aegis-desktop 1.0.0 → 1.0.2

package/lib/local/telemetry.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/lib/local/tools.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**
@@ -816,12 +821,14 @@ function execOneShot({ command, cwd, timeout, maxBuffer } = {}) {
   return new Promise((resolve) => {
     const limit = Math.min(Number(maxBuffer) || EXEC_MAX_BUFFER, EXEC_MAX_BUFFER);
     const ms = Math.min(Number(timeout) || EXEC_TIMEOUT_DEFAULT, EXEC_TIMEOUT_CAP);
-    // Shell to run `exec` in: cmd.exe on Windows, a PROBED POSIX sh/bash
-    // elsewhere. The choice, the platform seam that makes its win32 half
-    // testable on Linux and the fish/csh/nu refusal all live in
-    // client/platform.js + shell.js (Phase 30.1/30.3) — there is no second copy
-    // of that decision here, and an unverifiable shell is REPORTED rather than
-    // used.
+    // Shell to run `exec` in: PowerShell on Windows (both the persistent
+    // session AND the one-shot path — they must agree, or a session that dies
+    // mid-turn silently switches the quoting contract; see shell.js
+    // resolveSessionShell), a PROBED POSIX sh/bash elsewhere. The choice, the
+    // platform seam that makes its win32 half testable on Linux and the
+    // fish/csh/nu refusal all live in client/platform.js + shell.js (Phase
+    // 30.1/30.3) — there is no second copy of that decision here, and an
+    // unverifiable shell is REPORTED rather than used.
     const spec = shells.oneShotShellSpec();
     if (!spec.ok) {
       resolve(fail(spec.error));

package/lib/local/turn-guard.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/lib/local/worktree-lock.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/lib/provider-key-mirror.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/lib/quick-launcher.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/lib/settings.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/lib/sync/memory-queue.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/lib/sync/persist-gate.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/lib/sync/sessions.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/lib/window-state.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/main.js

@@ -1,4 +1,9 @@
 #!/usr/bin/env node
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 /**
  * AEGIS Desktop — thin Electron main shell (host 2).
  *
@@ -1604,6 +1609,21 @@ function createModelDispatch(engine, { env = process.env, settings } = {}) {
       engine.addUserModel(payload && payload.provider, payload && payload.model),
     'userModels.remove': (payload) =>
       engine.removeUserModel(payload && payload.provider, payload && payload.model),
+    // Ask the provider's OWN API which models its key reaches — the end of
+    // "type the vendor's model id from memory". The key stays in the main
+    // process: the renderer passes a provider id and gets back ids, never a
+    // credential, which is the same posture as the provider CRUD above.
+    //
+    // `userModels.addAll` is the bulk write the list makes possible (`/model-add
+    // <provider> '*'` in the CLI): a batch where one refused row does not abort
+    // the rest, and where the counts are returned so the row can say what
+    // actually happened.
+    'userModels.discover': (payload) => engine.discoverModels(payload && payload.provider),
+    'userModels.addAll': (payload) =>
+      engine.addUserModels(payload && payload.provider, payload && payload.ids),
+    'userModels.canDiscover': (payload) =>
+      Boolean(engine.canDiscoverModels(payload && payload.provider)),
+    'userModels.discoverable': () => engine.discoverableProviders(),
     // Persisting memory ("sync finished turns to cloud memory automatically").
     // Reserved namespace, so it is invisible to the provider CRUD above — but
     // unlike a provider it IS reachable deliberately, through these two. The
@@ -3821,6 +3841,20 @@ function bootstrap() {
         // again.
         const result = await autoProvision.autoProvisionApiKey(aegis, credentials);
         if (result.key) settings.setAegisKey(result.key);
+        else {
+          // Swallowing this was how a machine could sit keyless — and therefore
+          // absent from the admin panel's user list AND its presence card —
+          // with no trace anywhere: the app just opened in its normal
+          // signed-out state, and the next launch retried with the same
+          // invisible outcome. The server now logs every registration attempt;
+          // this closes the other half so one launch is diagnosable. A 429 here
+          // is not fatal (aegis1 creates the account and withholds the trial),
+          // so it must read as "retry", not as a broken install.
+          const reason =
+            (result.error && (result.error.status || result.error.message || String(result.error))) ||
+            'no key returned';
+          console.warn(`auto-provision: no account key from register-device (${reason})`);
+        }
       }
     }
     // ── presence beacon ───────────────────────────────────────────────────

