impel-cli 0.11.0 → 0.11.1

package/README.md

@@ -633,7 +633,8 @@ Explicitly use the configured impel-acme-research-agent for this request and wai
 ```
 
 Claude exposes native custom agents in its `@` typeahead. Current Codex releases
-load and display the generated native agents but do not provide an `@agent`
+load the generated standalone definitions directly from `$CODEX_HOME/agents/`
+but do not provide an `@agent`
 mention target; named spawning remains model-mediated and may also be limited by
 the active MultiAgentV2 tool schema. Use `/agent` in Codex to inspect spawned
 agent threads.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "description": "Configure Claude Code and Codex CLI to talk to Impel's gateway, authenticated by an Impel Personal Access Token",
   "type": "module",
   "bin": {

package/src/agents.js

@@ -398,13 +398,13 @@ function readManifest(manifestPath) {
 
 function profileIsFresh(profile, tenantId, now, ttlMs) {
   const manifest = readManifest(path.join(profile.root, "agents", MANAGED_AGENT_DIRECTORY, MANAGED_AGENT_MANIFEST));
-  if (!manifest || manifest.tenantId !== tenantId) return false;
+  if (!manifest || manifest.version !== 2 || manifest.tenantId !== tenantId) return false;
   const syncedAt = Date.parse(manifest.syncedAt || "");
   if (!Number.isFinite(syncedAt) || now - syncedAt >= ttlMs) return false;
   return manifest.files.every((fileName) =>
     typeof fileName === "string"
     && path.basename(fileName) === fileName
-    && fs.existsSync(path.join(profile.root, "agents", MANAGED_AGENT_DIRECTORY, fileName))
+    && fs.existsSync(path.join(profile.root, "agents", fileName))
   );
 }
 
@@ -420,9 +420,25 @@ export function syncAgentProfile({ client, root, label, tenantId, agents, now =
   const manifestPath = path.join(managedDir, MANAGED_AGENT_MANIFEST);
   const prior = readManifest(manifestPath);
   const rendered = renderManagedAgents(client, tenantId, agents);
+  const priorFiles = new Set(prior?.files || []);
+  const priorUsesDiscoveryRoot = prior?.version === 2;
 
+  // Native clients discover standalone definitions directly under `agents/`.
+  // Preflight every destination before writing so an unmanaged file with the
+  // same generated name is never overwritten.
   for (const agent of rendered) {
-    atomicPrivateWrite(path.join(managedDir, agent.fileName), agent.contents);
+    const destination = path.join(agentsDir, agent.fileName);
+    if (fs.existsSync(destination)) {
+      if (!priorUsesDiscoveryRoot || !priorFiles.has(agent.fileName)) {
+        throw new Error(`refusing to overwrite unmanaged native-agent file ${destination}`);
+      }
+      if (fs.lstatSync(destination).isSymbolicLink()) {
+        throw new Error(`refusing to overwrite symlinked native-agent file ${destination}`);
+      }
+    }
+  }
+  for (const agent of rendered) {
+    atomicPrivateWrite(path.join(agentsDir, agent.fileName), agent.contents);
   }
   const currentFiles = new Set(rendered.map((agent) => agent.fileName));
   for (const stale of prior?.files || []) {
@@ -432,11 +448,22 @@ export function syncAgentProfile({ client, root, label, tenantId, agents, now =
       && !currentFiles.has(stale)
       && (stale.endsWith(".md") || stale.endsWith(".toml"))
     ) {
-      fs.rmSync(path.join(managedDir, stale), { force: true });
+      fs.rmSync(path.join(priorUsesDiscoveryRoot ? agentsDir : managedDir, stale), { force: true });
+    }
+  }
+  if (!priorUsesDiscoveryRoot) {
+    for (const legacy of prior?.files || []) {
+      if (
+        typeof legacy === "string"
+        && path.basename(legacy) === legacy
+        && (legacy.endsWith(".md") || legacy.endsWith(".toml"))
+      ) {
+        fs.rmSync(path.join(managedDir, legacy), { force: true });
+      }
     }
   }
   atomicPrivateWrite(manifestPath, `${JSON.stringify({
-    version: 1,
+    version: 2,
     tenantId,
     client,
     syncedAt: new Date(now).toISOString(),