impel-cli 0.17.5 → 0.17.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.17.5",
+  "version": "0.17.6",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/apps.js

@@ -93,14 +93,6 @@ const CLAUDE_AGENT_MENTION_FILTER = 'return e.filter(e=>"user"===e.source&&(!s||
 const IMPEL_CLAUDE_BOUND_AGENT_MENTION_FILTER = 'return e.filter(e=>"user"===e.source&&(!s||e.name.toLowerCase().includes(s))&&("string"!=typeof y||e.name===y)).slice(0,10)';
 const CLAUDE_AGENT_MENTION_SELECT = 'onSelect:t=>(e(String(t)),Promise.resolve(null))';
 const IMPEL_CLAUDE_BOUND_AGENT_MENTION_SELECT = 'onSelect:t=>"string"==typeof y?Promise.resolve({chipText:String(t)}):(e(String(t)),Promise.resolve(null))';
-// Claude's Code-disabled screens link Back to "/", but the root router honors
-// its separately persisted last Code mode and immediately returns to the same
-// disabled screen. Route directly to the pinned build's canonical Chat page;
-// its normal mode effect then reconciles both renderer and desktop preference.
-const CLAUDE_CODE_DISABLED_BACK_LINK = 'function Fi(){return e.jsxs("a",{href:"/",className:"inline-flex items-center text-sm text-text-400 hover:text-text-300 outline-none"';
-const IMPEL_CLAUDE_CODE_DISABLED_BACK_LINK = 'function Fi(){return e.jsxs("a",{href:"/chat/new",className:"inline-flex items-center text-sm text-text-400 hover:text-text-300 outline-none"';
-const CLAUDE_CODE_NO_SEAT_BACK_LINK = 'b.jsx(D,{variant:"ghost",href:"/",icon:"ArrowLeft",children:b.jsx(A,{defaultMessage:"Back to Claude",id:"e4M0bJ/pZc"})})';
-const IMPEL_CLAUDE_CODE_NO_SEAT_BACK_LINK = 'b.jsx(D,{variant:"ghost",href:"/chat/new",icon:"ArrowLeft",children:b.jsx(A,{defaultMessage:"Back to Claude",id:"e4M0bJ/pZc"})})';
 const LEGACY_CLAUDE_SAFE_STORAGE_NAME = "Claude";
 const CLAUDE_SAFE_STORAGE_METADATA = "safe-storage.json";
 
@@ -173,7 +165,7 @@ export function managedAppIdentity(target, tenantId = null, tenantName = null) {
 
 // Bump when the written config/manifest schema changes; a mismatch forces the
 // slow open path (and thus a full config rewrite) after a CLI update.
-export const CURRENT_CONFIG_VERSION = 16;
+export const CURRENT_CONFIG_VERSION = 17;
 
 // Identifies the bundle-BUILDING logic — the asar patches, plist rewrites,
 // helper rebranding, and signing. A vendored bundle is rebuilt only when this
@@ -182,7 +174,7 @@ export const CURRENT_CONFIG_VERSION = 16;
 // — which is what made every `impel update` re-trigger macOS permission
 // prompts. Bump this ONLY when a code change alters the bytes of a built
 // bundle; leave it alone for changes that don't touch bundle contents.
-export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-20.2";
+export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-20.3";
 
 /** Parse the tenant's install manifest, or null when absent/corrupt. */
 export function readTenantManifest(homeDir = os.homedir(), tenantId = null) {
@@ -253,8 +245,6 @@ export function bundleIsCurrent(status, {
       compatibility.patches?.followupBoundAgentEnable === 1
       && compatibility.patches?.followupBoundAgentFilter === 1
       && compatibility.patches?.followupBoundAgentChip === 1
-      && compatibility.patches?.codeDisabledBack === 1
-      && compatibility.patches?.codeNoSeatBack === 1
       && managedClaudeRendererMatchesCompatibility(status, compatibility)
     ))
     && (status.target !== "chatgpt" || (
@@ -290,12 +280,8 @@ function wrapperLaunchesOnTahoe(status) {
 