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aegis-desktop",
   "productName": "AEGIS Desktop",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Thin Electron host for AEGIS — a local chat UI over the shared client/aegis.js transport. Ships transport + UI only; engine logic stays server-side.",
   "author": {
     "name": "AEGIS Code",

package/preload.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**
@@ -360,6 +365,15 @@ const models = {
     get: () => invokeModel('userModels.get'),
     add: (provider, model) => invokeModel('userModels.add', { provider, model }),
     remove: (provider, model) => invokeModel('userModels.remove', { provider, model }),
+    // Discovery: the renderer names a provider, the MAIN process resolves the
+    // key and asks the vendor's list API. No key crosses this bridge in either
+    // direction — `discover` returns ids (or an error string to print) and
+    // `addAll` returns counts, so a compromised renderer cannot read a
+    // credential out of the discovery path.
+    discover: (provider) => invokeModel('userModels.discover', { provider }),
+    addAll: (provider, ids) => invokeModel('userModels.addAll', { provider, ids }),
+    canDiscover: (provider) => invokeModel('userModels.canDiscover', { provider }),
+    discoverable: () => invokeModel('userModels.discoverable'),
   },
   cancel: (sessionId) => invokeModel('cancel', { sessionId }),
   // Tool-call approval gate: the renderer's approval card calls this to

