
+  })
+  defineInvokeHandler(params.context, electron.window.setIgnoreMouseEvents, (opts, options) => {
+    if (params.window.webContents.id === options?.raw.ipcMainEvent.sender.id) {
+      params.window.setIgnoreMouseEvents(...opts)
+    }
+  })
 }

apps/stage-web/package.json

@@ -38,7 +38,7 @@
     "@stdlib/string-base-kebabcase": "^0.2.2",
     "@tresjs/cientos": "^5.1.0",
     "@tresjs/core": "^5.1.0",
-    "@unbird/eventa": "^0.1.5",
+    "@unbird/eventa": "^0.2.1",
     "@valibot/to-json-schema": "1.0.0-rc.0",
     "@vueuse/core": "^13.9.0",
     "@vueuse/shared": "^13.9.0",