aegis-desktop 0.8.7 → 0.8.9

package/README.md

@@ -326,3 +326,9 @@ host over the same engine.
 [`aegis-desktop`](https://www.npmjs.com/package/aegis-desktop) is built from a
 `git subtree split` of it — same code, published without the rest of the
 monorepo. Edits land here and are synced out; nothing is authored elsewhere.
+
+---
+
+Built by **Niklas Borneklint** — [aegiscloud.org](https://aegiscloud.org) · [@aegisinfo](https://github.com/aegisinfo)
+
+Part of the ÆGIS ecosystem.

package/lib/local/engine.js

@@ -76,6 +76,34 @@ try {
   }
 }
 
+/**
+ * The shared pooled-brain selection rule (`client/brain-catalog.js`), resolved
+ * the same two ways as every other shared module: repo-relative from a source
+ * checkout, and this app's own staged tree (`desktop/vendor/brain-catalog.js`,
+ * flattened by scripts/predist.mjs because a packaged app cannot reach outside
+ * its own directory). The CLI resolves the same file its own way, through
+ * `cli/src/sharedpaths.js`. Both hosts must agree on which entry stands for the
+ * pool, so there is deliberately no fallback implementation here — a silently
+ * divergent local copy is the exact bug this module removes. When neither
+ * layout has it, require() throws at load time naming the file, rather than the
+ * host quietly offering a different model list than its sibling.
+ */
+function requireSharedBrain() {
+  const candidates = [
+    () => require('../../../client/brain-catalog.js'),
+    () => require('../../vendor/brain-catalog.js'),
+  ];
+  let last = null;
+  for (const load of candidates) {
+    try {
+      return load();
+    } catch (err) {
+      last = err;
+    }
+  }
+  throw last;
+}
+
 /**
  * How long a turn waits for the working-tree lock before running anyway.
  *
@@ -254,38 +282,16 @@ function normalizeCatalog(models) {
  * The pool already auto-routes across whichever providers are live, so the
  * desktop dropdown offers exactly one entry for the "aegis" class: the
  * collapsed "Nexus" brain — never the raw provider list.
+ *
+ * The selection rule itself now lives in `client/brain-catalog.js`, shared with
+ * the CLI: this host and the terminal were offering the same account two
+ * different model lists (one collapsed entry vs. every distinct provider id),
+ * and two copies of the rule is precisely how that drift happened. Resolved the
+ * two ways this repo resolves every shared module — repo-relative in a
+ * checkout, and this app's staged vendor/ tree — with the selection itself
+ * unchanged.
  */
-const NEXUS_BRAIN_IDS = Object.freeze(['nexus-brain', 'aegis-brain']);
-const NEXUS_LABEL = 'Nexus';
-
-/**
- * Pick the one entry standing in for the pooled brain. The server serves
- * `nexus-brain` as the canonical tier (`hidden: false`, no `alias_of`) and
- * marks every other spelling — `aegis-brain` and the `-smart`/`-neo` tiers —
- * as `hidden: true, alias_of: "nexus-brain"`. Prefer the canonical id so the
- * request travels on the name the server owns; fall back to the alias, then to
- * any tier whose `alias_of` names the brain, so a renamed or trimmed catalog
- * still resolves to something selectable instead of silently emptying the
- * dropdown (the previous fixed-id lookup returned [] if `aegis-brain` was ever
- * retired, leaving the class with no model to choose).
- */
-function selectBrainEntry(models) {
-  return (
-    models.find((m) => NEXUS_BRAIN_IDS.includes(m.id) && !m.hidden && m.alias_of === undefined)
-    || models.find((m) => NEXUS_BRAIN_IDS.includes(m.id))
-    || models.find((m) => m.alias_of && NEXUS_BRAIN_IDS.includes(m.alias_of))
-    || null
-  );
-}
-
-function filterAegisCatalog(models) {
-  const nexus = selectBrainEntry(models);
-  if (!nexus) return [];
-  // Drop the alias bookkeeping: this entry *is* the selection, so the renderer
-  // must never treat it as a hidden alias and filter it back out.
-  const { hidden, alias_of, ...rest } = nexus;
-  return [{ ...rest, label: NEXUS_LABEL }];
-}
+const { filterAegisCatalog } = requireSharedBrain();
 