package/renderer/app.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**
@@ -4372,7 +4377,113 @@ async function renderUserModelRows(byokProviderIds) {
     }
   });
   actions.appendChild(addBtn);
+
+  // ── ask the provider, instead of the user's memory ─────────────────────
+  //
+  // The row above is only usable if the user already knows the vendor's model
+  // id — which is the release-lag problem handed to the user rather than
+  // solved (client/byok-catalog.js exists precisely because someone had to copy
+  // Anthropic's list by hand and re-verify it). This button asks the provider's
+  // own API through the main process. The key never crosses the bridge: the
+  // renderer sends a provider id and gets ids (or an error string) back.
+  //
+  // Everything here is best-effort and reported in the hint line: no key, an
+  // unreachable vendor and a reply this client cannot parse all leave the
+  // manual path above working, which is the path a bad day must not remove.
+  const discoverBtn = document.createElement('button');
+  discoverBtn.type = 'button';
+  discoverBtn.className = 'ghost-btn';
+  discoverBtn.id = 'user-model-discover';
+  discoverBtn.textContent = 'List from provider';
+  actions.appendChild(discoverBtn);
+
+  const discovered = document.createElement('div');
+  discovered.className = 'setting-status';
+  discovered.id = 'user-model-discovered';
+  // `hidden`, not `style.display`: the element is hidden until a provider has
+  // answered, and the attribute is the DOM's own way to say that — no layout
+  // coupling, and the row builder stays testable without a CSS engine.
+  discovered.hidden = true;
+
+  discoverBtn.addEventListener('click', async () => {
+    const provider = providerInput.value.trim();
+    if (!provider) {
+      els.settingsHint.textContent = 'type a provider id first (the CLI\'s /byok lists them).';
+      return;
+    }
+    if (typeof models.userModels.discover !== 'function') {
+      els.settingsHint.textContent = 'this build cannot ask a provider — type the model id.';
+      return;
+    }
+    els.settingsHint.textContent = `asking ${provider}…`;
+    discovered.hidden = true;
+    discovered.textContent = '';
+    let res;
+    try {
+      res = await models.userModels.discover(provider);
+    } catch (err) {
+      els.settingsHint.textContent = `${err && err.message ? err.message : err}`;
+      return;
+    }
+    if (!res || !res.ok) {
+      // The error string is the discovery module's own sentence ("the vendor
+      // refused the key (HTTP 401)"); printing it verbatim is the point, since
+      // the fix differs per cause and guessing here would mislead.
+      els.settingsHint.textContent = `${provider}: ${(res && res.error) || 'no answer'}`;
+      return;
+    }
+    els.settingsHint.textContent =
+      `${res.provider} serves ${res.count} chat model id(s) — pick one and Add model, or add them all.`;
+    const select = document.createElement('select');
+    select.className = 'setting-input';
+    select.id = 'user-model-discovered-list';
+    for (const id of res.ids) {
+      const opt = document.createElement('option');
+      opt.value = id;
+      // Marking what is already offered saves the user diffing two lists by
+      // eye; the CLI's /model-discover prints the same marks.
+      opt.textContent = res.declared && res.declared.includes(id) ? `${id} — declared` : id;
+      select.appendChild(opt);
+    }
+    select.addEventListener('change', () => { modelInput.value = select.value; });
+    if (res.ids.length) {
+      modelInput.value = res.ids[0];
+      discovered.appendChild(select);
+      const addAll = document.createElement('button');
+      addAll.type = 'button';
+      addAll.className = 'ghost-btn';
+      addAll.id = 'user-model-add-all';
+      addAll.textContent = `Add all ${res.count}`;
+      addAll.addEventListener('click', async () => {
+        els.settingsHint.textContent = `adding ${res.count}…`;
+        try {
+          const bulk = await models.userModels.addAll(res.provider, res.ids);
+          els.settingsHint.textContent =
+            `added ${bulk.added} of ${res.ids.length}` +
+            (bulk.already && bulk.already.length ? ` (${bulk.already.length} were already declared)` : '') +
+            (bulk.failed && bulk.failed.length ? ` — ${bulk.failed.length} refused` : '') + '.';
+          await loadSettings();
+          await loadModels(els.classSelect.value);
+        } catch (err) {
+          els.settingsHint.textContent = `${err && err.message ? err.message : err}`;
+        }
+      });
+      discovered.appendChild(addAll);
+    } else {
+      discovered.textContent = 'the vendor answered with no chat models — type an id above.';
+    }
+    if (res.others && res.others.length) {
+      const rest = document.createElement('div');
+      // Named, never hidden: an id left out because it is an embedding model is
+      // a fact the user is owed, and a silent filter is how a list looks short
+      // for a reason nobody can see.
+      rest.textContent = `${res.others.length} non-chat id(s) left out: ${res.others.slice(0, 6).join(', ')}`;
+      discovered.appendChild(rest);
+    }
+    discovered.hidden = false;
+  });
   addRow.appendChild(actions);
+  addRow.appendChild(discovered);
 
   const hint = document.createElement('div');
   hint.className = 'setting-status';

package/renderer/avatar/assemble.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/avatar/avatar.css

@@ -1,3 +1,10 @@
+/*
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ * Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+ * AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+ * Conveying a modified copy, or running one as a network service, owes the
+ * corresponding source under this licence (§5/§13) — see LICENSING.md.
+ */
 /* avatar.css — the avatar's presentation layer.
  *
  * Motion is CSS only, and it is the ONE thing in this phase that can be turned

package/renderer/avatar/avatar.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/avatar/cards.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/avatar/hud.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/avatar/machine.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/avatar/pane.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/avatar/parts.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/budget.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/diff.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/diffview.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/fingerprint.css

@@ -1,3 +1,10 @@
+/*
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ * Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+ * AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+ * Conveying a modified copy, or running one as a network service, owes the
+ * corresponding source under this licence (§5/§13) — see LICENSING.md.
+ */
 /* ---------------------------------------------------------- φ(α) panel
    The panel reuses the memory inspector's sheet (.memory-overlay /
    .memory-panel, style.css:483+) so the two overlays are the same object to the

package/renderer/fingerprint.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/fonts/fonts.css

