From 1488c5734bce64497654549ce4435a0ff7f74e70 Mon Sep 17 00:00:00 2001
From: pdparchitect <pdp@gnucitizen.org>
Date: Fri, 31 Jul 2026 16:51:46 +0000
Subject: [PATCH] - feat: update Launcher desktop base to version 0.1.6;
 enhance Chromium authentication in Apple fixed-mount sessions - feat: update
 to Launcher desktop base version 0.1.5; enhance Chrome's software rendering
 support in Apple Linux VM - feat: update Launcher desktop base to version
 0.1.4; enhance X display authentication for agent processes

---
 CHANGELOG.md             | 17 +++++++++++++++++
 Dockerfile               |  2 +-
 Makefile                 |  2 +-
 VERSION                  |  2 +-
 tests/smoke-container.sh | 15 +++++++++++++++
 5 files changed, 35 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a2f442a..0e56788 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,23 @@ All notable changes to Pantalk Ghost are documented here, following
 
 ## [Unreleased]
 
+## [0.1.10] - 2026-07-31
+
+### Fixed
+
+- Update the shared Launcher desktop base to `0.1.6`, keeping Chrome's software
+  renderer available without a GPU and allowing root-launched Chromium
+  processes to authenticate to the X display and paint their browser surfaces
+  in Apple fixed-mount sessions.
+
+## [0.1.9] - 2026-07-31
+
+### Fixed
+
+- Update the shared Launcher desktop base to `0.1.4`, allowing unprivileged
+  agent runtimes to authenticate to the display when Apple fixed-ownership
+  mounts require the desktop session itself to run as root.
+
 ## [0.1.8] - 2026-07-31
 
 ### Changed
diff --git a/Dockerfile b/Dockerfile
index 184d636..849383a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,7 +19,7 @@
 #     pantalk/ghost:local
 #   Open http://localhost:6901
 
-ARG DESKTOP_IMAGE=ghcr.io/pdparchitect/launcher-image-base-desktop:0.1.3
+ARG DESKTOP_IMAGE=ghcr.io/pdparchitect/launcher-image-base-desktop:0.1.6
 FROM ${DESKTOP_IMAGE}
 
 USER root
diff --git a/Makefile b/Makefile
index 12a0de9..1505029 100644
--- a/Makefile
+++ b/Makefile
@@ -10,7 +10,7 @@ NATIVE_ARCH := $(shell uname -m | sed \
 PLATFORM ?= linux/$(NATIVE_ARCH)
 TARGETARCH ?= $(word 2,$(subst /, ,$(PLATFORM)))
 PANTALK_VERSION ?= 0.0.12
-DESKTOP_IMAGE ?= ghcr.io/pdparchitect/launcher-image-base-desktop:0.1.3
+DESKTOP_IMAGE ?= ghcr.io/pdparchitect/launcher-image-base-desktop:0.1.6
 AGENT_BROWSER_VERSION ?= 0.33.0
 GITHUB_COPILOT_VERSION ?= 1.0.75
 CODEX_VERSION ?= 0.145.0
diff --git a/VERSION b/VERSION
index 699c6c6..9767cc9 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.1.8
+0.1.10
diff --git a/tests/smoke-container.sh b/tests/smoke-container.sh
index 47c8df6..bd3b45d 100644
--- a/tests/smoke-container.sh
+++ b/tests/smoke-container.sh
@@ -43,6 +43,21 @@ fi
     curl -fsS http://127.0.0.1:6901/ >/dev/null
 '
 
+# The desktop base owns this contract. Product processes must be able to use
+# the inherited display environment without locating or copying X11 cookies.
+x_access=false
+for attempt in $(seq 1 20); do
+    if "$docker" exec --user agent "$container" xprop -root >/dev/null 2>&1; then
+        x_access=true
+        break
+    fi
+    sleep 1
+done
+if [ "$x_access" != "true" ]; then
+    echo "The agent account could not authenticate to the X display." >&2
+    exit 1
+fi
+
 # A version check only proves that the executable loader works. Launch the
 # architecture's real headed browser on KasmVNC's display, find its visible
 # window through X11, and capture the same framebuffer a remote user sees.