impel-cli 0.18.15-beta.7 → 0.18.15-beta.9

package/README.md

@@ -128,7 +128,7 @@ when a compatible version or commit changes. If Cursor changes any reviewed
 local-agent, provider-priority, or model-transport source contract, Impel keeps
 the previous managed generation intact and refuses the update until the patch is
 reviewed. `experimental cursor open` performs this prepare step before every
-launch. A real packaged GUI battle test proves that Cursor 3.12.17 can run
+launch. A real packaged GUI battle test proves that Cursor 3.13.25 can run
 Agent through the selected tenant's gateway with Cursor's own non-secret smoke
 identity. The logical `default` model is resolved by the gateway to its
 registered Cursor default; explicit gateway models continue to use Responses.

package/docs/experimental-managed-cursor.md

@@ -2,7 +2,7 @@
 
 This hidden macOS experiment runs the stable Cursor desktop Agent against the
 selected Impel tenant without a real Cursor account or Cursor-routed BYOK. It is
-validated against Cursor 3.12.17 and remains separate from the public
+validated against Cursor 3.13.25 and remains separate from the public
 `impel setup` / `impel update` state machine:
 
 ```sh

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.18.15-beta.7",
+  "version": "0.18.15-beta.9",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/apps.js

@@ -269,7 +269,7 @@ export const CURRENT_CONFIG_VERSION = 26;
 // — which is what made every `impel update` re-trigger macOS permission
 // prompts. Bump this ONLY when a code change alters the bytes of a built
 // bundle; leave it alone for changes that don't touch bundle contents.
-export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-31.1";
+export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-31.2";
 
 /** Parse the tenant's install manifest, or null when absent/corrupt. */
 export function readTenantManifest(homeDir = os.homedir(), tenantId = null) {
@@ -347,7 +347,7 @@ export function bundleIsCurrent(status, {
       compatibility.vendorSignaturesPreserved === true
       && compatibility.resourceRoot === CHATGPT_RESOURCE_ROOT
       && compatibility.patches?.fastModeForGatewayAuth > 0
-      && compatibility.patches?.tenantDisplayNamePreload === 1
+      && compatibility.patches?.tenantDisplayNamePreload === 2
     )),
   );
 }
@@ -1772,7 +1772,7 @@ function writeVendoredChatGPTBundleLocked(paths, vendorPath, gatewayUrl, homeDir
       patches: {
         fastModeForGatewayAuth: fastModePatchCount,
         desktopAPIForGatewayAuth: 0,
-        tenantDisplayNamePreload: 1,
+        tenantDisplayNamePreload: 2,
       },
       vendorSignaturesPreserved: true,
       resourceRoot: CHATGPT_RESOURCE_ROOT,
@@ -2299,6 +2299,7 @@ secure_codex_home
 BROWSER_DATA=${shellQuote(paths.chatgpt.browserData)}
 mkdir -p "$BROWSER_DATA"
 export IMPEL_APP_DISPLAY_NAME=${shellQuote(paths.chatgpt.displayName)}
+export IMPEL_APP_BUNDLE_ID=${shellQuote(paths.chatgpt.bundleIdentifier)}
 PRELOAD="$HERE/../Resources/impel-chatgpt-preload.cjs"
 export NODE_OPTIONS="--require=\\\"$PRELOAD\\\""
 # Electron resolves resources from the Impel wrapper when the nested app is
@@ -2313,13 +2314,14 @@ function vendoredChatGPTDisplayNamePreload() {
   return `"use strict";
 
 const displayName = process.env.IMPEL_APP_DISPLAY_NAME;
-if (process.type === "browser" && displayName) {
+const bundleIdentifier = process.env.IMPEL_APP_BUNDLE_ID;
+if (process.type === "browser" && displayName && bundleIdentifier) {
   const Module = require("node:module");
   const path = require("node:path");
   const load = Module._load;
   let objc;
   let appKit;
-  let launchServicesNamed = false;
+  let launchServicesIdentified = false;
   let activationPolicyRefreshed = false;
 
   const loadNativeBridge = () => {
@@ -2331,20 +2333,31 @@ if (process.type === "browser" && displayName) {
     return { objc, appKit };
   };
 
-  const setLaunchServicesApplicationName = () => {
-    if (launchServicesNamed) return;
+  const setLaunchServicesApplicationIdentity = () => {
+    if (launchServicesIdentified) return;
     try {
       const native = loadNativeBridge();
       new native.objc.NobjcLibrary(
         "/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices",
       );
       const title = native.appKit.NSString.stringWithUTF8String$(displayName);
+      const identifier = native.appKit.NSString.stringWithUTF8String$(bundleIdentifier);
       const info = native.appKit.NSMutableDictionary.dictionaryWithDictionary$(
         native.appKit.NSBundle.mainBundle().infoDictionary(),
       );
       for (const key of ["CFBundleName", "CFBundleDisplayName"]) {
         info.setObject$forKey$(title, native.appKit.NSString.stringWithUTF8String$(key));
       }
+      // The signed vendor executable runs from the nested ChatGPT.app, so
+      // LaunchServices initially checks it in as com.openai.codex. When the