 // ── Agent-loop helpers ──────────────────────────────────────────────────────
 

package/main.js

@@ -47,6 +47,16 @@ try {
   credentials = require('./vendor/credentials.js');
 }
 
+// Same auto-provision helper the MCP plugin and the CLI use (see
+// client/auto-provision.js) — one implementation so all three hosts ask
+// aegis1 for the same account on the same machine, with the same timeout.
+let autoProvision;
+try {
+  autoProvision = require('../client/auto-provision.js');
+} catch {
+  autoProvision = require('./vendor/auto-provision.js');
+}
+
 // The shared `~/.aegiscode/.env` loader (client/env-file.js, staged to
 // ./vendor/env-file.js when packaged). It is what makes the key instruction the
 // same in every host — "put it in ~/.aegiscode/.env" — because AEGIS_API_KEY is
@@ -2972,7 +2982,7 @@ function bootstrap() {
     return win;
   }
 
-  app.whenReady().then(() => {
+  app.whenReady().then(async () => {
     // Hydrate the client from the persisted key BEFORE the renderer issues any
     // status/model call, so class/model dropdowns populate immediately when a
     // key was saved in-app (safeStorage is usable only after app ready).
@@ -2987,6 +2997,20 @@ function bootstrap() {
         // The shared store is the newer write: bring this host's encrypted copy
         // up to date so a CLI rotation does not have to be redone in Settings.
         if (chosen.source === 'shared') settings.setAegisKey(chosen.key);
+      } else {
+        // Nothing configured anywhere (env, this app's encrypted copy, or the
+        // shared store): a fresh install. Auto-provision a free device key
+        // from aegis1 — same shared helper mcp/server.js and the CLI use, so
+        // the desktop app works with no manual sign-in step. It starts at
+        // zero token-bank balance server-side (register-device), and pooled
+        // aegiscloud models additionally require an upgraded plan (aegis1's
+        // is_pro() gate) — this only unblocks BYOK and account status/
+        // settings until the account is funded and/or upgraded. Failure
+        // (offline, aegis1 unreachable) falls through exactly as before: the
+        // renderer's normal "not signed in" state handles it, and the next
+        // launch tries again.
+        const result = await autoProvision.autoProvisionApiKey(aegis, credentials);
+        if (result.key) settings.setAegisKey(result.key);
       }
     }
     // Apply whatever was last saved (or the default): ship the shortcut only

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "aegis-desktop",
   "productName": "AEGIS Desktop",
-  "version": "0.8.7",
-  "description": "Thin Electron host for AEGIS \u2014 a local chat UI over the shared client/aegis.js transport. Ships transport + UI only; engine logic stays server-side.",
+  "version": "0.8.9",
+  "description": "Thin Electron host for AEGIS — a local chat UI over the shared client/aegis.js transport. Ships transport + UI only; engine logic stays server-side.",
   "author": {
     "name": "AEGIS Code",
     "email": "nborneklint@gmail.com"
@@ -32,7 +32,7 @@
     "demo": "node scripts/record-demo-gif.mjs",
     "dist": "npm run predist && electron-builder",
     "dist:dir": "npm run predist && electron-builder --dir",
-    "check": "node --check main.js && node --check preload.js && node --check renderer/app.js && node --check renderer/quick.js && node --check renderer/budget.js && node --check renderer/usage.js && node --check renderer/stream-policy.js && node --check renderer/transcript-view.js && node --check renderer/diff.js && node --check renderer/diffview.js && node --check renderer/markdown.js && node --check renderer/vendor/aegis-highlight.js && node --check scripts/predist.mjs && node --check scripts/generate-icon.mjs && node --check lib/local/local.js && node --check lib/local/context.js && node --check lib/local/engine.js && node --check lib/local/session-rounds.js && node --check lib/local/tools.js && node --check lib/local/prompt.js && node --check lib/local/shell.js && node --check lib/local/agents.js && node --check lib/local/queue.js && node --check lib/local/autonomous.js && node --check lib/settings.js && node --check lib/sync/sessions.js && node --check lib/sync/memory-queue.js && node --check lib/window-state.js && node --check lib/deep-link.js && node --check lib/quick-launcher.js && node --check lib/avatar/tiers.js && node --check lib/avatar/xp.js && node --check lib/avatar/level.js && node --check lib/avatar/events.js && node --check lib/avatar/persona.js && node --check bin/aegis.js",
+    "check": "node --check main.js && node --check preload.js && node --check renderer/app.js && node --check renderer/quick.js && node --check renderer/budget.js && node --check renderer/usage.js && node --check renderer/stream-policy.js && node --check renderer/transcript-view.js && node --check renderer/diff.js && node --check renderer/diffview.js && node --check renderer/markdown.js && node --check renderer/vendor/aegis-highlight.js && node --check scripts/predist.mjs && node --check scripts/generate-icon.mjs && node --check scripts/bundle-fonts.mjs && node --check lib/local/local.js && node --check lib/local/context.js && node --check lib/local/engine.js && node --check lib/local/session-rounds.js && node --check lib/local/tools.js && node --check lib/local/prompt.js && node --check lib/local/shell.js && node --check lib/local/agents.js && node --check lib/local/queue.js && node --check lib/local/autonomous.js && node --check lib/settings.js && node --check lib/sync/sessions.js && node --check lib/sync/memory-queue.js && node --check lib/window-state.js && node --check lib/deep-link.js && node --check lib/quick-launcher.js && node --check lib/avatar/tiers.js && node --check lib/avatar/xp.js && node --check lib/avatar/level.js && node --check lib/avatar/events.js && node --check lib/avatar/persona.js && node --check bin/aegis.js",
     "test:shell": "node ../test/desktop-shell.mjs",
     "test:model": "node ../test/model-dispatch.mjs",
     "test:budget": "node ../test/budget.test.mjs",
@@ -52,7 +52,8 @@
     "test:avatar-level": "node test/avatar-level.test.mjs",
     "test:avatar-events": "node test/avatar-events.test.mjs",
     "test:avatar-tiers": "node test/avatar-tiers.test.mjs",
-    "test:avatar-persona": "node test/avatar-persona.test.mjs"
+    "test:avatar-persona": "node test/avatar-persona.test.mjs",
+    "test:renderer-fonts": "node test/renderer-fonts.test.mjs"
   },
   "dependencies": {
     "electron-updater": "^6.8.9"

