aegis-desktop 1.0.3 → 1.0.5

package/lib/account-key.js

@@ -0,0 +1,58 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+'use strict';
+
+/**
+ * The desktop's view of whether this machine has an AEGIS account key. When
+ * startup could not provision one, the banner says why and offers a retry.
+ * Pure: Electron, the store and the provisioner are injected.
+ */
+
+function provisionFailureText(result) {
+  const err = result && result.error;
+  if (!err) return 'the server returned no account key';
+  if (err.status === 429) return 'too many sign-ups from this network — try again later';
+  if (!err.status || err.status === 408 || err.status >= 500) return 'could not reach aegiscloud.org';
+  return `the server refused the request (HTTP ${err.status})`;
+}
+
+function createAccountKey({ aegis, credentials, persistKey, provision, onChange }) {
+  let failure = null;
+  let inFlight = null;
+
+  function status() {
+    if (aegis.apiKey || !failure) return null;
+    return { status: 'no-key', reason: failure };
+  }
+
+  function recordStartup(result) {
+    failure = (result.key || aegis.apiKey) ? null : provisionFailureText(result);
+    onChange(status());
+  }
+
+  function registerAccount() {
+    if (!inFlight) {
+      inFlight = (async () => {
+        try {
+          const result = await provision(aegis, credentials);
+          if (result.key) {
+            persistKey(result.key);
+            failure = null;
+          } else {
+            failure = provisionFailureText(result);
+          }
+          const state = status();
+          onChange(state);
+          return state;
+        } finally {
+          inFlight = null;
+        }
+      })();
+    }
+    return inFlight;
+  }
+
+  return { status, recordStartup, registerAccount };
+}
+
+module.exports = { createAccountKey, provisionFailureText };

package/main.js

@@ -152,6 +152,7 @@ try {
 // backed by transport-only modules in desktop/lib/. No brain logic enters here.
 const os = require('node:os');
 const { createLocalEngine } = require('./lib/local/engine.js');
+const { createAccountKey } = require('./lib/account-key.js');
 const { createSettingsStore, isReservedNamespace } = require('./lib/settings.js');
 const sessionStore = require('./lib/sync/sessions.js');
 const memoryQueue = require('./lib/sync/memory-queue.js');
@@ -2633,6 +2634,7 @@ function registerAutoIpc(ipcMain, dispatch) {
  * polling `aegis:updateStatus`.
  */
 const UPDATE_STATUS_CHANNEL = `${IPC_PREFIX}updateStatus`;
+const ACCOUNT_STATUS_CHANNEL = `${IPC_PREFIX}accountStatusChanged`;
 
 /** Re-check for a new release every few hours — frequent enough that a
  *  long-lived session still notices a release, rare enough to not hammer
@@ -3324,7 +3326,15 @@ function bootstrap() {
   // store via credentials.preferNewest() and writes the encrypted copy once
   // ready — this just guarantees there is something there for it to find
   // even when 'ready' never comes.
+  const accountKey = createAccountKey({
+    aegis,
+    credentials,
+    persistKey: (key) => settings.setAegisKey(key),
+    provision: autoProvision.autoProvisionApiKey,
+    onChange: (state) => broadcastAccountStatus(state),
+  });
   const earlyKeyProvision = autoProvision.autoProvisionApiKey(aegis, credentials).then((result) => {
+    accountKey.recordStartup(result);
     if (!result.key && !aegis.apiKey) {
       const reason =
         (result.error && (result.error.status || result.error.message || String(result.error))) ||
@@ -3768,6 +3778,11 @@ function bootstrap() {
       if (!win.isDestroyed()) win.webContents.send(UPDATE_STATUS_CHANNEL, state);
     }
   }
+  function broadcastAccountStatus(state) {
+    for (const win of openWindows) {
+      if (!win.isDestroyed()) win.webContents.send(ACCOUNT_STATUS_CHANNEL, state);
+    }
+  }
 
