test: isolate utility process database permissions

src/main/desktop-storage-electron-fixture.ts

@@ -12,6 +12,7 @@ import { MAGIC_NOTE_MAX_VIDEO_BYTES, type MagicNoteContent } from '../shared/mag
 import { createHash } from 'node:crypto'
 
 const root = process.env.GB_STORAGE_TEST_ROOT!
+process.umask(0o077)
 app.setPath('userData', join(root, 'electron'))
 
 async function run(): Promise<void> {

src/main/readonly-query-reader.test.ts

@@ -255,9 +255,12 @@ describe('assistant readonly worker', () => {
 
       const inFlight = reader.call('listConversationSummaries', [[conversations[3]!.id]])
       await reader.terminateWorkerForTest()
-      // A fast worker may commit the response before termination; the
+      // Termination races the response. Either outcome is valid here; the
-      // dedicated crash tests cover rejection when failure wins the race.
+      // dedicated crash tests cover deterministic rejection propagation.
-      await expect(inFlight).resolves.toEqual(expected[1])
+      await inFlight.then(
+        result => expect(result).toEqual(expected[1]),
+        error => expect(error).toBeInstanceOf(ReadonlyWorkerUnavailableError),
+      )
     } finally { database.close() }
   }, 60_000)
 

tests/support/desktop-storage-fault-electron-fixture.ts

@@ -5,6 +5,7 @@ import { DesktopStorageClient } from '../../src/main/desktop-storage-client'
 import { AssistantDatabase } from '../../src/main/assistant/assistant-database'
 
 const root = process.env.GB_STORAGE_FAULT_ROOT!
+process.umask(0o077)
 app.setPath('userData', join(root, 'electron'))
 
 function killTransport(storage: DesktopStorageClient): void {