aegis-desktop 1.0.1 → 1.0.3

package/main.js

@@ -3203,6 +3203,29 @@ function buildAppMenu({ app, Menu, BrowserWindow, updateManager }) {
 function bootstrap() {
   const { app, BrowserWindow, ipcMain, safeStorage, shell, Menu, Notification, screen, dialog, globalShortcut } = electron;
 
+  // A container/CI/headless server with no usable GPU crashes Chromium's GPU
+  // process in a retry loop that ends in a FATAL exit ("GPU process isn't
+  // usable. Goodbye.") — and that happens BEFORE app.whenReady() ever fires,
+  // so autoProvisionApiKey() (the free device key + welcome-trial grant)
+  // never runs either: `npm install -g aegis-desktop && aegis` on exactly
+  // that class of machine registered nothing, with no error a user could
+  // act on. Must be called before the app is ready (Electron's own
+  // constraint); software rendering is a fine tradeoff for a text/chat UI
+  // with no WebGL or video.
+  //
+  // disableHardwareAcceleration() alone was not enough on a container whose
+  // Mesa/VA-API/DRI stack is fully broken rather than merely GPU-less:
+  // Chromium still spawned a GPU process for the SwiftShader software path,
+  // and that crash-looped to the same FATAL exit, just after a longer delay
+  // (measured: survived past 15s, died at ~44s). These three switches tell
+  // Chromium to skip GPU-process creation entirely rather than retry it
+  // under software rendering — the documented combination for Electron under
+  // Docker/CI/headless Linux.
+  app.disableHardwareAcceleration();
+  app.commandLine.appendSwitch('disable-gpu');
+  app.commandLine.appendSwitch('disable-software-rasterizer');
+  app.commandLine.appendSwitch('disable-gpu-compositing');
+
   // A second launch (double-clicking the icon again, `aegis` from a second
   // terminal, …) must focus the existing window, not spawn a second process
   // fighting the first over the same on-disk settings/session/queue files —
@@ -3272,6 +3295,45 @@ function bootstrap() {
     dir: dataDir,
   });
 
+  // Resolve/auto-provision the account key as early as possible — BEFORE
+  // app.whenReady(), not inside it. autoProvisionApiKey() is a plain Node
+  // fetch call with no Electron dependency: createClient(credentials.
+  // clientOptions()) above already resolved any existing key (env, the
+  // shared file, the env-file fallback) onto `aegis.apiKey`, so this is a
+  // genuine registerDevice call only on a truly fresh install — the same
+  // one-call-is-enough guarantee autoProvisionApiKey() provides to the CLI
+  // and the MCP plugin. It persists straight to the plain shared
+  // credentials file via credentials.saveApiKey(), not safeStorage.
+  //
+  // Why this can't wait for 'ready': a container/CI host with a broken
+  // graphics stack crashes Chromium's GPU process in a retry loop that can
+  // end in a FATAL exit (see disableHardwareAcceleration above) BEFORE
+  // whenReady() ever resolves — measured here surviving 15s before dying at
+  // 42-44s even with hardware acceleration and GPU compositing disabled.
+  // Gating registration on 'ready' meant that exact class of host — exactly
+  // what `npm install -g aegis-desktop && aegis` on a headless server lands
+  // on — registered nothing and left no trace. Running it here means the
+  // account exists and the key is on disk the moment the process starts,
+  // independent of whether the window ever manages to open.
+  //
+  // Not calling settings.setAegisKey() here: safeStorage is not safe to use
+  // before 'ready' (see migrateLegacyAegisKey's own comment in desktop/lib/
+  // settings.js, the one other place in this codebase that already had to
+  // reason about this). The
+  // existing app.whenReady() block further down already re-reads the shared
+  // store via credentials.preferNewest() and writes the encrypted copy once
+  // ready — this just guarantees there is something there for it to find
+  // even when 'ready' never comes.
+  const earlyKeyProvision = autoProvision.autoProvisionApiKey(aegis, credentials).then((result) => {
+    if (!result.key && !aegis.apiKey) {
+      const reason =
+        (result.error && (result.error.status || result.error.message || String(result.error))) ||
+        'no key returned';
+      console.warn(`auto-provision: no account key from register-device (${reason})`);
+    }
+    return result;
+  });
+
   // A provider key typed in the Settings pane used to reach ONLY this app's
   // encrypted store, so `aegiscode` (the CLI) and the MCP plugin never saw it:
   // same machine, same provider, key asked for twice, and a key entered here
@@ -3820,41 +3882,24 @@ function bootstrap() {
     // it, and nothing here may shadow an explicit export.
     const envKey = credentials.normalizeApiKey(process.env[credentials.KEY_ENV]);
     if (!envKey) {
+      // Wait for the pre-ready attempt above rather than racing a second
+      // registerDevice call: autoProvisionApiKey() already ran (or is still
+      // running) the instant this process started, specifically so it is
+      // not gated on 'ready' — see the earlyKeyProvision comment above for
+      // why (a container with a broken graphics stack can crash before
+      // 'ready' ever fires). Swallowing a keyless outcome here was how a
+      // machine could sit absent from the admin panel's user list AND its
+      // presence card with no trace anywhere — the server now logs every
+      // registration attempt, and earlyKeyProvision's own .then() already
+      // warns on failure, so there is nothing further to report if it
+      // didn't land.
+      await earlyKeyProvision;
       const chosen = credentials.preferNewest(settings.aegisRawKey(), settings.aegisKeySavedAt());
       if (chosen.key) {
         aegis.setApiKey(chosen.key);
         // The shared store is the newer write: bring this host's encrypted copy
         // up to date so a CLI rotation does not have to be redone in Settings.
         if (chosen.source === 'shared') settings.setAegisKey(chosen.key);
-      } else {
-        // Nothing configured anywhere (env, this app's encrypted copy, or the
-        // shared store): a fresh install. Auto-provision a free device key
-        // from aegis1 — same shared helper mcp/server.js and the CLI use, so
-        // the desktop app works with no manual sign-in step. A brand-new
-        // fingerprint is granted aegis1's 30-day welcome-trial `unlimited`
-        // entitlement (token-bank credit + a subscriptions row) in the same
-        // register-device call that mints the key — see client/
-        // auto-provision.js's header for the aegis1 commit that made this a
-        // real grant rather than a badge. Failure (offline, aegis1
-        // unreachable) falls through exactly as before: the renderer's
-        // normal "not signed in" state handles it, and the next launch tries
-        // again.
-        const result = await autoProvision.autoProvisionApiKey(aegis, credentials);
-        if (result.key) settings.setAegisKey(result.key);
-        else {
-          // Swallowing this was how a machine could sit keyless — and therefore
-          // absent from the admin panel's user list AND its presence card —
-          // with no trace anywhere: the app just opened in its normal
-          // signed-out state, and the next launch retried with the same
-          // invisible outcome. The server now logs every registration attempt;
-          // this closes the other half so one launch is diagnosable. A 429 here
-          // is not fatal (aegis1 creates the account and withholds the trial),
-          // so it must read as "retry", not as a broken install.
-          const reason =
-            (result.error && (result.error.status || result.error.message || String(result.error))) ||
-            'no key returned';
-          console.warn(`auto-provision: no account key from register-device (${reason})`);
-        }
       }
     }
     // ── presence beacon ───────────────────────────────────────────────────

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aegis-desktop",
   "productName": "AEGIS Desktop",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Thin Electron host for AEGIS — a local chat UI over the shared client/aegis.js transport. Ships transport + UI only; engine logic stays server-side.",
   "author": {
     "name": "AEGIS Code",