impel-cli 0.18.15-beta.2 → 0.18.15-beta.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.18.15-beta.2",
+  "version": "0.18.15-beta.4",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/apps.js

@@ -81,17 +81,27 @@ export const PINNED_VENDOR_APPS = Object.freeze({
     }),
   }),
   chatgpt: Object.freeze({
-    version: "26.721.41059",
-    codexVersion: "0.146.0-alpha.3.1",
+    version: "26.727.40816",
+    codexVersion: "0.146.0-alpha.9.2",
     bundleName: "ChatGPT.app",
+    windows: Object.freeze({
+      storeProductId: "9PLM9XGG6VKS",
+      packageName: "OpenAI.Codex",
+      packageVersion: "26.721.11231.0",
+      advertisedPackageVersion: "26.727.4816.0",
+      codexVersion: "0.146.0-alpha.3.1",
+      publisherId: "2p2nqsd0c76g0",
+      executable: "app\\ChatGPT.exe",
+      updateManifestUrl: "https://persistent.oaistatic.com/codex-app-prod/windows-store-update.json",
+    }),
     downloads: Object.freeze({
       arm64: Object.freeze({
-        url: "https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.721.41059.zip",
-        sha256: "e2b45056f3d1f8ab90f7f16249bfb5a40d09d0f8099f12ca0d8d7a8fdf9108ce",
+        url: "https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.727.40816.zip",
+        sha256: "fdbede9b8a28b5bf3bbf1213fa04291724faa6ed2d1d61bb04853bbdfebce219",
       }),
       x64: Object.freeze({
-        url: "https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-x64-26.721.41059.zip",
-        sha256: "f00b09d9e1f5138f055fa972e5243991b493423c41f5d78951dc2e21a84089f4",
+        url: "https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-x64-26.727.40816.zip",
+        sha256: "12622d916a3993d61fb52a318dcff7af7449eea5070cdd7e094da29f380e3374",
       }),
     }),
   }),
@@ -245,7 +255,7 @@ export const CURRENT_CONFIG_VERSION = 25;
 // — which is what made every `impel update` re-trigger macOS permission
 // prompts. Bump this ONLY when a code change alters the bytes of a built
 // bundle; leave it alone for changes that don't touch bundle contents.
-export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-25.1";
+export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-31.1";
 
 /** Parse the tenant's install manifest, or null when absent/corrupt. */
 export function readTenantManifest(homeDir = os.homedir(), tenantId = null) {
@@ -679,7 +689,7 @@ export function migrateLegacyClaudeAppSessions(userData, homeDir = os.homedir())
   return copied;
 }
 
-export async function fetchGatewayModels(config, fetchImpl = fetch) {
+export async function fetchGatewayModels(config, fetchImpl = fetch, { allowEmpty = false } = {}) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), 20000);
   try {
@@ -697,7 +707,9 @@ export async function fetchGatewayModels(config, fetchImpl = fetch) {
     }
     if (!Array.isArray(payload?.data)) throw new Error("response has no model data array");
     const models = payload.data.filter(isGatewayModel);
-    if (models.length === 0) throw new Error("gateway returned no supported models");
+    if (models.length === 0 && !(allowEmpty && isExplicitNoSeatCatalog(payload))) {
+      throw new Error("gateway returned no supported models");
+    }
     return { models, source: "gateway", version: payload.version ?? null };
   } finally {
     clearTimeout(timeout);
@@ -2213,6 +2225,7 @@ HERE=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
 VENDOR_APP="$HERE/../Resources/"${shellQuote(vendorBundleName)}
 export CODEX_HOME=${shellQuote(paths.chatgpt.codexHome)}
 export CODEX_AUTHAPI_BASE_URL=${shellQuote(codexAccountBaseUrl)}
+export CODEX_SPARKLE_ENABLED=false
 unset CODEX_ACCESS_TOKEN CODEX_API_KEY OPENAI_API_KEY OPENAI_BASE_URL
 secure_codex_home() {
   [ ! -L "$CODEX_HOME" ] || exit 1
@@ -2547,6 +2560,17 @@ function isGatewayModel(model) {
   return model && typeof model.id === "string" && (model.provider === "claude" || model.provider === "codex");
 }
 
