From f10ad698638821596bc8b7f3299ffd1e9f13a6bc Mon Sep 17 00:00:00 2001
From: mika kuns <mika.kuns@fb-tuning.de>
Date: Fri, 17 Apr 2026 14:20:09 +0200
Subject: [PATCH] fix(installer): reject CurrentUser service account without
 password

---
 src/ClaudeDo.Installer/Steps/RegisterServiceStep.cs | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/src/ClaudeDo.Installer/Steps/RegisterServiceStep.cs b/src/ClaudeDo.Installer/Steps/RegisterServiceStep.cs
index 40364e8..a57ff87 100644
--- a/src/ClaudeDo.Installer/Steps/RegisterServiceStep.cs
+++ b/src/ClaudeDo.Installer/Steps/RegisterServiceStep.cs
@@ -46,10 +46,9 @@ public sealed class RegisterServiceStep : IInstallStep
         var createArgs = $"create {ServiceName} binPath= \"{workerExe}\" start= {startType}";
 
         if (ctx.ServiceAccount == "CurrentUser")
-        {
-            var username = Environment.UserName;
-            createArgs += $" obj= \".\\{username}\"";
-        }
+            return StepResult.Fail(
+                "Service cannot run as Current User without a password. " +
+                "Select 'Local System' or extend ServicePage to capture a password.");
 
         progress.Report("Creating service...");
         var (exitCode, output) = await RunSc(createArgs, ctx, progress, ct);