package/renderer/fonts/NOTICE.md

@@ -0,0 +1,57 @@
+# Vendored webfonts
+
+Committed verbatim, like `renderer/vendor/` — no CDN and no network at run time.
+Loaded by `renderer/index.html` and `renderer/quick.html` under a
+`font-src 'self'` CSP.
+
+Generated by `desktop/scripts/bundle-fonts.mjs`; do not edit the `.woff2` files
+or `fonts.css` by hand. To refresh the set:
+
+    node desktop/scripts/bundle-fonts.mjs          # rewrite
+    node desktop/scripts/bundle-fonts.mjs --check   # verify against the CDN (needs network)
+
+All three families are licensed under the **SIL Open Font License 1.1**, which
+permits bundling and redistribution. The copyright lines Google Fonts serves
+with them:
+
+- `Syne` — © 2018 The Syne Project Authors
+  (<https://github.com/bonjour-monde/fonderie>), OFL 1.1. Display face used for
+  the wordmark, headings and UI chrome (`--font-display`).
+- `DM Mono` — © 2020 The DM Mono Project Authors
+  (<https://github.com/googlefonts/dm-mono>), OFL 1.1. Monospace face for code,
+  diffs and metrics (`--font-mono`).
+- `Ubuntu` — © 2010-2011 Canonical Ltd.
+  (<https://github.com/googlefonts/UbuntuFont>), OFL 1.1. Chat body text
+  (`--font-chat`).
+
+The OFL is a per-file licence; the full text ships with each upstream project at
+the links above and is not duplicated here.
+
+## Why these are vendored rather than fetched
+
+The `<link>` to `fonts.googleapis.com` that used to sit in `index.html` made the
+app's typography depend on the network and on the host. Online it drew the three
+faces above. Offline — or behind a blocker, or on a machine whose font resolver
+disagreed — the fallback chain `'Segoe UI', system-ui, sans-serif` resolved to a
+*different* font on each platform: SF Pro on macOS, Segoe UI on Windows, whatever
+fontconfig offered on Linux. Three visibly different products from one stylesheet.
+
+Serving the same bytes from the app directory makes the rendering identical on
+every platform and lets the CSP drop its external origins entirely. This is the
+desktop counterpart of the terminal-side policy in `cli/src/caps.js`, which
+likewise refuses to let the host change what is drawn.
+
+Note the honest limits. These three families cover latin, latin-ext, cyrillic,
+cyrillic-ext, greek and greek-ext — and **not** vietnamese: Google Fonts serves
+no vietnamese subset for Syne, DM Mono or Ubuntu, and `latin-ext` stops at
+U+1E9F and resumes at U+1EF2, so the core Vietnamese diacritic block
+U+1EA0–U+1EF1 falls through to a host font. `desktop/scripts/bundle-fonts.mjs`
+records the same gap, and `desktop/test/renderer-fonts.test.mjs` asserts it, so
+the day Google adds the subset the test fails loudly instead of the gap
+silently persisting.
+
+Glyphs outside the covered set — CJK, and colour emoji in particular — are also
+still drawn by a host font and remain platform-specific. `Apple Color Emoji`,
+`Segoe UI Emoji` and `Noto Color Emoji` are not interchangeable and are not
+redistributable here, so that divergence cannot be removed by bundling; it is
+inherent to the platform.