   const updateManager = createUpdateManager({
     autoUpdater: realAutoUpdater,
@@ -3775,6 +3790,8 @@ function bootstrap() {
     onStatus: broadcastUpdateStatus,
   });
   registerUpdateIpc(ipcMain, updateManager);
+  ipcMain.handle(`${IPC_PREFIX}accountStatus`, () => accountKey.status());
+  ipcMain.handle(`${IPC_PREFIX}registerAccount`, () => accountKey.registerAccount());
   registerExportIpc(
     ipcMain,
     sessionStore,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aegis-desktop",
   "productName": "AEGIS Desktop",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Thin Electron host for AEGIS — a local chat UI over the shared client/aegis.js transport. Ships transport + UI only; engine logic stays server-side.",
   "author": {
     "name": "AEGIS Code",
@@ -32,7 +32,7 @@
     "demo": "node scripts/record-demo-gif.mjs",
     "dist": "npm run predist && electron-builder",
     "dist:dir": "npm run predist && electron-builder --dir",
-    "check": "node --check main.js && node --check preload.js && node --check renderer/app.js && node --check renderer/quick.js && node --check renderer/budget.js && node --check renderer/usage.js && node --check renderer/stream-policy.js && node --check renderer/transcript-view.js && node --check renderer/diff.js && node --check renderer/diffview.js && node --check renderer/markdown.js && node --check renderer/vendor/aegis-highlight.js && node --check scripts/predist.mjs && node --check scripts/generate-icon.mjs && node --check scripts/bundle-fonts.mjs && node --check lib/local/local.js && node --check lib/local/context.js && node --check lib/local/engine.js && node --check lib/local/session-rounds.js && node --check lib/local/tools.js && node --check lib/local/prompt.js && node --check lib/local/shell.js && node --check lib/local/agents.js && node --check lib/local/queue.js && node --check lib/local/autonomous.js && node --check lib/settings.js && node --check lib/sync/sessions.js && node --check lib/sync/memory-queue.js && node --check lib/window-state.js && node --check lib/deep-link.js && node --check lib/quick-launcher.js && node --check lib/avatar/tiers.js && node --check lib/avatar/xp.js && node --check lib/avatar/level.js && node --check lib/avatar/events.js && node --check lib/avatar/persona.js && node --check bin/aegis.js",
+    "check": "node --check main.js && node --check preload.js && node --check renderer/app.js && node --check renderer/quick.js && node --check renderer/budget.js && node --check renderer/usage.js && node --check renderer/stream-policy.js && node --check renderer/transcript-view.js && node --check renderer/diff.js && node --check renderer/diffview.js && node --check renderer/markdown.js && node --check renderer/vendor/aegis-highlight.js && node --check scripts/predist.mjs && node --check scripts/generate-icon.mjs && node --check scripts/bundle-fonts.mjs && node --check lib/local/local.js && node --check lib/local/context.js && node --check lib/local/engine.js && node --check lib/local/session-rounds.js && node --check lib/local/tools.js && node --check lib/local/prompt.js && node --check lib/local/shell.js && node --check lib/local/agents.js && node --check lib/local/queue.js && node --check lib/local/autonomous.js && node --check lib/account-key.js && node --check lib/settings.js && node --check lib/sync/sessions.js && node --check lib/sync/memory-queue.js && node --check lib/window-state.js && node --check lib/deep-link.js && node --check lib/quick-launcher.js && node --check lib/avatar/tiers.js && node --check lib/avatar/xp.js && node --check lib/avatar/level.js && node --check lib/avatar/events.js && node --check lib/avatar/persona.js && node --check bin/aegis.js",
     "test:shell": "node ../test/desktop-shell.mjs",
     "test:model": "node ../test/model-dispatch.mjs",
     "test:budget": "node ../test/budget.test.mjs",
@@ -55,7 +55,8 @@
     "test:avatar-events": "node test/avatar-events.test.mjs",
     "test:avatar-tiers": "node test/avatar-tiers.test.mjs",
     "test:avatar-persona": "node test/avatar-persona.test.mjs",
-    "test:renderer-fonts": "node test/renderer-fonts.test.mjs"
+    "test:renderer-fonts": "node test/renderer-fonts.test.mjs",
+    "test:account-key": "node test/account-key.test.mjs"
   },
   "dependencies": {
     "electron-updater": "^6.8.9"