 function managedClaudeRendererMatchesCompatibility(status, compatibility) {
   try {
-    const groups = [
-      compatibility.rendererAssets?.agentMentions,
-      compatibility.rendererAssets?.codeDisabledBack,
-    ];
-    if (groups.some((renderers) => !Array.isArray(renderers) || renderers.length === 0)) return false;
-    const renderers = groups.flat();
+    const renderers = compatibility.rendererAssets?.agentMentions;
+    if (!Array.isArray(renderers) || renderers.length === 0) return false;
     const root = path.resolve(status.launcher, "Contents", "Resources", "ion-dist");
     return renderers.every((renderer) => {
       if (!renderer?.path || !renderer.sha256 || path.isAbsolute(renderer.path)) return false;
@@ -634,7 +620,7 @@ export function installManagedAppFiles({
   for (const target of targets) {
     if (target === "claude") {
       migrateLegacyClaudeAppSessions(paths.claude.userData, homeDir);
-      writeClaudeDefaultApp(paths);
+      writeClaudeNative3PSelection(paths);
       writeClaudeCodeSettings(paths);
       writeClaudeConfig(paths, config, models);
       ensureClaudeSessionHooks(paths.claude.userData, config.tenantId, "claude_desktop");
@@ -925,16 +911,16 @@ function writeClaudeConfig(paths, config, models) {
     inferenceGatewayAuthScheme: "bearer",
     modelDiscoveryEnabled: false,
     inferenceModels: claudeModels,
-    // 3P builds leave Chat unavailable unless the administrator opts in. The
-    // Code install/disabled screen's "Back to Claude" link targets the Chat
-    // root; without this key the root router selects Code again and strands
-    // gateway users in a loop even though inference is healthy.
+    // These are Anthropic's native managed 3P surface controls. Cowork and
+    // Code default to enabled in the pinned build, but state them explicitly
+    // so an older generated profile cannot leave either surface disabled.
+    coworkTabEnabled: true,
+    isClaudeCodeForDesktopEnabled: true,
+    // Chat is the only opt-in surface in the pinned build.
     chatTabEnabled: true,
-    // Managed flat key (maps to authentication.disableClaudeAiSignIn, vendor
-    // 1.3834.0+): hides the Claude.ai sign-in option and keeps the app in 3P
-    // mode even when the persisted deploymentMode is missing or "1p". Claude.ai
-    // account login is a dead end for gateway profiles anyway — the server
-    // rejects it with custom_3p_not_available.
+    // Native managed flat key (maps to authentication.disableClaudeAiSignIn):
+    // with an inference config present the pinned app selects 3P and hides the
+    // inapplicable Claude.ai sign-in option.
     disableDeploymentModeChooser: true,
   };
   writeAtomic(path.join(dir, `${CLAUDE_CONFIG_ID}.json`), JSON.stringify(body, null, 2) + "\n", 0o600);
@@ -961,7 +947,7 @@ function writeClaudeCodeSettings(paths) {
   writeAtomic(settingsPath, `${JSON.stringify(settings, null, 2)}\n`, 0o600);
 }
 
-function writeClaudeDefaultApp(paths) {
+function writeClaudeNative3PSelection(paths) {
   const configPath = path.join(paths.claude.userData, "claude_desktop_config.json");
   let current = {};
   if (fs.existsSync(configPath)) {
@@ -974,33 +960,13 @@ function writeClaudeDefaultApp(paths) {
   if (!current || typeof current !== "object" || Array.isArray(current)) {
     throw new Error(`Claude desktop config must contain a JSON object: ${configPath}`);
   }
-  const preferences = current.preferences ?? {};
-  if (!preferences || typeof preferences !== "object" || Array.isArray(preferences)) {
-    throw new Error(`Claude desktop preferences must contain a JSON object: ${configPath}`);
-  }
-  // The desktop app gates its UI on a persisted top-level `deploymentMode`:
-  // until it is "3p", every launch lands on the sign-in / provider-chooser
-  // screen — even though the applied configLibrary gateway config loads fine —
-  // and Claude.ai email login is server-disabled for 3P profiles
-  // (custom_3p_not_available). A managed gateway profile is only ever 3P, so
-  // enforce the key like the sandbox policy (heal "1p"/cleared values too,
-  // e.g. after an in-app sign-out), not seed-once like a user preference.
-  const needsDeploymentMode = current.deploymentMode !== "3p";
-  // Claude persists the selected top-level app as `preferences.sidebarMode`.
-  // Seed Code for a new isolated profile, then leave subsequent user choices
-  // alone during install, update, and background config refreshes.
-  const needsSidebarMode = !Object.hasOwn(preferences, "sidebarMode");
-  if (!needsDeploymentMode && !needsSidebarMode) return;
-  const next = {
-    ...current,
-    ...(needsDeploymentMode ? { deploymentMode: "3p" } : {}),
-    preferences: needsSidebarMode ? { ...preferences, sidebarMode: "code" } : preferences,
-  };
-  // A vendor sign-out writes `awaitingSignIn: true` alongside "1p". Left in
-  // place it re-arms the app's quit-time revert — which deletes deploymentMode
-  // again — should the gateway config ever fail to load. Drop it when healing.
-  if (needsDeploymentMode) delete next.awaitingSignIn;
-  writeAtomic(configPath, JSON.stringify(next, null, 2) + "\n", 0o600);
+  // Mirror the pinned app's native "select 3P" persistence contract. This
+  // marks the first-run choice complete and clears a pending 1P sign-in while
+  // leaving Claude-owned preferences (including sidebarMode) untouched.
+  if (current.deploymentMode === "3p" && !Object.hasOwn(current, "awaitingSignIn")) return;
+  const next = { ...current, deploymentMode: "3p" };
+  delete next.awaitingSignIn;
+  writeAtomic(configPath, `${JSON.stringify(next, null, 2)}\n`, 0o600);
 }
 