package/renderer/fonts/fonts.css

@@ -0,0 +1,368 @@
+/* Vendored webfonts — DO NOT EDIT BY HAND.
+ *
+ * Generated by desktop/scripts/bundle-fonts.mjs from the Google Fonts CSS for
+ * Syne (400/600/700/800), DM Mono (300/400/500 + italic 400) and Ubuntu
+ * (400/500/700 + italic 400) — the exact families renderer/index.html used to
+ * request from fonts.googleapis.com at run time.
+ *
+ * WHY THIS IS VENDORED. A CDN <link> made the app's type depend on the network
+ * and on the host: online it drew Syne/DM Mono/Ubuntu, offline (or behind a
+ * blocker) it silently fell through to 'Segoe UI' on Windows, system-ui/SF on
+ * macOS and whatever fontconfig produced on Linux — three different-looking
+ * apps from one stylesheet. Serving the same bytes from the app directory makes
+ * the rendering identical everywhere and offline-capable. Licences are OFL 1.1;
+ * see NOTICE.md in this directory.
+ */
+
+@font-face {
+  font-family: 'DM Mono';
+  font-style: italic;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./aFTW7PB1QTsUX8KYth-gCKSIUKw.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'DM Mono';
+  font-style: italic;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./aFTW7PB1QTsUX8KYth-gBqSI.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'DM Mono';
+  font-style: normal;
+  font-weight: 300;
+  font-display: swap;
+  src: url(./aFTR7PB1QTsUX8KYvrGyEY2tbZX9.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'DM Mono';
+  font-style: normal;
+  font-weight: 300;
+  font-display: swap;
+  src: url(./aFTR7PB1QTsUX8KYvrGyEYOtbQ.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'DM Mono';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./aFTU7PB1QTsUX8KYthSQBLyM.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'DM Mono';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./aFTU7PB1QTsUX8KYthqQBA.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'DM Mono';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(./aFTR7PB1QTsUX8KYvumzEY2tbZX9.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'DM Mono';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(./aFTR7PB1QTsUX8KYvumzEYOtbQ.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm2NL9Hz_.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm25L9Hz_.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm2BL9A.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm2NL9Hz_.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm25L9Hz_.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm2BL9A.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm2NL9Hz_.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm25L9Hz_.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm2BL9A.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 800;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm2NL9Hz_.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 800;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm25L9Hz_.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'Syne';
+  font-style: normal;
+  font-weight: 800;
+  font-display: swap;
+  src: url(./8vIH7w4qzmVxm2BL9A.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: italic;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCu6KVjbNBYlgoKej75l0mwFg.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: italic;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCu6KVjbNBYlgoKej7wl0mwFg.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: italic;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCu6KVjbNBYlgoKej74l0mwFg.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: italic;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCu6KVjbNBYlgoKej73l0mwFg.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: italic;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCu6KVjbNBYlgoKej76l0mwFg.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: italic;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCu6KVjbNBYlgoKej70l0k.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCs6KVjbNBYlgoKcg72j00.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCs6KVjbNBYlgoKew72j00.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCs6KVjbNBYlgoKcw72j00.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCs6KVjbNBYlgoKfA72j00.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCs6KVjbNBYlgoKcQ72j00.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(./4iCs6KVjbNBYlgoKfw72.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCjC3jvWyNL4U.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCjC3jtGyNL4U.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCjC3jvGyNL4U.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCjC3js2yNL4U.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCjC3jvmyNL4U.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCjC3jsGyN.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCxCvjvWyNL4U.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCxCvjtGyNL4U.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCxCvjvGyNL4U.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCxCvjs2yNL4U.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+  font-family: 'Ubuntu';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(./4iCv6KVjbNBYlgoCxCvjsGyN.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}

