impel-cli 0.18.15-beta.7 → 0.18.15-beta.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.18.15-beta.7",
+  "version": "0.18.15-beta.8",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/apps.js

@@ -269,7 +269,7 @@ export const CURRENT_CONFIG_VERSION = 26;
 // — which is what made every `impel update` re-trigger macOS permission
 // prompts. Bump this ONLY when a code change alters the bytes of a built
 // bundle; leave it alone for changes that don't touch bundle contents.
-export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-31.1";
+export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-31.2";
 
 /** Parse the tenant's install manifest, or null when absent/corrupt. */
 export function readTenantManifest(homeDir = os.homedir(), tenantId = null) {
@@ -347,7 +347,7 @@ export function bundleIsCurrent(status, {
       compatibility.vendorSignaturesPreserved === true
       && compatibility.resourceRoot === CHATGPT_RESOURCE_ROOT
       && compatibility.patches?.fastModeForGatewayAuth > 0
-      && compatibility.patches?.tenantDisplayNamePreload === 1
+      && compatibility.patches?.tenantDisplayNamePreload === 2
     )),
   );
 }
@@ -1772,7 +1772,7 @@ function writeVendoredChatGPTBundleLocked(paths, vendorPath, gatewayUrl, homeDir
       patches: {
         fastModeForGatewayAuth: fastModePatchCount,
         desktopAPIForGatewayAuth: 0,
-        tenantDisplayNamePreload: 1,
+        tenantDisplayNamePreload: 2,
       },
       vendorSignaturesPreserved: true,
       resourceRoot: CHATGPT_RESOURCE_ROOT,
@@ -2299,6 +2299,7 @@ secure_codex_home
 BROWSER_DATA=${shellQuote(paths.chatgpt.browserData)}
 mkdir -p "$BROWSER_DATA"
 export IMPEL_APP_DISPLAY_NAME=${shellQuote(paths.chatgpt.displayName)}
+export IMPEL_APP_BUNDLE_ID=${shellQuote(paths.chatgpt.bundleIdentifier)}
 PRELOAD="$HERE/../Resources/impel-chatgpt-preload.cjs"
 export NODE_OPTIONS="--require=\\\"$PRELOAD\\\""
 # Electron resolves resources from the Impel wrapper when the nested app is
@@ -2313,13 +2314,14 @@ function vendoredChatGPTDisplayNamePreload() {
   return `"use strict";
 
 const displayName = process.env.IMPEL_APP_DISPLAY_NAME;
-if (process.type === "browser" && displayName) {
+const bundleIdentifier = process.env.IMPEL_APP_BUNDLE_ID;
+if (process.type === "browser" && displayName && bundleIdentifier) {
   const Module = require("node:module");
   const path = require("node:path");
   const load = Module._load;
   let objc;
   let appKit;
-  let launchServicesNamed = false;
+  let launchServicesIdentified = false;
   let activationPolicyRefreshed = false;
 
   const loadNativeBridge = () => {
@@ -2331,20 +2333,31 @@ if (process.type === "browser" && displayName) {
     return { objc, appKit };
   };
 
-  const setLaunchServicesApplicationName = () => {
-    if (launchServicesNamed) return;
+  const setLaunchServicesApplicationIdentity = () => {
+    if (launchServicesIdentified) return;
     try {
       const native = loadNativeBridge();
       new native.objc.NobjcLibrary(
         "/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices",
       );
       const title = native.appKit.NSString.stringWithUTF8String$(displayName);
+      const identifier = native.appKit.NSString.stringWithUTF8String$(bundleIdentifier);
       const info = native.appKit.NSMutableDictionary.dictionaryWithDictionary$(
         native.appKit.NSBundle.mainBundle().infoDictionary(),
       );
       for (const key of ["CFBundleName", "CFBundleDisplayName"]) {
         info.setObject$forKey$(title, native.appKit.NSString.stringWithUTF8String$(key));
       }
+      // The signed vendor executable runs from the nested ChatGPT.app, so
+      // LaunchServices initially checks it in as com.openai.codex. When the
+      // native app is also open, Dock groups both processes under ChatGPT even
+      // though LSDisplayName was already tenant-branded. Check the process in
+      // again with the unique outer-wrapper identity to keep each tenant's
+      // Dock item distinct while preserving the vendor executable signature.
+      info.setObject$forKey$(
+        identifier,
+        native.appKit.NSString.stringWithUTF8String$("CFBundleIdentifier"),
+      );
       native.objc.callFunction(
         "_LSSetApplicationLaunchServicesServerConnectionStatus",
         { returns: "v", args: ["Q", "@"] },
@@ -2368,7 +2381,7 @@ if (process.type === "browser" && displayName) {
         title,
         null,
       );
-      launchServicesNamed = status === 0;
+      launchServicesIdentified = status === 0;
     } catch {
       // Keep the signed vendor app usable if LaunchServices changes this
       // private-but-established process-title API in a future macOS release.
@@ -2403,7 +2416,7 @@ if (process.type === "browser" && displayName) {
       const setName = loaded.app.setName.bind(loaded.app);
       setName(displayName);
       loaded.app.setName = () => setName(displayName);
-      setLaunchServicesApplicationName();
+      setLaunchServicesApplicationIdentity();
       setNativeApplicationMenuTitle();
       const setApplicationMenu = loaded.Menu.setApplicationMenu.bind(loaded.Menu);
       loaded.Menu.setApplicationMenu = (menu) => {
@@ -2414,11 +2427,11 @@ if (process.type === "browser" && displayName) {
           loaded.app.setActivationPolicy("accessory");
           setTimeout(() => {
             loaded.app.setActivationPolicy("regular");
-            launchServicesNamed = false;
-            setLaunchServicesApplicationName();
+            launchServicesIdentified = false;
+            setLaunchServicesApplicationIdentity();
             setApplicationMenu(menu);
             setNativeApplicationMenuTitle();
-          }, 0);
+          }, 100);
         }
         setTimeout(setNativeApplicationMenuTitle, 0);
         return result;