+      // native app is also open, Dock groups both processes under ChatGPT even
+      // though LSDisplayName was already tenant-branded. Check the process in
+      // again with the unique outer-wrapper identity to keep each tenant's
+      // Dock item distinct while preserving the vendor executable signature.
+      info.setObject$forKey$(
+        identifier,
+        native.appKit.NSString.stringWithUTF8String$("CFBundleIdentifier"),
+      );
       native.objc.callFunction(
         "_LSSetApplicationLaunchServicesServerConnectionStatus",
         { returns: "v", args: ["Q", "@"] },
@@ -2368,7 +2381,7 @@ if (process.type === "browser" && displayName) {
         title,
         null,
       );
-      launchServicesNamed = status === 0;
+      launchServicesIdentified = status === 0;
     } catch {
       // Keep the signed vendor app usable if LaunchServices changes this
       // private-but-established process-title API in a future macOS release.
@@ -2403,7 +2416,7 @@ if (process.type === "browser" && displayName) {
       const setName = loaded.app.setName.bind(loaded.app);
       setName(displayName);
       loaded.app.setName = () => setName(displayName);
-      setLaunchServicesApplicationName();
+      setLaunchServicesApplicationIdentity();
       setNativeApplicationMenuTitle();
       const setApplicationMenu = loaded.Menu.setApplicationMenu.bind(loaded.Menu);
       loaded.Menu.setApplicationMenu = (menu) => {
@@ -2414,11 +2427,11 @@ if (process.type === "browser" && displayName) {
           loaded.app.setActivationPolicy("accessory");
           setTimeout(() => {
             loaded.app.setActivationPolicy("regular");
-            launchServicesNamed = false;
-            setLaunchServicesApplicationName();
+            launchServicesIdentified = false;
+            setLaunchServicesApplicationIdentity();
             setApplicationMenu(menu);
             setNativeApplicationMenuTitle();
-          }, 0);
+          }, 100);
         }
         setTimeout(setNativeApplicationMenuTitle, 0);
         return result;

package/src/cursorLocal.js

@@ -36,7 +36,7 @@ const CURSOR_VERIFIED_EXTENSIONS = Object.freeze([
 
 const CURSOR_LOCAL_RUNTIME_FILE = "extensions/cursor-local-agent-runtime/dist/main.js";
 const CURSOR_REASONING_TRANSPORT_DISABLED = 'void 0===a?(delete e.reasoning,delete e.reasoning_effort):"output_config.effort"===a.param?';
-const CURSOR_REASONING_TRANSPORT_ENABLED = 'void 0===a?"responses"===o?(e.reasoning=Object.assign(Object.assign({},eBt(e.reasoning)?e.reasoning:{}),{effort:i}),delete e.reasoning_effort):(delete e.reasoning,delete e.reasoning_effort):"output_config.effort"===a.param?';
+const CURSOR_REASONING_TRANSPORT_ENABLED = 'void 0===a?"responses"===o?(e.reasoning=Object.assign(Object.assign({},qRt(e.reasoning)?e.reasoning:{}),{effort:i}),delete e.reasoning_effort):(delete e.reasoning,delete e.reasoning_effort):"output_config.effort"===a.param?';
 const CURSOR_HELPER_BUNDLES = Object.freeze([
   "Cursor Helper (GPU).app",
   "Cursor Helper (Plugin).app",
@@ -47,8 +47,8 @@ const PRODUCT_FILE = "product.json";
 const PACKAGE_FILE = "package.json";
 const LOCAL_MODE_DISABLED = "localMode:!1";
 const LOCAL_MODE_ENABLED = "localMode:!0";
-const PERSONAL_DATA_IMPORT_GUARD = "if(!os.localMode)";
-const MANAGED_DATA_IMPORT_GUARD = "if(os.localMode )";
+const PERSONAL_DATA_IMPORT_GUARD = "if(!Ui.localMode)";
+const MANAGED_DATA_IMPORT_GUARD = "if(Ui.localMode )";
 const DISABLE_LIBRARY_VALIDATION_ENTITLEMENT = "com.apple.security.cs.disable-library-validation";
 const DIRECT_PROVIDER_ENV_KEYS = Object.freeze([
   "ANTHROPIC_API_KEY",
@@ -332,8 +332,13 @@ function assertLocalRuntimeContract(resourcesRoot) {
     throw new Error(`Cursor local-agent runtime contract changed (missing ${missing.join(", ")}); review this update before use`);
   }
   const responseEndpointSelection = /\.includes\("responses"\)\|\|[^?]{0,120}\.includes\("openai_responses"\)\?"responses":/u;
-  const extendedPickerCompatibility = /\.includes\("chat_completions"\)\|\|[^)]{0,120}\.includes\("anthropic_messages"\)/u;
-  if (!responseEndpointSelection.test(runtime) || !extendedPickerCompatibility.test(runtime)) {
+  const chatCompletionsEndpointSelection = /\.includes\("chat_completions"\)\|\|[^?]{0,120}\.includes\("openai_chat"\)\?"chat_completions":/u;
+  const anthropicApiTypeSelection = /\.includes\("anthropic_messages"\)&&![^?]{0,80}\?"anthropic_messages":"openai_compatible"/u;
+  if (
+    !responseEndpointSelection.test(runtime)
+    || !chatCompletionsEndpointSelection.test(runtime)
+    || !anthropicApiTypeSelection.test(runtime)
+  ) {
     throw new Error("Cursor local-agent Responses/model-picker contract changed; review this update before use");
   }
   if (countOccurrences(runtime, CURSOR_REASONING_TRANSPORT_DISABLED) !== 1) {