package/renderer/index.html

@@ -2,17 +2,16 @@
 <html lang="en">
 <head>
   <meta charset="utf-8" />
+  <!-- No external origins. The UI fonts are vendored in ./fonts/, so the window
+       draws the same faces on every platform with the network down; see
+       fonts/NOTICE.md. `font-src 'self'` is what allows them, and is why the
+       old fonts.googleapis.com / fonts.gstatic.com allowances are gone. -->
   <meta
     http-equiv="Content-Security-Policy"
-    content="default-src 'none'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:"
+    content="default-src 'none'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self' data:"
   />
   <title>AEGIS Desktop</title>
-  <link rel="preconnect" href="https://fonts.googleapis.com" />
-  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
-  <link
-    href="https://fonts.googleapis.com/css2?family=DM+Mono:ital,wght@0,300;0,400;0,500;1,400&family=Syne:wght@400;600;700;800&family=Ubuntu:ital,wght@0,400;0,500;0,700;1,400&display=swap"
-    rel="stylesheet"
-  />
+  <link rel="stylesheet" href="fonts/fonts.css" />
   <link rel="stylesheet" href="style.css" />
 </head>
 <body>

package/renderer/quick.css

@@ -6,6 +6,18 @@
   --text2: #7e9ab8;
   --teal: #00e5c0;
   --red: #ff1744;
+
+  /* Same deterministic stacks as style.css, and for the same reason: the three
+     named families are vendored in renderer/fonts/ (loaded by quick.html before
+     this file), so the launcher resolves to the same bytes on every platform.
+
+     This file is `-apple-system, 'Segoe UI', system-ui` no more. As the *only*
+     stack it made the launcher the last place in the app where the host still
+     decided what was drawn — SF Pro on macOS, Segoe UI on Windows, fontconfig's
+     pick on Linux — which is exactly the divergence the vendoring removes. */
+  --font-display: 'Syne', sans-serif;
+  --font-mono: 'DM Mono', monospace;
+  --font-chat: 'Ubuntu', sans-serif;
 }
 
 * {
@@ -21,7 +33,7 @@ body {
   margin: 0;
   background: transparent;
   color: var(--text);
-  font: 14px/1.4 -apple-system, 'Segoe UI', system-ui, sans-serif;
+  font: 14px/1.4 var(--font-chat);
 }
 
 .ql-shell {
@@ -45,13 +57,20 @@ body {
 }
 
 .ql-badge {
+  font-family: var(--font-display);
   font-weight: 700;
   letter-spacing: 0.04em;
   color: var(--teal);
 }
 
-.ql-model {
-  color: var(--text2);
+/* Form controls do NOT inherit type from their parent — browsers give them the
+   platform widget font — so each one here names its family. Left implicit, the
+   launcher's own controls were the last place the host decided what was drawn. */
+.ql-model-select,
+.ql-stop,
+.ql-push,
+.ql-prompt {
+  font-family: var(--font-chat);
 }
 
 .ql-model-select {
@@ -63,6 +82,11 @@ body {
   padding: 2px 4px;
 }
 
+.ql-model {
+  color: var(--text2);
+  font-family: var(--font-mono);
+}
+
 .ql-spacer {
   flex: 1 1 auto;
 }
@@ -121,6 +145,7 @@ body {
   display: flex;
   align-items: center;
   gap: 8px;
+  font-family: var(--font-mono);
   font-size: 11px;
   color: var(--text2);
 }

package/renderer/quick.html

@@ -2,11 +2,14 @@
 <html lang="en">
 <head>
   <meta charset="utf-8" />
+  <!-- Same policy as index.html: no external origins, fonts vendored locally so
+       the quick bar looks identical on every platform. See fonts/NOTICE.md. -->
   <meta
     http-equiv="Content-Security-Policy"
-    content="default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self' data:"
+    content="default-src 'none'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self' data:"
   />
   <title>AEGIS Quick Launcher</title>
+  <link rel="stylesheet" href="fonts/fonts.css" />
   <link rel="stylesheet" href="quick.css" />
 </head>
 <body>

package/renderer/style.css

@@ -20,9 +20,21 @@
   --user: var(--purple);
   --assistant: var(--surface2);
 