 function writeChatGPTConfig(
@@ -1379,7 +1345,6 @@ function writeVendoredClaudeBundle(paths, vendorPath, gatewayUrl, safeStorageNam
     }
 
     const agentMentionPatches = patchClaudeFollowupAgentMentions(staging);
-    const codeDisabledBackPatches = patchClaudeCodeDisabledBackRouting(staging);
     const oldAsarHash = asarHeaderHash(asarPath);
     let planUsageGuardPatchCount = 0;
     let planUsageRequestPatchCount = 0;
@@ -1422,7 +1387,7 @@ function writeVendoredClaudeBundle(paths, vendorPath, gatewayUrl, safeStorageNam
     const vendorExecutable = path.join(macos, executableName);
     const signingIdentity = resolveVendoredAppSigningIdentity(vendorExecutable);
     writeAtomic(path.join(staging, "Contents", "Resources", "impel-compatibility.json"), JSON.stringify({
-      schemaVersion: 6,
+      schemaVersion: 7,
       cliVersion: CLI_VERSION,
       bundleFingerprint: BUNDLE_BUILD_FINGERPRINT,
       signingMode: signingModeForIdentity(signingIdentity),
@@ -1441,12 +1406,9 @@ function writeVendoredClaudeBundle(paths, vendorPath, gatewayUrl, safeStorageNam
         followupBoundAgentEnable: agentMentionPatches.enable,
         followupBoundAgentFilter: agentMentionPatches.filter,
         followupBoundAgentChip: agentMentionPatches.chip,
-        codeDisabledBack: codeDisabledBackPatches.disabled,
-        codeNoSeatBack: codeDisabledBackPatches.noSeat,
       },
       rendererAssets: {
         agentMentions: agentMentionPatches.assets,
-        codeDisabledBack: codeDisabledBackPatches.assets,
       },
       asarHeaderSha256: newAsarHash,
     }, null, 2) + "\n", 0o644);
@@ -1612,30 +1574,6 @@ function patchClaudeFollowupAgentMentions(bundle) {
   };
 }
 
-function patchClaudeCodeDisabledBackRouting(bundle) {
-  const assets = patchClaudeRendererContracts(bundle, {
-    supportLabel: "Code-disabled Back routing",
-    patchLabel: "Code-disabled Back routing",
-    contracts: [
-      {
-        key: "disabled",
-        original: CLAUDE_CODE_DISABLED_BACK_LINK,
-        replacement: IMPEL_CLAUDE_CODE_DISABLED_BACK_LINK,
-      },
-      {
-        key: "noSeat",
-        original: CLAUDE_CODE_NO_SEAT_BACK_LINK,
-        replacement: IMPEL_CLAUDE_CODE_NO_SEAT_BACK_LINK,
-      },
-    ],
-  });
-  return {
-    disabled: 1,
-    noSeat: 1,
-    assets,
-  };
-}
-
 function patchClaudeRendererContracts(bundle, {
   supportLabel,
   patchLabel,