mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-07-31 19:16:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fix(desktop): recover Windows GPU sandbox 0x80000003 startup crashes

Browse source 
Grant ALL APPLICATION PACKAGES RX on the unpacked app and stick a boot
marker so fatal Chromium sandbox deaths relaunch with --no-sandbox
(#38216).
This commit is contained in:
HexLab98 2026-07-18 14:48:27 +07:00 • committed by Teknium
parent e5afc0d93b
commit e53d2dfccb
3 changed files with 395 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

17
scripts/install.ps1
View file

@ -2966,6 +2966,23 @@ function Install-Desktop {
# =false) because enabling it drags in signtool -> winCodeSign -> the
# unfixable symlink crash; the afterPack hook runs rcedit directly.
# 3c. Grant ALL APPLICATION PACKAGES (S-1-15-2-2) RX on the unpacked app
# directory. Chromium's GPU/renderer sandboxes CHECK-fail with
# 0x80000003 when this ACE is missing alongside orphan AppContainer
# SIDs under %LOCALAPPDATA% (electron/electron#51761, hermes-agent#38216).
# Best-effort — never fail an otherwise-good install over ACL repair.
try {
$appDir = Split-Path -Parent $desktopExe
& icacls $appDir /grant "*S-1-15-2-2:(OI)(CI)(RX)" /T /C /Q | Out-Null
if ($LASTEXITCODE -eq 0) {
Write-Success "Granted AppContainer read access on $appDir"
} else {
Write-Warn "icacls AppContainer grant returned exit $LASTEXITCODE for $appDir"
}
} catch {
Write-Warn "Could not grant AppContainer ACL: $($_.Exception.Message)"
}
# 4. Create Start Menu + Desktop shortcuts pointing DIRECTLY at the packed
# Hermes.exe. We deliberately do NOT point them at `hermes desktop`: that
# command rebuilds (npm install + electron-builder) on every launch,