-  --font-display: 'Syne', 'Segoe UI', system-ui, sans-serif;
+  /* Deterministic stacks. All three named families are vendored in
+     renderer/fonts/ (see fonts/NOTICE.md), so they resolve to the same bytes on
+     every platform and with the network down — the desktop counterpart of the
+     terminal policy in cli/src/caps.js.
+
+     'Segoe UI' and system-ui were removed from the display/chat stacks on
+     purpose. As *first fallbacks* they converted "webfont didn't load" into a
+     platform-specific font — Segoe UI on Windows, SF Pro on macOS, fontconfig's
+     pick on Linux — which is how one stylesheet produced three different-looking
+     apps. Only glyphs the vendored families do not cover (CJK, colour emoji)
+     now reach the generic keyword; that residue is a host font by definition
+     and cannot be bundled away. */
+  --font-display: 'Syne', sans-serif;
   --font-mono: 'DM Mono', monospace;
-  --font-chat: 'Ubuntu', 'Segoe UI', system-ui, sans-serif;
+  --font-chat: 'Ubuntu', sans-serif;
 }
 
 * {

package/vendor/aegis.js

@@ -189,11 +189,12 @@ function createClient(opts = {}) {
     return headers;
   }
 
-  async function apiPost(path, body, headers) {
+  async function apiPost(path, body, headers, opts) {
     const res = await fetch(`${apiBase}${path}`, {
       method: 'POST',
       headers: headers || authHeaders(),
       body: JSON.stringify(body || {}),
+      signal: opts && opts.signal,
     });
     return parseResponse(res);
   }
@@ -371,6 +372,19 @@ function createClient(opts = {}) {
     return apiPost('/api/verify-api-key', { api_key: apiKey });
   }
 
+  /**
+   * Ask aegis1 for a free device key when the caller has none configured yet
+   * (`POST /api/v1/auth/register-device`). Idempotent server-side on
+   * `fingerprint` — the same fingerprint always returns the same account's
+   * key rather than minting a new one. The account starts at zero token-bank
+   * balance: this hands out an account, not free inference, so the existing
+   * balance=0 gate on `/api/v1/chat/completions` still applies unchanged.
+   * Sends no API key of its own — there isn't one yet.
+   */
+  async function registerDevice(fingerprint, opts) {
+    return apiPost('/api/v1/auth/register-device', { fingerprint }, undefined, opts);
+  }
+
   /** Build the OpenAI-style messages array from either a full history or the
    *  single-shot { system, prompt } shorthand.
    *
@@ -994,6 +1008,7 @@ function createClient(opts = {}) {
     },
     promptUrl,
     verifyApiKey,
+    registerDevice,
     chatCompletion,
     byokChatCompletion,
     listModels,

package/vendor/auto-provision.js

@@ -0,0 +1,52 @@
+'use strict';
+
+/**
+ * Auto-provision a free aegis1 device key when a host finds no key configured
+ * anywhere (env, the shared 0600 store, legacy config.json). One
+ * implementation shared by every host (MCP plugin, desktop, CLI) — see
+ * client/credentials.js's own header for why that matters here: three copies
+ * of the same timeout/endpoint/save logic is how they drift.
+ *
+ * Calls aegis1's `POST /api/v1/auth/register-device` (see client/aegis.js's
+ * `registerDevice`), idempotent per machine fingerprint (client/
+ * device-fingerprint.js) so a wiped credential store still resolves back to
+ * the same account rather than minting a new, unfunded one.
+ *
+ * The provisioned account starts at ZERO token-bank balance server-side, and
+ * aegis1 additionally requires an upgraded (paid, active) plan to use pooled
+ * aegiscloud models at all (nexus_chat_completions' is_pro() gate) — this
+ * only unblocks BYOK and account status/settings until the account is funded
+ * and/or upgraded. It is account creation, not a grant of free inference.
+ */
+const { machineFingerprint } = require('./device-fingerprint.js');
+
+const DEVICE_REGISTER_TIMEOUT_MS = 8000;
+
+/**
+ * @param {object} aegisClient A client from client/aegis.js (createClient()).
+ * @param {object} credentials client/credentials.js (or a compatible double).
+ * @returns {Promise<{ok: boolean, key: string, error?: Error}>}
+ *   `ok` is true only when a usable key was obtained AND persisted to the
+ *   shared store; `aegisClient.setApiKey()` has already been called on
+ *   success, so the caller's client is immediately usable either way it
+ *   inspects `ok`.
+ */
+async function autoProvisionApiKey(aegisClient, credentials) {
+  if (aegisClient.apiKey) return { ok: true, key: aegisClient.apiKey };
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), DEVICE_REGISTER_TIMEOUT_MS);
+  try {
+    const data = await aegisClient.registerDevice(machineFingerprint(), { signal: controller.signal });
+    const key = data && typeof data.api_key === 'string' ? data.api_key.trim() : '';
+    if (!key) return { ok: false, key: '' };
+    const saved = credentials.saveApiKey(key);
+    aegisClient.setApiKey(key);
+    return { ok: !!saved.ok, key };
+  } catch (err) {
+    return { ok: false, key: '', error: err };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+module.exports = { autoProvisionApiKey, DEVICE_REGISTER_TIMEOUT_MS };