+function isExplicitNoSeatCatalog(payload) {
+  const statuses = payload?.provider_status;
+  return Boolean(statuses
+    && typeof statuses === "object"
+    && !Array.isArray(statuses)
+    && ["claude", "codex"].every((provider) => (
+      statuses[provider]?.state === "no_seat"
+      && statuses[provider]?.routable === false
+    )));
+}
+
 function writeAtomic(target, contents, mode) {
   fs.mkdirSync(path.dirname(target), { recursive: true, mode: 0o700 });
   if (fs.existsSync(target) && fs.readFileSync(target, "utf8") === contents) {

package/src/commands/apps.js

@@ -76,7 +76,7 @@ export function selectCatalogAppTargets(
   requestedTargets,
   models,
   config,
-  { log = console.log } = {},
+  { log = console.log, allowNone = false } = {},
 ) {
   const supported = appTargetsSupportedByModels(
     requestedTargets,
@@ -87,6 +87,14 @@ export function selectCatalogAppTargets(
   const unavailable = requestedTargets.filter((target) => !supportedSet.has(target));
   if (unavailable.length === 0) return supported;
 
+  if (allowNone && supported.length === 0) {
+    for (const target of unavailable) {
+      const capability = APP_CAPABILITIES[target];
+      log(`Skipping ${capability.label}: the selected tenant has no ${capability.provider} models.`);
+    }
+    return supported;
+  }
+
   if (requestedTargets.length === 1 || supported.length === 0) {
     const target = unavailable[0];
     const capability = APP_CAPABILITIES[target];
@@ -297,9 +305,9 @@ export function openManagedLauncher(launcher, {
   return false;
 }
 
-async function fetchWindowsCatalog(config, io) {
+async function fetchWindowsCatalog(config, io, { allowEmpty = false } = {}) {
   try {
-    return await io.fetchModels(config);
+    return await io.fetchModels(config, undefined, { allowEmpty });
   } catch (error) {
     throw new Error(`tenant model catalog is unavailable (${redactSecretText(error.message)}); the Impel app profiles were not changed`);
   }
@@ -374,12 +382,25 @@ export async function reconcileWindowsTenantApps({
     ...overrides,
   };
   const config = explicitTenantAppConfig(baseConfig, tenant, targets);
-  const catalog = await fetchWindowsCatalog(config, io);
-  const actionTargets = selectCatalogAppTargets(targets, catalog.models, config, { log: io.log });
+  const catalog = await fetchWindowsCatalog(config, io, { allowEmpty: true });
+  const actionTargets = selectCatalogAppTargets(targets, catalog.models, config, {
+    log: io.log,
+    allowNone: true,
+  });
   const supported = new Set(actionTargets);
   const unsupported = targets.filter((target) => !supported.has(target));
   const userData = io.claudeUserData(environment, config.tenantId);
   const paths = appPaths(homeDir, config.tenantId, { claudeUserData: userData, tenantName: config.tenantName });
+  if (actionTargets.length === 0) {
+    return {
+      tenantId: config.tenantId,
+      targets: [],
+      unsupported,
+      paths,
+      verification: {},
+      failed: [],
+    };
+  }
   const vendorPaths = {};
   const preparedTargets = new Set(skipVendor ? actionTargets : skipVendorTargets);
 
@@ -501,13 +522,28 @@ export async function reconcileMacTenantApps({
   const config = explicitTenantAppConfig(baseConfig, tenant, targets);
   let catalog;
   try {
-    catalog = await io.fetchModels(config);
+    catalog = await io.fetchModels(config, undefined, { allowEmpty: true });
   } catch (error) {
     throw new Error(`tenant model catalog is unavailable (${redactSecretText(error?.message || error)}); no Impel app files were changed`);
   }
-  const actionTargets = selectCatalogAppTargets(targets, catalog.models, config, { log: io.log });
+  const actionTargets = selectCatalogAppTargets(targets, catalog.models, config, {
+    log: io.log,
+    allowNone: true,
+  });
   const supported = new Set(actionTargets);
   const unsupported = targets.filter((target) => !supported.has(target));
+  const paths = appPaths(homeDir, config.tenantId, { tenantName: config.tenantName });
+  if (actionTargets.length === 0) {
+    return {
+      tenantId: config.tenantId,
+      targets: [],
+      unsupported,
+      paths,
+      verification: {},
+      installed: [],
+      failed: [],
+    };
+  }
   const vendorPaths = {};
   const statuses = io.status(actionTargets, homeDir, config.tenantId, config.tenantName);
   for (const status of statuses) vendorPaths[status.target] ||= status.vendorPath;
@@ -549,7 +585,6 @@ export async function reconcileMacTenantApps({
     vendorPaths,
     writeBundles: staleTargets,
   }) : [];
-  const paths = appPaths(homeDir, config.tenantId, { tenantName: config.tenantName });
   const agentItems = [];
   for (const item of installed) {
     const { client, env, label } = appSkillTarget(item.target, paths);

package/src/windowsApps.js

@@ -11,9 +11,10 @@ import { environmentValue, nativeCommandInvocation } from "./nativeProcess.js";
 import { normalizeTenantId } from "./tenants.js";
 import { brandedEnvironmentName, RUNTIME_BRAND } from "./runtimeBrand.js";
 
