Chrome profile copy left unused

[evandariel]

What happened?

An opt-in env var (WIGOLO_CHROME_PROFILE_PATH, meant for authenticated fetches) copies your entire actual Chrome profile - cookies, saved logins, history - to a temp folder, and that copy is never used by the code that's supposed to consume it (dead code path) and never cleaned up. privacy leak, but only if you deliberately set that specific variable since default install never touches it. WIGOLO_CDP_URL with self launched chrome works.

I didn't experience this bug, claude code found it while I had it check it before installing, just FYI.

Command / tool call

No response

wigolo version

0.1.43-beta.0

OS + Node version

win11

Output of npx wigolo doctor (if relevant)

Logs / error output

[Faiyajz]

I reviewed the reported path and confirmed that WIGOLO_CHROME_PROFILE_PATH creates a temporary copy of the Chrome user-data directory, but the resulting userDataDir is not consumed by the browser-fetch path. The temporary copy is also not removed.

I can prepare a fix. My proposed approach is to preserve the opt-in profile-auth feature: launch a dedicated persistent Chromium context from the copied profile, use it for the authenticated request, then close the context and delete the temporary directory in finally, including failure and abort paths.

I would add regression coverage proving that the copied profile is used and always cleaned up.

Before I start, can a maintainer confirm whether this is the intended direction, or whether WIGOLO_CHROME_PROFILE_PATH should instead be removed in favor of CDP/storage-state authentication?

[KnockOutEZ]

Thanks @evandariel for opening this issue, and @Faiyajz for the additional input.

We have some major improvements coming soon, and I'll update this thread as soon as I can confirm whether this will be covered as part of those changes.

I also noticed @josephkehan-prog is already working on a PR for this—thanks for jumping in! I'll review everything as soon as possible.

Really appreciate everyone's contributions and feedback.