package/vendor/brain-catalog.js

@@ -0,0 +1,113 @@
+'use strict';
+
+/**
+ * The pooled-brain entry, defined ONCE for every host.
+ *
+ * The platform's `/api/v1/models` payload lists the brain tier under five
+ * spellings (`nexus-brain` canonical; `aegis-brain`, `nexus-brain-smart`,
+ * `aegis-brain-smart`, `nexus-brain-neo` each sent as `hidden: true,
+ * alias_of: "nexus-brain"`). A host that showed all five painted five models
+ * where the server routes one, and a host that showed none (or a different one
+ * per release) left users comparing two clients that disagree about the same
+ * account.
+ *
+ * This module exists because that disagreement was real: the desktop collapsed
+ * the class to a single "Nexus" entry (desktop/lib/local/engine.js) while the
+ * CLI kept every distinct id, so the same account saw a different model list in
+ * each host. Two copies of the selection rule is the drift; one shared function
+ * is the fix, which is why both hosts require THIS file — the desktop from
+ * `desktop/lib/local/engine.js` (repo-relative `client/brain-catalog.js`, or
+ * `desktop/vendor/brain-catalog.js` in the packaged app) and the CLI from
+ * `cli/src/models.js` (through `src/sharedpaths.js`: repo-relative
+ * `client/brain-catalog.js`, or `vendor/client/brain-catalog.js` installed).
+ *
+ * The two hosts do NOT hand this module the same entry shape and must not have
+ * to: the desktop passes the relay's raw payload (`hidden`, `alias_of`), the
+ * CLI passes its own normalised entries (`hidden`, `aliasOf`). So the readers
+ * below accept either spelling — one rule, two shapes — instead of each host
+ * keeping a private copy of the rule to match its own shape, which is the drift
+ * this module exists to end.
+ *
+ * Pure: no I/O, no node builtins, no dependencies — safe to require from a
+ * renderer, a CLI start-up path, or an MCP host.
+ */
+
+/** Every id the server uses for the pooled brain, canonical spelling first. */
+const NEXUS_BRAIN_IDS = Object.freeze(['nexus-brain', 'aegis-brain']);
+
+/** The name users see for the collapsed entry. */
+const NEXUS_LABEL = 'Nexus';
+
+/**
+ * The id this entry is an alias OF, or `null`. Reads the relay's `alias_of` and
+ * the CLI's normalised `aliasOf`, so callers may pass either shape.
+ */
+function aliasOfEntry(m) {
+  if (!m || typeof m !== 'object') return null;
+  for (const value of [m.alias_of, m.aliasOf]) {
+    if (typeof value === 'string' && value.trim()) return value.trim();
+  }
+  return null;
+}
+
+/** Whether the entry is marked display-hidden, in either shape. */
+function isHiddenEntry(m) {
+  return Boolean(m) && m.hidden === true;
+}
+
+/**
+ * Pick the one entry standing in for the pooled brain. The server serves
+ * `nexus-brain` as the canonical tier (`hidden: false`, no `alias_of`) and
+ * marks every other spelling — `aegis-brain` and the `-smart`/`-neo` tiers —
+ * as `hidden: true, alias_of: "nexus-brain"`. Prefer the canonical id so the
+ * request travels on the name the server owns; fall back to the alias, then to
+ * any tier whose `alias_of` names the brain, so a renamed or trimmed catalog
+ * still resolves to something selectable instead of silently emptying the
+ * dropdown (the previous fixed-id lookup returned [] if `aegis-brain` was ever
+ * retired, leaving the class with no model to choose).
+ *
+ * @param {Array<object>} models normalized or raw catalog entries.
+ * @returns {object|null}
+ */
+function selectBrainEntry(models) {
+  const list = Array.isArray(models) ? models.filter(Boolean) : [];
+  return (
+    list.find((m) => NEXUS_BRAIN_IDS.includes(m.id) && !isHiddenEntry(m) && aliasOfEntry(m) === null)
+    || list.find((m) => NEXUS_BRAIN_IDS.includes(m.id))
+    || list.find((m) => NEXUS_BRAIN_IDS.includes(aliasOfEntry(m)))
+    || null
+  );
+}
+
+/**
+ * The Aegis-class catalog as a host must OFFER it: exactly one entry, the
+ * collapsed brain — never the raw provider list, and never the alias tiers.
+ *
+ * Offering this shape is not the same as accepting only this shape: the ids the
+ * server advertises still route (a pin on `deepseek` still runs), so callers
+ * keep the full catalog for validation and use this for what they show.
+ *
+ * Returns `[]` when the payload names no brain tier at all — which is the
+ * caller's signal that this is not a pooled-brain catalog (the BYOK listing is
+ * per-provider models and must be offered in full, not collapsed to nothing).
+ *
+ * @param {Array<object>} models the server's catalog (any shape).
+ * @returns {Array<object>} `[]` when the payload names no brain tier at all.
+ */
+function filterAegisCatalog(models) {
+  const nexus = selectBrainEntry(models);
+  if (!nexus) return [];
+  // Drop the alias bookkeeping in BOTH spellings: this entry *is* the
+  // selection, so a renderer must never treat it as a hidden alias and filter
+  // it back out — which is exactly what happens if `aliasOf` survives here and
+  // the consumer re-runs its own "drop aliases" pass over the result.
+  const { hidden, alias_of, aliasOf, ...rest } = nexus;
+  return [{ ...rest, label: NEXUS_LABEL }];
+}
+
+module.exports = {
+  NEXUS_BRAIN_IDS,
+  NEXUS_LABEL,
+  selectBrainEntry,
+  filterAegisCatalog,
+};