package/preload.js

@@ -27,6 +27,7 @@ const AUTO_PREFIX = 'auto:';
 const QUEUE_PROGRESS_CHANNEL = `${QUEUE_PREFIX}progress`;
 const CHAT_DELTA_CHANNEL = `${IPC_PREFIX}chatDelta`;
 const UPDATE_STATUS_CHANNEL = `${IPC_PREFIX}updateStatus`;
+const ACCOUNT_STATUS_CHANNEL = `${IPC_PREFIX}accountStatusChanged`;
 const MENU_NEW_CHAT_CHANNEL = `${IPC_PREFIX}menuNewChat`;
 const MENU_SEARCH_CHANNEL = `${IPC_PREFIX}menuSearch`;
 const MENU_EXPORT_MARKDOWN_CHANNEL = `${IPC_PREFIX}menuExportMarkdown`;
@@ -268,6 +269,13 @@ const api = {
     ipcRenderer.on(UPDATE_STATUS_CHANNEL, listener);
     return () => ipcRenderer.removeListener(UPDATE_STATUS_CHANNEL, listener);
   },
+  accountStatus: () => invoke('accountStatus'),
+  registerAccount: () => invoke('registerAccount'),
+  onAccountStatus: (onStatus) => {
+    const listener = (_event, state) => onStatus(state);
+    ipcRenderer.on(ACCOUNT_STATUS_CHANNEL, listener);
+    return () => ipcRenderer.removeListener(ACCOUNT_STATUS_CHANNEL, listener);
+  },
   // Native menu accelerators with no built-in Electron role (Cmd/Ctrl+N,
   // Cmd/Ctrl+K — see main.js buildAppMenu): main.js just pings the channel,
   // the renderer owns what "new chat" / "search" actually do.

package/renderer/app.js

@@ -73,6 +73,11 @@ const ELEMENT_IDS = {
   updateRestartBtn: 'update-restart-btn',
   updateRetryBtn: 'update-retry-btn',
   updateLaterBtn: 'update-later-btn',
+  accountBanner: 'account-banner',
+  accountBannerText: 'account-banner-text',
+  accountRetryBtn: 'account-retry-btn',
+  keysAccount: 'keys-account',
+  keysAccountRetry: 'keys-account-retry',
   connDot: 'conn-dot',
   connText: 'conn-text',
   app: 'st-app',
@@ -1140,6 +1145,35 @@ function renderUpdateBanner(state) {
   els.updateBanner.hidden = false;
 }
 
+/** Why the last account registration failed; null while the account is set up. */
+let accountFailureReason = null;
+
+function renderAccountBanner(state) {
+  accountFailureReason = state && state.status === 'no-key' ? state.reason : null;
+  renderKeysPopup();
+  if (!els.accountBanner) return;
+  if (!accountFailureReason) {
+    els.accountBanner.hidden = true;
+    return;
+  }
+  els.accountBannerText.textContent = `No AEGIS account key on this machine: ${accountFailureReason}.`;
+  els.accountBanner.hidden = false;
+}
+
+/** Retry registration from either surface; a success re-reads status so the sheet and key rows update. */
+function retryAccountSetup(button) {
+  button.disabled = true;
+  aegis.registerAccount()
+    .then((state) => {
+      renderAccountBanner(state);
+      if (!state) return refreshAfterKeyChange();
+    })
+    .catch((err) => renderAccountBanner({ status: 'no-key', reason: String((err && err.message) || err) }))
+    .finally(() => {
+      button.disabled = false;
+    });
+}
+
 async function loadAccountInfo() {
   try {
     const verify = await aegis.verifyApiKey();
@@ -2875,6 +2909,13 @@ function renderKeysPopup() {
   if (els.keysRowAegis) els.keysRowAegis.classList.toggle('set', aegisSet);
   if (els.keysRowByok) els.keysRowByok.classList.toggle('set', byokSet);
   if (els.keysCount) els.keysCount.textContent = `${(aegisSet ? 1 : 0) + (byokSet ? 1 : 0)} / 2`;
+  if (els.keysAccount) {
+    els.keysAccount.hidden = !accountFailureReason;
+    els.keysAccount.textContent = accountFailureReason
+      ? `The AEGIS account key could not be set up: ${accountFailureReason}.`
+      : '';
+  }
+  if (els.keysAccountRetry) els.keysAccountRetry.hidden = !accountFailureReason;
   if (els.keysHint) {
     els.keysHint.textContent =
       aegisSet && byokSet
@@ -5703,6 +5744,15 @@ async function init() {
 