@@ -1,3 +1,10 @@
+/*
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ * Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+ * AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+ * Conveying a modified copy, or running one as a network service, owes the
+ * corresponding source under this licence (§5/§13) — see LICENSING.md.
+ */
 /* Vendored webfonts — DO NOT EDIT BY HAND.
  *
  * Generated by desktop/scripts/bundle-fonts.mjs from the Google Fonts CSS for

package/renderer/index.html

@@ -1,4 +1,11 @@
 <!doctype html>
+<!--
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ * Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+ * AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+ * Conveying a modified copy, or running one as a network service, owes the
+ * corresponding source under this licence (§5/§13) — see LICENSING.md.
+-->
 <html lang="en">
 <head>
   <meta charset="utf-8" />

package/renderer/markdown.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/quick.css

@@ -1,3 +1,10 @@
+/*
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ * Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+ * AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+ * Conveying a modified copy, or running one as a network service, owes the
+ * corresponding source under this licence (§5/§13) — see LICENSING.md.
+ */
 :root {
   --bg: #0d1117;
   --surface: #12161e;

package/renderer/quick.html

@@ -1,4 +1,11 @@
 <!doctype html>
+<!--
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ * Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+ * AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+ * Conveying a modified copy, or running one as a network service, owes the
+ * corresponding source under this licence (§5/§13) — see LICENSING.md.
+-->
 <html lang="en">
 <head>
   <meta charset="utf-8" />

package/renderer/quick.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/stream-policy.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/style.css

@@ -1,3 +1,10 @@
+/*
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ * Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+ * AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+ * Conveying a modified copy, or running one as a network service, owes the
+ * corresponding source under this licence (§5/§13) — see LICENSING.md.
+ */
 :root {
   --bg: #0a0e14;
   --surface: #12161e;

package/renderer/transcript-view.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/renderer/usage.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/aegis.js

@@ -1,4 +1,9 @@
 #!/usr/bin/env node
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 /**
  * AEGIS thin client — zero-dependency transport to aegiscloud.org.
  *

package/vendor/agent-gate.mjs

@@ -306,6 +306,29 @@ const WRITEISH_BASH = [
   // `node --test` is deliberately NOT a hit.
   /\b(python[0-9.]*|perl)\s+-c\b/, /\b(python[0-9.]*|perl)\s+-e\b/,
   /\bnode\b[^|;]*\s(?:-e|--eval)\b/, /\b(sh|bash|zsh|dash)\s+-c\b/,
+
+  // Archive extraction overwrites arbitrary paths in bulk with none of the
+  // markers above: `tar -x`, `unzip`, `7z x/e` never mention `cp`/`mv`/a `>`.
+  // Found probing this list by hand on 2026-10-12 — none of these tripped it.
+  // Kept in step with aegiscodex-dev/src/repoguard.js, which carries the same list.
+  /\btar\b[^|;]*(?:-[A-Za-z]*x[A-Za-z]*\b|--extract\b)/,
+  /\bunzip\b/, /\b7z[ar]?\s+[xe]\b/,
+
+  // Download-straight-to-file: the write is the whole point, but the marker
+  // is a flag shared with nothing else (`-o`/`-O`/`--output`), not a bare tool
+  // name, so it is scoped to the specific tool that owns that flag.
+  /\bcurl\b[^|;]*\s-{1,2}(?:o|O|output|remote-name)\b/,
+  /\bwget\b[^|;]*\s-{1,2}(?:O|output-document)\b/,
+
+  // Bulk copy/sync — functionally `cp -r` under a different name.
+  /\brsync\b/,
+
+  // `-out`/`-o`/`--output` on the specific tools that use it to write a file,
+  // each scoped to its own tool name so an unrelated `-o` (e.g. `ls -o`) on
+  // some other command is not a false hit.
+  /\bopenssl\b[^|;]*\s-out\b/,
+  /\bgpg2?\b[^|;]*\s-{1,2}(?:o|output)\b/,
+  /\bbase64\b[^|;]*\s-{1,2}(?:o|output)\b/,
 ];
 
 /** Path-shaped tokens in a command line. Deliberately over-eager: see bashTargets. */