impel-cli 0.18.12-beta.0 → 0.18.12-beta.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.18.12-beta.0",
+  "version": "0.18.12-beta.1",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/apps.js

@@ -230,7 +230,9 @@ export function managedAppIdentity(target, tenantId = null, tenantName = null) {
 // 21: Windows Codex hooks use the pinned client's PowerShell execution
 // contract instead of cmd.exe quoting that failed every managed hook.
 // 22: refresh GPT-5.6 model windows from the pinned ChatGPT Codex catalog.
-export const CURRENT_CONFIG_VERSION = 22;
+// 23: select Codex's unelevated native Windows sandbox for managed profiles so
+// enterprise machines do not enter the administrator-only setup flow.
+export const CURRENT_CONFIG_VERSION = 23;
 
 // Identifies the bundle-BUILDING logic — the asar patches, plist rewrites,
 // helper rebranding, and signing. A vendored bundle is rebuilt only when this

package/src/codexSecurity.js

@@ -25,7 +25,7 @@ function assignmentPattern(key) {
   return new RegExp(`^(\\s*)${escapeRegex(key)}\\s*=.*$`, "u");
 }
 
-function upsertManagedBoolean(toml, table, key, value, configPath) {
+function upsertManagedScalar(toml, table, key, value, configPath) {
   const lines = String(toml || "").replace(/\r\n/gu, "\n").split("\n");
   const headerPattern = tableHeaderPattern(table);
   const headerIndices = lines.flatMap((line, index) => (headerPattern.test(line) ? [index] : []));
@@ -101,8 +101,12 @@ function upsertManagedRootString(toml, key, value, configPath) {
   return `${lines.join("\n").replace(/\s*$/u, "")}\n`;
 }
 
-/** Enable unrestricted outbound access while Codex remains in workspace-write. */
-export function enableManagedCodexNetworkAccess(
+/**
+ * Keep Codex in workspace-write with outbound access. On native Windows, use
+ * Codex's documented unelevated sandbox fallback so an Impel-owned profile
+ * never opens the administrator-only sandbox setup flow.
+ */
+export function applyManagedCodexSandboxPolicy(
   toml,
   configPath = "managed Codex config",
 ) {
@@ -112,13 +116,20 @@ export function enableManagedCodexNetworkAccess(
     "workspace-write",
     configPath,
   );
-  return upsertManagedBoolean(
+  const networkedSandbox = upsertManagedScalar(
     workspaceSandbox,
     "sandbox_workspace_write",
     "network_access",
     "true",
     configPath,
   );
+  return upsertManagedScalar(
+    networkedSandbox,
+    "windows",
+    "sandbox",
+    JSON.stringify("unelevated"),
+    configPath,
+  );
 }
 
 /**
@@ -126,15 +137,15 @@ export function enableManagedCodexNetworkAccess(
  * enabled. Existing unrelated keys in either table are retained.
  */
 export function hardenManagedCodexToml(toml, configPath = "managed Codex config") {
-  const withoutSnapshots = upsertManagedBoolean(toml, "features", "shell_snapshot", "false", configPath);
-  const withoutCredentialSnapshots = upsertManagedBoolean(
+  const withoutSnapshots = upsertManagedScalar(toml, "features", "shell_snapshot", "false", configPath);
+  const withoutCredentialSnapshots = upsertManagedScalar(
     withoutSnapshots,
     "shell_environment_policy",
     "ignore_default_excludes",
     "false",
     configPath,
   );
-  return enableManagedCodexNetworkAccess(withoutCredentialSnapshots, configPath);
+  return applyManagedCodexSandboxPolicy(withoutCredentialSnapshots, configPath);
 }
 
 function assertSafeManagedPath(target, expectedType) {

package/src/gateway/index.js

@@ -6,7 +6,7 @@ import readline from "node:readline";
 
 import { nativeCommandInvocation } from "../nativeProcess.js";
 import { applyImpelClaudeSandbox } from "../claudeSandbox.js";
-import { enableManagedCodexNetworkAccess } from "../codexSecurity.js";
+import { applyManagedCodexSandboxPolicy } from "../codexSecurity.js";
 
 const SAFE_ID = /^[a-z][a-z0-9-]{2,31}$/u;
 const SAFE_NAMESPACE = /^[a-z][a-z0-9_-]{1,31}$/u;
@@ -356,7 +356,7 @@ export function createGatewayCli(options) {
     const withoutProvider = outside.replace(/^\s*model_provider\s*=.*$/mu, "").trim();
     const next = [`model_provider = ${JSON.stringify(brand.cli.providerId)}`, codexManagedBlock(gatewayUrl), withoutProvider]
       .filter(Boolean).join("\n\n").concat("\n");
-    writePrivateFile(filePath, enableManagedCodexNetworkAccess(next, filePath));
+    writePrivateFile(filePath, applyManagedCodexSandboxPolicy(next, filePath));
     return { codexHome, filePath };
   }