-export const WINDOWS_CHATGPT_PACKAGE = "9PLM9XGG6VKS";
-export const WINDOWS_CHATGPT_PACKAGE_NAME = "OpenAI.Codex";
-export const WINDOWS_CHATGPT_PUBLISHER_ID = "2p2nqsd0c76g0";
+const WINDOWS_CHATGPT_PIN = PINNED_VENDOR_APPS.chatgpt.windows;
+export const WINDOWS_CHATGPT_PACKAGE = WINDOWS_CHATGPT_PIN.storeProductId;
+export const WINDOWS_CHATGPT_PACKAGE_NAME = WINDOWS_CHATGPT_PIN.packageName;
+export const WINDOWS_CHATGPT_PUBLISHER_ID = WINDOWS_CHATGPT_PIN.publisherId;
 const WINDOWS_CLAUDE_DOWNLOAD_TIMEOUT_MS = 5 * 60 * 1000;
 const WINDOWS_WINGET_UPDATE_NOT_APPLICABLE = 0x8A15002B;
 
@@ -60,20 +61,26 @@ function versionedSquirrelCandidates(root, readDirectory = fs.readdirSync) {
   }
 }
 
-function installedMsixChatGPT(environment, run = spawnSync) {
+function installedMsixChatGPT(environment, run = spawnSync, pin = null) {
   const script = [
     `$package = Get-AppxPackage -Name '${WINDOWS_CHATGPT_PACKAGE_NAME}' -ErrorAction SilentlyContinue`,
-    `$package = $package | Where-Object PublisherId -eq '${WINDOWS_CHATGPT_PUBLISHER_ID}' | Sort-Object Version -Descending | Select-Object -First 1`,
+    `$package = $package | Where-Object { $_.PublisherId -ceq '${WINDOWS_CHATGPT_PUBLISHER_ID}' -and (-not $env:IMPEL_CHATGPT_PACKAGE_VERSION -or $_.Version.ToString() -ceq $env:IMPEL_CHATGPT_PACKAGE_VERSION) } | Sort-Object Version -Descending | Select-Object -First 1`,
     "if ($package) {",
     "  $manifest = Get-AppxPackageManifest -Package $package",
     "  $relative = $manifest.Package.Applications.Application | Where-Object Id -eq 'App' | Select-Object -First 1 -ExpandProperty Executable",
-    "  if ($relative) { Join-Path $package.InstallLocation $relative }",
+    "  $normalized = ([string]$relative).Replace('/', '\\')",
+    "  $expected = ([string]$env:IMPEL_CHATGPT_PACKAGE_EXECUTABLE).Replace('/', '\\')",
+    "  if ($relative -and (-not $expected -or $normalized -ieq $expected)) { Join-Path $package.InstallLocation $relative }",
     "}",
   ].join("; ");
   try {
     const result = run("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script], {
       encoding: "utf8",
-      env: windowsPowerShellEnvironment(environment),
+      env: {
+        ...windowsPowerShellEnvironment(environment),
+        IMPEL_CHATGPT_PACKAGE_VERSION: pin?.packageVersion || "",
+        IMPEL_CHATGPT_PACKAGE_EXECUTABLE: pin?.executable || "",
+      },
       stdio: ["ignore", "pipe", "ignore"],
       windowsHide: true,
     });
@@ -141,9 +148,23 @@ export function findWindowsChatGPTApp(environment = process.env, dependencies =
   return msix && exists(msix) ? path.win32.normalize(msix) : null;
 }
 
-function wingetInvocation(action, environment, { packageId, source = "winget", scope = "user" }) {
+function pinnedWindowsChatGPTApp(environment = process.env, dependencies = {}) {
+  const exists = dependencies.isFile || isFile;
+  const pin = dependencies.pin || WINDOWS_CHATGPT_PIN;
+  const msix = (dependencies.queryMsix || installedMsixChatGPT)(environment, dependencies.run, pin);
+  return msix && exists(msix) ? path.win32.normalize(msix) : null;
+}
+
+function wingetInvocation(action, environment, {
+  packageId,
+  source = "winget",
+  scope = "user",
+}) {
   const verb = action === "update" ? "upgrade" : "install";
   const scopeArgs = scope ? ["--scope", scope] : [];
+  // Microsoft Store packages commonly report Version "Unknown" to winget.
+  // Without this switch winget refuses to consider their available update.
+  const updateArgs = action === "update" ? ["--include-unknown"] : [];
   return nativeCommandInvocation(
     "winget",
     [
@@ -154,6 +175,7 @@ function wingetInvocation(action, environment, { packageId, source = "winget", s
       "--source",
       source,
       ...scopeArgs,
+      ...updateArgs,
       "--silent",
       "--disable-interactivity",
       "--accept-package-agreements",
@@ -372,21 +394,31 @@ export async function ensureWindowsClaudeApp(_options = {}, dependencies = {}) {
 