   // Auto-update banner: `?`-guarded like the memory inspector above, since
   // the markup is optional and a missing node must never crash boot.
+  if (els.accountBanner && aegis.onAccountStatus) {
+    aegis.onAccountStatus(renderAccountBanner);
+    aegis.accountStatus().then(renderAccountBanner).catch((err) => console.warn('account status unavailable', err));
+    els.accountRetryBtn.addEventListener('click', () => retryAccountSetup(els.accountRetryBtn));
+    if (els.keysAccountRetry) {
+      els.keysAccountRetry.addEventListener('click', () => retryAccountSetup(els.keysAccountRetry));
+    }
+  }
+
   if (els.updateBanner && aegis.onUpdateStatus) {
     aegis.onUpdateStatus(renderUpdateBanner);
     aegis.updateStatus().then(renderUpdateBanner).catch(() => {});

package/renderer/index.html

@@ -48,6 +48,13 @@
     </div>
   </div>
 
+  <div class="update-banner account-banner" id="account-banner" role="alert" hidden>
+    <span id="account-banner-text"></span>
+    <div class="update-banner-actions">
+      <button type="button" id="account-retry-btn" class="ghost-btn">Retry account setup</button>
+    </div>
+  </div>
+
   <main>
     <aside class="side">
       <section class="card">
@@ -832,9 +839,13 @@
         </div>
       </div>
 
+      <p class="hint" id="keys-account" role="alert" hidden></p>
       <p class="hint" id="keys-hint"></p>
 
       <div class="keys-actions">
+        <button type="button" id="keys-account-retry" class="ghost-btn" hidden>
+          Retry account setup
+        </button>
         <a
           class="ghost-btn"
           id="keys-get"

package/vendor/auto-provision.js

@@ -33,32 +33,48 @@
 const { machineFingerprint } = require('./device-fingerprint.js');
 
 const DEVICE_REGISTER_TIMEOUT_MS = 8000;
+const DEVICE_REGISTER_RETRY_DELAYS_MS = [1000, 3000];
+
+// Network failure, timeout (status 0), 408, or 5xx. A 4xx — including 429, the
+// server's per-IP registration cap — is a refusal, and retrying it only spends
+// more of that cap.
+function isTransientRegisterError(err) {
+  const status = err && err.status;
+  return !status || status === 408 || status >= 500;
+}
 
 /**
  * @param {object} aegisClient A client from client/aegis.js (createClient()).
  * @param {object} credentials client/credentials.js (or a compatible double).
+ * @param {number[]} [retryDelaysMs] Wait before each retry of a transient failure.
  * @returns {Promise<{ok: boolean, key: string, error?: Error}>}
  *   `ok` is true only when a usable key was obtained AND persisted to the
  *   shared store; `aegisClient.setApiKey()` has already been called on
  *   success, so the caller's client is immediately usable either way it
  *   inspects `ok`.
  */
-async function autoProvisionApiKey(aegisClient, credentials) {
+async function autoProvisionApiKey(aegisClient, credentials, retryDelaysMs = DEVICE_REGISTER_RETRY_DELAYS_MS) {
   if (aegisClient.apiKey) return { ok: true, key: aegisClient.apiKey };
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), DEVICE_REGISTER_TIMEOUT_MS);
-  try {
-    const data = await aegisClient.registerDevice(machineFingerprint(), { signal: controller.signal });
-    const key = data && typeof data.api_key === 'string' ? data.api_key.trim() : '';
-    if (!key) return { ok: false, key: '' };
-    const saved = credentials.saveApiKey(key);
-    aegisClient.setApiKey(key);
-    return { ok: !!saved.ok, key };
-  } catch (err) {
-    return { ok: false, key: '', error: err };
-  } finally {
-    clearTimeout(timer);
+  let lastError = null;
+  for (let attempt = 0; attempt <= retryDelaysMs.length; attempt++) {
+    if (attempt > 0) await new Promise((resolve) => setTimeout(resolve, retryDelaysMs[attempt - 1]));
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), DEVICE_REGISTER_TIMEOUT_MS);
+    try {
+      const data = await aegisClient.registerDevice(machineFingerprint(), { signal: controller.signal });
+      const key = data && typeof data.api_key === 'string' ? data.api_key.trim() : '';
+      if (!key) return { ok: false, key: '' };
+      const saved = credentials.saveApiKey(key);
+      aegisClient.setApiKey(key);
+      return { ok: !!saved.ok, key };
+    } catch (err) {
+      lastError = err;
+      if (!isTransientRegisterError(err)) break;
+    } finally {
+      clearTimeout(timer);
+    }
   }
+  return { ok: false, key: '', error: lastError };
 }
 
-module.exports = { autoProvisionApiKey, DEVICE_REGISTER_TIMEOUT_MS };
+module.exports = { autoProvisionApiKey, DEVICE_REGISTER_TIMEOUT_MS, DEVICE_REGISTER_RETRY_DELAYS_MS };