package/vendor/device-fingerprint.js

@@ -0,0 +1,63 @@
+'use strict';
+
+/**
+ * A stable per-machine identifier, used ONLY to ask aegis1 for a free device
+ * key (`POST /api/v1/auth/register-device`) when no key is configured yet. It
+ * is not a credential itself — the endpoint treats it as an idempotency key,
+ * so a wiped `~/.aegiscode` still resolves back to the same aegis1 account
+ * (and whatever balance it holds) instead of minting a fresh, unfunded one.
+ *
+ * Derivation mirrors ae-guix's `getMachineFingerprint()` (main.js) so the two
+ * hosts don't invent divergent conventions for the same idea: the OS's own
+ * machine identity where one exists, hashed with a purpose-specific prefix so
+ * it can never collide with a fingerprint minted for another purpose.
+ */
+const crypto = require('node:crypto');
+const os = require('node:os');
+
+/** Best-effort OS machine identity. Empty string, never throws, if none is reachable. */
+function readMachineId() {
+  try {
+    if (process.platform === 'linux') {
+      const fs = require('node:fs');
+      try {
+        return fs.readFileSync('/etc/machine-id', 'utf8').trim();
+      } catch {
+        return fs.readFileSync('/var/lib/dbus/machine-id', 'utf8').trim();
+      }
+    }
+    if (process.platform === 'darwin') {
+      const { execSync } = require('node:child_process');
+      const out = execSync('ioreg -rd1 -c IOPlatformExpertDevice', {
+        encoding: 'utf8',
+        timeout: 3000,
+      });
+      const m = out.match(/"IOPlatformUUID"\s*=\s*"([^"]+)"/);
+      if (m) return m[1];
+    }
+    if (process.platform === 'win32') {
+      const { execSync } = require('node:child_process');
+      const out = execSync('reg query HKLM\\SOFTWARE\\Microsoft\\Cryptography /v MachineGuid', {
+        encoding: 'utf8',
+        timeout: 3000,
+      });
+      const m = out.match(/MachineGuid\s+REG_SZ\s+(\S+)/);
+      if (m) return m[1];
+    }
+  } catch {
+    /* no reachable machine id on this host — the caller falls back below */
+  }
+  return '';
+}
+
+/**
+ * sha256("aegiscode-plugin-device-v1:" + machine identity), hex.
+ *
+ * @param {string} [overrideId] - test-only override for the raw machine identity.
+ */
+function machineFingerprint(overrideId) {
+  const id = overrideId || readMachineId() || `${os.hostname()}:${os.platform()}:${os.arch()}`;
+  return crypto.createHash('sha256').update(`aegiscode-plugin-device-v1:${id}`).digest('hex');
+}
+
+module.exports = { machineFingerprint, readMachineId };