 /** Install/update OpenAI's official ChatGPT/Codex Store package. */
 export function ensureWindowsChatGPTApp({ update = false } = {}, dependencies = {}) {
+  const find = dependencies.find || findWindowsChatGPTApp;
+  const findPinned = dependencies.findPinned || dependencies.find || pinnedWindowsChatGPTApp;
   const io = {
     environment: process.env,
-    find: findWindowsChatGPTApp,
+    find,
+    findPinned,
     logger: console,
+    pin: WINDOWS_CHATGPT_PIN,
     run: spawnSync,
     ...dependencies,
   };
   const before = io.find(io.environment);
-  if (before && !update) return { binary: before, action: "existing", result: null };
+  const pinnedBefore = io.findPinned(io.environment, { pin: io.pin, run: io.run });
+  if (pinnedBefore && !update) {
+    return { binary: pinnedBefore, action: "existing", result: null };
+  }
 
   // `impel update` also repairs missing surfaces. A missing Store package must
   // be installed, not sent to `winget upgrade` (which returns 0x8A150014).
   const shouldUpdate = Boolean(update && before);
+  // The msstore source rejects its AppX package version as a winget --version
+  // selector. Install the current Store package, then fail closed below unless
+  // Windows registered the exact reviewed package version and executable.
   const invocation = wingetInvocation(shouldUpdate ? "update" : "install", io.environment, {
-    packageId: WINDOWS_CHATGPT_PACKAGE,
+    packageId: io.pin.storeProductId,
     source: "msstore",
     scope: null,
   });
@@ -400,26 +432,36 @@ export function ensureWindowsChatGPTApp({ update = false } = {}, dependencies =
   } catch (error) {
     result = { status: null, error };
   }
-  const binary = io.find(io.environment) || before;
+  let resultBinary = io.findPinned(io.environment, { pin: io.pin, run: io.run });
   // winget uses an error HRESULT when `upgrade` finds an installed package
   // with no newer Store release. That is a healthy idempotent update result,
   // not an installation failure (APPINSTALLER_CLI_ERROR_UPDATE_NOT_APPLICABLE).
   const alreadyUpToDate = Boolean(
     shouldUpdate
-    && binary
+    && resultBinary
     && !result?.error
     && Number.isInteger(result?.status)
     && (result.status >>> 0) === WINDOWS_WINGET_UPDATE_NOT_APPLICABLE,
   );
   if (alreadyUpToDate) {
-    io.logger.log("ChatGPT/Codex: Microsoft Store package already up to date.");
+    io.logger.log(`ChatGPT/Codex: Microsoft Store package ${io.pin.packageVersion} already up to date.`);
+  }
+  const commandSucceeded = (result?.status === 0 && !result?.error) || alreadyUpToDate;
+  if (commandSucceeded && !resultBinary) {
+    result = {
+      ...result,
+      error: new Error(
+        `ChatGPT/Codex Store package ${io.pin.packageVersion} did not appear after winget completed`,
+      ),
+    };
   }
-  const succeeded = (result?.status === 0 && !result?.error) || alreadyUpToDate;
+  const succeeded = commandSucceeded && Boolean(resultBinary);
+  if (!succeeded) resultBinary = null;
   return {
-    binary,
+    binary: resultBinary,
     action: alreadyUpToDate
       ? "existing"
-      : succeeded ? (shouldUpdate ? "updated" : "installed") : (before ? "existing" : "install-failed"),
+      : succeeded ? (shouldUpdate ? "updated" : "installed") : "install-failed",
     result,
   };
 }
@@ -617,6 +659,7 @@ export function launchWindowsChatGPTApp(binary, {
     "CODEX_AUTHAPI_BASE_URL",
     "CODEX_ELECTRON_USER_DATA_PATH",
     "CODEX_HOME",
+    "CODEX_SPARKLE_ENABLED",
     "OPENAI_API_KEY",
     "OPENAI_BASE_URL",
   ]);
@@ -625,6 +668,7 @@ export function launchWindowsChatGPTApp(binary, {
   }
   environment.CODEX_HOME = codexHome;
   environment.CODEX_AUTHAPI_BASE_URL = `${gatewayUrl}/chatgpt_passthrough/backend-api`;
+  environment.CODEX_SPARKLE_ENABLED = "false";
   // Codex Desktop resolves this before acquiring Electron's single-instance
   // lock. Keep --user-data-dir below as a compatibility fallback for builds
   // that predate the dedicated desktop override.